last executing test programs: 12.435095273s ago: executing program 2 (id=757): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000000), 0x1, 0x4e9, &(0x7f00000000c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x340, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x20000000, 0x20000000, 0x3, 0x7, 0x0, 0x40}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd8, 0x0, {}, [@common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r3, 0x1}, 0x1c}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) close(r7) 11.570361016s ago: executing program 2 (id=764): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x40}}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180), 0x4) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 9.25864376s ago: executing program 2 (id=773): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xa, {"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", 0x1000}}, 0x1006) syz_open_dev$evdev(0x0, 0xb, 0x20000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004080}, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000000000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) fstatfs(0xffffffffffffffff, 0x0) r3 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/40, 0x54}], 0x1) 7.770632133s ago: executing program 2 (id=780): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x7bd}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000200)=&(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x12, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) getpid() 7.085592273s ago: executing program 1 (id=781): socket(0x23, 0x3, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x66, 0x0, 0xc, 0x6, 0x0, @rand_addr=0x64010101, @remote}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0xffe}}}}}}, 0x0) 6.487921943s ago: executing program 1 (id=782): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)='%pB \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000300)={r7, 0x1, 0x6, @link_local}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsync(0xffffffffffffffff) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r8, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_mount_image$fuse(0x0, &(0x7f00000027c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r9 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070003ff00000000000000020003"], 0x58) close(r9) 5.593420676s ago: executing program 1 (id=787): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) chmod(&(0x7f0000000180)='./file1\x00', 0x4) 5.541820517s ago: executing program 1 (id=788): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0x408, 0x4) recvmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001900)=""/4096, 0x1000}, 0x1}], 0x1, 0x45833af92e4b39ff, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = accept$packet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000000)='.\x00', 0x400017e) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000001006f9595d6538c6dc80804fa586226a23d71aafd23663ae6610952721f71faa0f9bbbf412166404116aa2b81a0443a169f41457a94c3cc54fe08aab15e489617968f5436df3a99f504fa0088e8b1448974a9b93c6085171af52ad83dc1a0d9db61bc4258ff449644dd8c597ebbcbc361f54e298ca8e5d80a5f64c515683dc72d205fc8529a6f849ee1806cc8d60ce55bbc50c1742c19f75d4d0081b6e6ccfb837bb993d2e941da721d6d88c6ecc94d80a1e22bd8e625"], 0x3, 0x174, &(0x7f0000000240)="$eJzsmD9PwkAYxp9rESJxcMZBE0lEI6UtalxMJPEDmOCfsEGkErSIQgdh85MYv4CLu/GjKJMLo3NN2wNOouKgJsbnN7z3vNe317u3ydOkIIT8W3pPL48XvcaKDmAGaSTk/LM+qtGU+tVssTl3vZ28K9+WdlL3/fH1BADf//rzYwAeCjo8mfv+27vTctyDNtT70LAs9SEEDKnL0HAgtQOBktQnim4G9YZxXHcd46jpVgNhBsEKgh2E/Pj++lcCVWV/Qrne7nRPK67rtH5QTOpfv6BhS9mf+r4GvTGV/lnQYEmdh0BR6k0kBr2JWqKcPxUbra//8vkpKCj+mhj5k38jsKT4U0zxj5zXOM+1O91svVGpOTXnzLbzG+aaaa7budCIoviJ/02H/pRU1p/6oDYu4riseF7LiuIwt6P4nuPGQ//TkFmMciHnVMLvwaxYCIaMLnNCCCGEEEIIIYQQQgj5duYhwr+gE7B3w+rXAAAA//9nP3XZ") r7 = open(&(0x7f0000000000)='./file1\x00', 0x4000, 0x0) preadv2(r7, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000740)=""/96, 0x60}, {&(0x7f0000000580)=""/54, 0x36}], 0x3, 0x0, 0x0, 0x0) 3.938930681s ago: executing program 4 (id=790): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000d16db2c7430cc45ff31610e07ce73aa8acda5ed78c9f3baa5751569940386bd1ab72add375b11474db3f967132aec82fa2de33425cbe45d86322359cbe30fc8a1da1ee8f7ee8ac0de46e32c0525729ee6b594455b8579a8db2c52c1b64c0392a8b9c31661518e2a8", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) rename(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000380)='./file1\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) prctl$PR_SET_SECUREBITS(0x1c, 0x7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000140)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@dioread_nolock}, {@bsdgroups}]}, 0x6, 0x4cd, &(0x7f0000000c80)="$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") r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x13, 0xa01, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) setfsuid(0xee00) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB="00000000000000001700"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='percpu_free_percpu\x00'}, 0x18) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffff9c, 0x0, 0x2) 3.900935461s ago: executing program 3 (id=791): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3f}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x800000f0}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x0) pwrite64(r1, &(0x7f0000000080)='3', 0x1, 0x0) 3.718790524s ago: executing program 2 (id=792): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() timerfd_create(0x9, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x1400, 0xffffffffffffffff, 0x87, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', 0x0, 0x1010821, &(0x7f0000000240)={[], [{@defcontext={'defcontext', 0x3d, 'system_u'}}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000840)={[{@bh}, {@nolazytime}, {@noblock_validity}, {@barrier}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r6}, 0x10) 3.574497876s ago: executing program 1 (id=793): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x7bd}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000200)=&(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) getpid() 2.423645044s ago: executing program 2 (id=794): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) futex(0x0, 0x9, 0x1, &(0x7f0000000300)={0x77359400}, 0x0, 0xfffffffe) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000c00)={0x34, &(0x7f0000000000)={0x0, 0xa, 0x2, "2301"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000480)={0x0, 0x14, 0x1d, "96d79086f8f66deda2dc8d5ce0e773197f7e874e2762e5815ccf5d7757"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000180)=@abs={0x1, 0x5c, 0x1}, 0x6e, 0x0}, 0x20000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) 2.413558454s ago: executing program 4 (id=795): socket(0x23, 0x3, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x66, 0x0, 0xc, 0x6, 0x0, @rand_addr=0x64010101, @remote}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0xffe}}}}}}, 0x0) 2.342450015s ago: executing program 3 (id=796): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setpgid(0x0, 0x0) 2.341930295s ago: executing program 0 (id=797): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) 2.328327725s ago: executing program 3 (id=798): pipe2$9p(&(0x7f0000000240), 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r4}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x14, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.265123676s ago: executing program 4 (id=799): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xa, {"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", 0x1000}}, 0x1006) syz_open_dev$evdev(0x0, 0xb, 0x20000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="0300000055bc69741f2b73de40afe1010000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500190000000000050018"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000000000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) fstatfs(0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r5, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/40, 0x54}], 0x1) 2.221521627s ago: executing program 0 (id=800): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)='%pB \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000300)={r7, 0x1, 0x6, @link_local}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsync(0xffffffffffffffff) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r8, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000027c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070003ff00000000000000020003"], 0x58) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000040)="2862ce73d8c69566b4", &(0x7f0000000080)=""/6, 0x4}, 0x20) execve(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) 1.33194475s ago: executing program 3 (id=801): pipe2$9p(&(0x7f0000000240), 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r4}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x14, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.33044523s ago: executing program 4 (id=802): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3f}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x800000f0}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x0) pwrite64(r1, &(0x7f0000000080)='3', 0x1, 0x0) 1.240422791s ago: executing program 0 (id=803): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000d16db2c7430cc45ff31610e07ce73aa8acda5ed78c9f3baa5751569940386bd1ab72add375b11474db3f967132aec82fa2de33425cbe45d86322359cbe30fc8a1da1ee8f7ee8ac0de46e32c0525729ee6b594455b8579a8db2c52c1b64c0392a8b9c31661518e2a8", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00'}, 0x10) rename(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000380)='./file1\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) prctl$PR_SET_SECUREBITS(0x1c, 0x7) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x13, 0xa01, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffff9c, 0x0, 0x2) 1.147376873s ago: executing program 0 (id=804): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 827.282368ms ago: executing program 0 (id=805): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x101002, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988ca", 0xe}], 0x1) (fail_nth: 4) 413.294834ms ago: executing program 3 (id=806): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3f}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x800000f0}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x0) pwrite64(r1, &(0x7f0000000080)='3', 0x1, 0x0) 251.267906ms ago: executing program 0 (id=807): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000d16db2c7430cc45ff31610e07ce73aa8acda5ed78c9f3baa5751569940386bd1ab72add375b11474db3f967132aec82fa2de33425cbe45d86322359cbe30fc8a1da1ee8f7ee8ac0de46e32c0525729ee6b594455b8579a8db2c52c1b64c0392a8b9c31661518e2a8", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) rename(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000380)='./file1\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) prctl$PR_SET_SECUREBITS(0x1c, 0x7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000140)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@dioread_nolock}, {@bsdgroups}]}, 0x6, 0x4cd, &(0x7f0000000c80)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpi8Ezi3Xg03jTxqkfjyT8ADx5MDAkxXABPa2Z3pt3ur+7CtqXs55Ns+zwzz8zzPDPzzD77PDsbwMAaS/8kEf+LiFsR8VQtujLBWO3f/btXZx7cvToTi5XKqX+Sarp7aTyTb7c9i4wXIgpfJg07rJm/fOXcdLk8dymLTy6c/2xy/vKV18+enz4zd2buwtSJE8eOHjn+5tQbvVeqRX5pve7t/eLivj3vnr75/kwxXz6S/a+vR1vF3oox1mHdK73t6rG3oy6cNB+na+taGLo2kl3WpbT9Xy0fPL3RBQLWTaVSqQy3X71YaXS9aQmwaSWx0SUANkb+Rp9+/s1f69T1eCzcOVn7AJTW+372qq0pRiFLU2r4fNtPYxHx8eK/36Sv6DQO8ecaFQAAGDi/nMx7go39v0Lsrkv3/2wOZTQino6InRHxTETsiohnI6ppn4uI5xszSCIqHfLf1RBfzv/HbBahcPuRK9lB2v97K5vbWtn/y3t/MTqUxXZE5B3mucPZMRmP0vAnZ8tzR9rsf8sq+df3/9JXmn/eF8zKcbvYMEA3O70w/XC1bXbnesTeYmP9k2J64vJpnCQi9kTE3h72O1oXPvvad/uWIqWV6Vavf1WlxZRez/NxrVS+jXi1dv4XY8X5X84x6Tw/OTkS5bnDk+lVcLhlHr/9fuODdvmvWv+f/mrc5J3jP5961GovSc//trrrP/L52+X6jyYRydJ87XxEZai3PG788VV1v2OHmtc97PW/JfmoGs7b1+fTCwuXjkRsSd5rXj61vG0ez9On9R8/1Lr978y2SY/ECxGRXsQvRsRLEbE/K/uBiDgYES2qtuTXt1/+tN26Lq//NZPWf7bl/W/F+V+er+8ykG+cLhk6d+DWgzY3j+7O/7FqaDxb0vr+l6y4RXRb0kc7egAAALA5FKL63f/CxFK4UJiYqI0B7YpthfLF+YX9EXFhtvaMwGiUCvlIV208uJTk45+jdfGphvjRbNz466Gt1fjEzMXy7EZXHgbc9mqbT5raf+rvHsd5gU2oD/NowCa1WvvffXOdCgKsO+//MLjq2v9imySLvikDTybv/zC4WrX/a/F9x2cX3DNg86toyzDQtH8YXMX4cClcfey55dO2wJPI+z8MpF6f6+8tUBluvWokWvxiwMjaFGNri7w2JJD2rPq4w1JEdJd468NkkXcB2//CQ6G3HQ5H86qh6LRV0sPvOOSB9KismvjM7r5f/PlvovT7svlhuZ2WujzdfQpsyO0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg7/4LAAD///QJ1ng=") r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x13, 0xa01, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) setfsuid(0xee00) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB="00000000000000001700"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='percpu_free_percpu\x00'}, 0x18) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffff9c, 0x0, 0x2) 246.860677ms ago: executing program 4 (id=808): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x2000000, &(0x7f0000000000), 0x1, 0x787, &(0x7f0000001040)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[], 0x3f) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@filter={'filter\x00', 0xe, 0x4, 0x350, 0xffffffff, 0x0, 0x1f8, 0x1f8, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x20}, 0xff, 0xffffffff, 'veth1\x00', 'vxcan1\x00', {0xff}, {}, 0x33, 0x2, 0x10}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4, 0x1}}, @common=@icmp={{0x28}, {0x0, "1215", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0xc, 0x0, 0x3, 0x3, 0x1, 0x4], 0x5, 0x1}, {0x3, [0x3, 0x2, 0x2, 0x6, 0x5, 0x8], 0x2, 0x5}}}}, {{@ip={@loopback, @loopback, 0xd0b290d72275b4a7, 0xffffffff, 'rose0\x00', 'bridge_slave_0\x00', {0xff}, {}, 0xff, 0x1, 0x10}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0x10, "b899"}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0x96d, 0x500) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r2, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x814}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c800}, 0x41) 24.25092ms ago: executing program 4 (id=809): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setpgid(0x0, 0x0) 5.29929ms ago: executing program 3 (id=810): socket(0x23, 0x3, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x66, 0x0, 0xc, 0x6, 0x0, @rand_addr=0x64010101, @remote}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0xffe}}}}}}, 0x0) 0s ago: executing program 1 (id=811): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0x408, 0x4) recvmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001900)=""/4096, 0x1000}, 0x1}], 0x1, 0x45833af92e4b39ff, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = accept$packet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000000)='.\x00', 0x400017e) kernel console output (not intermixed with test programs): writeback. [ 108.892333][ T1740] loop2: detected capacity change from 0 to 1024 [ 109.145885][ T1740] EXT4-fs (loop2): Ignoring removed oldalloc option [ 109.292931][ T1740] EXT4-fs (loop2): Ignoring removed orlov option [ 109.530484][ T1740] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000000002,journal_dev=0x0000000000001045,oldalloc,noquota,data_err=ignore,barrier=0x0000000000000002,delalloc,errors=continue,orlov,user_xattr,quota,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 109.942269][ T1757] loop3: detected capacity change from 0 to 512 [ 110.023367][ T1757] EXT4-fs (loop3): Ignoring removed nobh option [ 110.033044][ T1757] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 110.073607][ T1757] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.412: invalid indirect mapped block 256 (level 2) [ 110.099701][ T1757] EXT4-fs (loop3): 2 truncates cleaned up [ 110.099723][ T1757] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,nojournal_checksum,dioread_nolock,bsdgroups,,errors=continue. Quota mode: writeback. [ 110.241678][ T1774] loop3: detected capacity change from 0 to 512 [ 110.252053][ T1774] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 9 [ 110.634443][ T1783] loop0: detected capacity change from 0 to 512 [ 110.703560][ T1783] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 9 [ 111.138658][ T30] audit: type=1400 audit(1751778237.949:6630): avc: denied { read } for pid=1788 comm="syz.1.423" path="/dev/input/event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 111.177034][ T30] audit: type=1400 audit(1751778237.979:6631): avc: denied { read write } for pid=286 comm="syz-executor" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 111.388148][ T30] audit: type=1400 audit(1751778237.979:6632): avc: denied { open } for pid=286 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 111.477280][ T30] audit: type=1400 audit(1751778237.979:6633): avc: denied { ioctl } for pid=286 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 111.512181][ T30] audit: type=1400 audit(1751778237.989:6634): avc: denied { prog_load } for pid=1795 comm="syz.2.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 111.552176][ T30] audit: type=1400 audit(1751778237.989:6635): avc: denied { bpf } for pid=1795 comm="syz.2.426" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 111.577184][ T30] audit: type=1400 audit(1751778237.989:6636): avc: denied { perfmon } for pid=1795 comm="syz.2.426" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 111.602543][ T1802] loop0: detected capacity change from 0 to 512 [ 111.619602][ T1802] EXT4-fs (loop0): Ignoring removed nobh option [ 111.626490][ T30] audit: type=1400 audit(1751778238.069:6637): avc: denied { map_create } for pid=1790 comm="syz.4.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 111.647929][ T1802] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 111.660512][ T30] audit: type=1400 audit(1751778238.069:6638): avc: denied { map_read map_write } for pid=1790 comm="syz.4.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 111.680552][ T30] audit: type=1400 audit(1751778238.119:6639): avc: denied { prog_run } for pid=1790 comm="syz.4.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 111.714081][ T1802] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.428: invalid indirect mapped block 256 (level 2) [ 111.732588][ T1802] EXT4-fs (loop0): 2 truncates cleaned up [ 111.739387][ T1802] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,nojournal_checksum,dioread_nolock,bsdgroups,,errors=continue. Quota mode: writeback. [ 111.851650][ T1808] loop0: detected capacity change from 0 to 512 [ 111.942664][ T1808] EXT4-fs (loop0): Ignoring removed nobh option [ 111.942710][ T1808] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 111.962941][ T1808] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.440: invalid indirect mapped block 256 (level 2) [ 111.978009][ T1808] EXT4-fs (loop0): 2 truncates cleaned up [ 111.986209][ T1808] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,nojournal_checksum,dioread_nolock,bsdgroups,,errors=continue. Quota mode: writeback. [ 112.033759][ T1823] loop4: detected capacity change from 0 to 512 [ 112.051201][ T1821] loop2: detected capacity change from 0 to 8192 [ 112.060845][ T1823] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 112.072546][ T1823] EXT4-fs (loop4): 1 truncate cleaned up [ 112.078223][ T1823] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 112.117297][ T369] loop2: p1 p2[DM] p4 [ 112.121997][ T369] loop2: p1 size 196608 extends beyond EOD, truncated [ 112.130199][ T369] loop2: p2 start 4292936063 is beyond EOD, truncated [ 112.137529][ T369] loop2: p4 size 50331648 extends beyond EOD, truncated [ 112.176530][ T1821] loop2: p1 p2[DM] p4 [ 112.180688][ T1821] loop2: p1 size 196608 extends beyond EOD, truncated [ 112.187963][ T1821] loop2: p2 start 4292936063 is beyond EOD, truncated [ 112.194818][ T1821] loop2: p4 size 50331648 extends beyond EOD, truncated [ 113.249446][ T1838] fuse: Bad value for 'fd' [ 113.454485][ T1843] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 113.464089][ T1843] SELinux: security_context_str_to_sid(system_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 113.479542][ T1843] loop4: detected capacity change from 0 to 512 [ 113.544732][ T1843] EXT4-fs (loop4): Ignoring removed bh option [ 113.682932][ T1843] EXT4-fs (loop4): orphan cleanup on readonly fs [ 113.692125][ T1843] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.442: bg 0: block 248: padding at end of block bitmap is not set [ 113.708400][ T1843] EXT4-fs error (device loop4): ext4_acquire_dquot:6195: comm syz.4.442: Failed to acquire dquot type 1 [ 113.721315][ T1843] EXT4-fs (loop4): 1 truncate cleaned up [ 113.727970][ T1843] EXT4-fs (loop4): mounted filesystem without journal. Opts: bh,nolazytime,noblock_validity,barrier,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 114.634995][ T1858] loop4: detected capacity change from 0 to 512 [ 114.682295][ T1858] EXT4-fs (loop4): Ignoring removed nobh option [ 114.688598][ T1858] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 114.718647][ T1858] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.447: invalid indirect mapped block 256 (level 2) [ 114.732202][ T26] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 114.732733][ T1858] EXT4-fs (loop4): 2 truncates cleaned up [ 114.745471][ T1858] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,nojournal_checksum,dioread_nolock,bsdgroups,,errors=continue. Quota mode: writeback. [ 114.882091][ T1868] loop4: detected capacity change from 0 to 512 [ 115.042334][ T26] usb 2-1: Using ep0 maxpacket: 16 [ 115.090192][ T1868] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 9 [ 115.442569][ T26] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 115.465799][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.500237][ T26] usb 2-1: Product: syz [ 115.523915][ T26] usb 2-1: Manufacturer: syz [ 115.529036][ T26] usb 2-1: SerialNumber: syz [ 115.924296][ T26] usb 2-1: config 0 descriptor?? [ 115.962974][ T26] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 115.964993][ T1874] loop3: detected capacity change from 0 to 512 [ 115.975417][ T26] usb 2-1: Detected FT232H [ 116.032068][ T1874] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 116.133640][ T1874] EXT4-fs (loop3): 1 truncate cleaned up [ 116.139320][ T1874] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 116.164567][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 116.164582][ T30] audit: type=1400 audit(1751778242.969:6669): avc: denied { mount } for pid=1873 comm="syz.3.452" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 116.212258][ T26] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 116.221480][ T30] audit: type=1400 audit(1751778242.969:6670): avc: denied { read write } for pid=1873 comm="syz.3.452" name="loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 116.246357][ T30] audit: type=1400 audit(1751778242.969:6671): avc: denied { open } for pid=1873 comm="syz.3.452" path="/dev/loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 116.270835][ T30] audit: type=1400 audit(1751778242.969:6672): avc: denied { ioctl } for pid=1873 comm="syz.3.452" path="/dev/loop3" dev="devtmpfs" ino=119 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 116.296493][ T30] audit: type=1400 audit(1751778243.019:6673): avc: denied { ioctl } for pid=1852 comm="syz.1.445" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 116.321480][ T30] audit: type=1400 audit(1751778243.019:6674): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 116.341303][ T30] audit: type=1400 audit(1751778243.019:6675): avc: denied { map_create } for pid=1876 comm="syz.0.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 116.360488][ T30] audit: type=1400 audit(1751778243.019:6676): avc: denied { map_read map_write } for pid=1876 comm="syz.0.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 116.360516][ T30] audit: type=1400 audit(1751778243.019:6677): avc: denied { prog_load } for pid=1876 comm="syz.0.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 116.360540][ T30] audit: type=1400 audit(1751778243.019:6678): avc: denied { bpf } for pid=1876 comm="syz.0.454" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 116.420382][ T1884] fuse: Bad value for 'fd' [ 116.693765][ T26] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 116.902882][ T1853] futex_wake_op: syz.1.445 tries to shift op by -1; fix this program [ 116.913302][ T353] usb 2-1: USB disconnect, device number 4 [ 116.930704][ T353] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 116.931002][ T1891] loop2: detected capacity change from 0 to 16 [ 116.941836][ T353] ftdi_sio 2-1:0.0: device disconnected [ 116.962803][ T1891] erofs: (device loop2): mounted with root inode @ nid 36. [ 116.972198][ T49] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 116.990393][ T1891] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 117.011660][ T1891] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 117.039090][ T1891] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 117.064878][ T1891] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 117.664835][ T1905] loop1: detected capacity change from 0 to 512 [ 117.754131][ T1906] loop4: detected capacity change from 0 to 16 [ 117.763542][ T1905] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 117.781329][ T1905] EXT4-fs (loop1): 1 truncate cleaned up [ 117.787611][ T1906] erofs: (device loop4): mounted with root inode @ nid 36. [ 117.797513][ T49] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 117.805444][ T1905] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 117.838804][ T1906] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 117.859814][ T1906] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 117.879995][ T1906] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 117.900301][ T1906] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 118.912050][ T1934] loop1: detected capacity change from 0 to 512 [ 119.014535][ T1934] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 9 [ 120.372728][ T1959] loop4: detected capacity change from 0 to 512 [ 120.410901][ T1963] loop0: detected capacity change from 0 to 1024 [ 120.418208][ T1959] EXT4-fs (loop4): Ignoring removed nobh option [ 120.430023][ T1959] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 120.449951][ T1963] EXT4-fs (loop0): Ignoring removed oldalloc option [ 120.463033][ T1963] EXT4-fs (loop0): Ignoring removed orlov option [ 120.471071][ T1959] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.480: invalid indirect mapped block 256 (level 2) [ 120.484552][ T26] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 120.494169][ T1963] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000000000002,journal_dev=0x0000000000001045,oldalloc,noquota,data_err=ignore,barrier=0x0000000000000002,delalloc,errors=continue,orlov,user_xattr,quota,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 120.523066][ T1959] EXT4-fs (loop4): 2 truncates cleaned up [ 120.528807][ T1959] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,nojournal_checksum,dioread_nolock,bsdgroups,,errors=continue. Quota mode: writeback. [ 120.551734][ T1959] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.480: bg 0: block 5: invalid block bitmap [ 120.564601][ T1959] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 120.577044][ T1959] EXT4-fs (loop4): This should not happen!! Data will be lost [ 120.577044][ T1959] [ 120.586767][ T1959] EXT4-fs (loop4): Total free blocks count 0 [ 120.592861][ T1959] EXT4-fs (loop4): Free/Dirty block details [ 120.598757][ T1959] EXT4-fs (loop4): free_blocks=0 [ 120.604285][ T1959] EXT4-fs (loop4): dirty_blocks=2 [ 120.609425][ T1959] EXT4-fs (loop4): Block reservation details [ 120.615611][ T1959] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 120.633652][ T199] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 120.646250][ T199] EXT4-fs (loop4): This should not happen!! Data will be lost [ 120.646250][ T199] [ 120.667909][ T1969] FAULT_INJECTION: forcing a failure. [ 120.667909][ T1969] name failslab, interval 1, probability 0, space 0, times 0 [ 120.680960][ T1969] CPU: 1 PID: 1969 Comm: syz.0.483 Tainted: G W 5.15.185-syzkaller-00178-g5cf73bface18 #0 [ 120.692172][ T1969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 120.702361][ T1969] Call Trace: [ 120.705654][ T1969] [ 120.708604][ T1969] __dump_stack+0x21/0x30 [ 120.712957][ T1969] dump_stack_lvl+0xee/0x150 [ 120.717548][ T1969] ? show_regs_print_info+0x20/0x20 [ 120.722770][ T1969] dump_stack+0x15/0x20 [ 120.726934][ T1969] should_fail+0x3c1/0x510 [ 120.731352][ T1969] ? audit_log_start+0x3c7/0x8b0 [ 120.736292][ T1969] __should_failslab+0xa4/0xe0 [ 120.741067][ T1969] should_failslab+0x9/0x20 [ 120.745568][ T1969] slab_pre_alloc_hook+0x3b/0xe0 [ 120.750508][ T1969] ? audit_log_start+0x3c7/0x8b0 [ 120.755447][ T1969] ? audit_log_start+0x3c7/0x8b0 [ 120.760381][ T1969] __kmalloc_track_caller+0x6c/0x2c0 [ 120.765670][ T1969] ? audit_log_start+0x3c7/0x8b0 [ 120.770616][ T1969] ? audit_log_start+0x3c7/0x8b0 [ 120.775556][ T1969] __alloc_skb+0x21a/0x740 [ 120.779973][ T1969] audit_log_start+0x3c7/0x8b0 [ 120.784736][ T1969] ? audit_serial+0x30/0x30 [ 120.789244][ T1969] ? avc_denied+0x1b0/0x1b0 [ 120.793754][ T1969] audit_log+0xac/0x150 [ 120.797910][ T1969] ? avc_has_perm+0x158/0x240 [ 120.802596][ T1969] ? audit_signal_info+0x260/0x260 [ 120.807709][ T1969] ? from_kuid+0x209/0x670 [ 120.812128][ T1969] ? make_kuid+0x640/0x640 [ 120.816549][ T1969] ? __kasan_check_write+0x14/0x20 [ 120.821661][ T1969] ? _copy_from_user+0x95/0xd0 [ 120.826427][ T1969] sel_write_enforce+0x3f6/0x5a0 [ 120.831364][ T1969] ? sel_read_enforce+0x1a0/0x1a0 [ 120.836390][ T1969] ? security_file_permission+0x79/0xa0 [ 120.841938][ T1969] ? security_file_permission+0x83/0xa0 [ 120.847570][ T1969] do_iter_write+0x3ea/0x7b0 [ 120.852164][ T1969] vfs_writev+0x2c9/0x540 [ 120.856492][ T1969] ? do_writev+0x2b0/0x2b0 [ 120.860910][ T1969] ? __kasan_check_write+0x14/0x20 [ 120.866019][ T1969] ? mutex_lock+0x95/0x1a0 [ 120.870426][ T1969] ? wait_for_completion_killable_timeout+0x10/0x10 [ 120.877002][ T1969] ? __fget_files+0x2c4/0x320 [ 120.881672][ T1969] ? __fdget_pos+0x2d2/0x380 [ 120.886250][ T1969] ? do_writev+0x76/0x2b0 [ 120.890571][ T1969] do_writev+0x14a/0x2b0 [ 120.894813][ T1969] ? do_readv+0x3e0/0x3e0 [ 120.899133][ T1969] ? debug_smp_processor_id+0x17/0x20 [ 120.904496][ T1969] __x64_sys_writev+0x7d/0x90 [ 120.909162][ T1969] x64_sys_call+0x974/0x9a0 [ 120.913656][ T1969] do_syscall_64+0x4c/0xa0 [ 120.918064][ T1969] ? clear_bhb_loop+0x50/0xa0 [ 120.922735][ T1969] ? clear_bhb_loop+0x50/0xa0 [ 120.927408][ T1969] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 120.933294][ T1969] RIP: 0033:0x7ff2b8885929 [ 120.937702][ T1969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.957316][ T1969] RSP: 002b:00007ff2b6eee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 120.965728][ T1969] RAX: ffffffffffffffda RBX: 00007ff2b8aacfa0 RCX: 00007ff2b8885929 [ 120.973693][ T1969] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003 [ 120.981652][ T1969] RBP: 00007ff2b6eee090 R08: 0000000000000000 R09: 0000000000000000 [ 120.989610][ T1969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.997576][ T1969] R13: 0000000000000000 R14: 00007ff2b8aacfa0 R15: 00007ffeeb978178 [ 121.005545][ T1969] [ 121.063304][ T26] usb 3-1: Using ep0 maxpacket: 16 [ 121.322264][ T30] kauditd_printk_skb: 106 callbacks suppressed [ 121.322299][ T30] audit: type=1400 audit(1751778248.069:6783): avc: denied { create } for pid=1970 comm="syz.4.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 121.382845][ T26] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 121.467675][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.635119][ T26] usb 3-1: Product: syz [ 121.730231][ T26] usb 3-1: Manufacturer: syz [ 121.766781][ T30] audit: type=1400 audit(1751778248.069:6784): avc: denied { setopt } for pid=1970 comm="syz.4.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 121.847064][ T26] usb 3-1: SerialNumber: syz [ 122.029829][ T1983] loop3: detected capacity change from 0 to 512 [ 122.068933][ T26] usb 3-1: config 0 descriptor?? [ 122.093184][ T1985] loop0: detected capacity change from 0 to 512 [ 122.122860][ T26] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 122.131332][ T30] audit: type=1400 audit(1751778248.889:6785): avc: denied { create } for pid=1984 comm="syz.0.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 122.154751][ T1983] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 122.175161][ T26] usb 3-1: Detected FT232H [ 122.208764][ T1983] EXT4-fs (loop3): 1 truncate cleaned up [ 122.215262][ T30] audit: type=1400 audit(1751778248.889:6786): avc: denied { write } for pid=1984 comm="syz.0.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 122.226578][ T1985] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 9 [ 122.245868][ T30] audit: type=1400 audit(1751778248.889:6787): avc: denied { read } for pid=1984 comm="syz.0.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 122.266967][ T30] audit: type=1400 audit(1751778248.969:6788): avc: denied { mounton } for pid=1982 comm="syz.3.487" path="/99/file2" dev="tmpfs" ino=574 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 122.267050][ T1983] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 122.313084][ T30] audit: type=1400 audit(1751778249.129:6789): avc: denied { read write } for pid=1987 comm="syz.4.489" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 122.352217][ T26] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 122.360218][ T30] audit: type=1400 audit(1751778249.129:6790): avc: denied { open } for pid=1987 comm="syz.4.489" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 122.400094][ T30] audit: type=1400 audit(1751778249.159:6791): avc: denied { mounton } for pid=1987 comm="syz.4.489" path="/102/file0" dev="tmpfs" ino=607 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 122.432194][ T30] audit: type=1400 audit(1751778249.159:6792): avc: denied { mount } for pid=1987 comm="syz.4.489" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 122.544546][ T1992] loop3: detected capacity change from 0 to 1024 [ 122.627188][ T1992] EXT4-fs (loop3): Ignoring removed oldalloc option [ 122.647317][ T1992] EXT4-fs (loop3): Ignoring removed orlov option [ 122.674891][ T1992] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000002,journal_dev=0x0000000000001045,oldalloc,noquota,data_err=ignore,barrier=0x0000000000000002,delalloc,errors=continue,orlov,user_xattr,quota,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 122.922699][ T26] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 123.026530][ T2000] loop3: detected capacity change from 0 to 512 [ 123.035182][ T2000] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 123.059606][ T2000] EXT4-fs (loop3): 1 truncate cleaned up [ 123.065920][ T2000] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 123.107587][ T2003] loop0: detected capacity change from 0 to 1024 [ 123.125426][ T1957] futex_wake_op: syz.2.479 tries to shift op by -1; fix this program [ 123.135915][ T1516] usb 3-1: USB disconnect, device number 5 [ 123.154458][ T2003] EXT4-fs (loop0): Ignoring removed oldalloc option [ 123.161957][ T2009] loop3: detected capacity change from 0 to 512 [ 123.164562][ T1516] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 123.168541][ T2003] EXT4-fs (loop0): Ignoring removed orlov option [ 123.181034][ T1516] ftdi_sio 3-1:0.0: device disconnected [ 123.193860][ T2009] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 9 [ 123.206388][ T2003] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000000000002,journal_dev=0x0000000000001045,oldalloc,noquota,data_err=ignore,barrier=0x0000000000000002,delalloc,errors=continue,orlov,user_xattr,quota,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 125.212571][ T2044] netlink: 'syz.4.504': attribute type 4 has an invalid length. [ 125.220363][ T2044] netlink: 17 bytes leftover after parsing attributes in process `syz.4.504'. [ 125.412264][ T39] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 125.444637][ T2046] loop0: detected capacity change from 0 to 512 [ 125.478419][ T2046] EXT4-fs (loop0): Ignoring removed nobh option [ 125.514247][ T2046] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 125.672208][ T39] usb 4-1: Using ep0 maxpacket: 16 [ 125.975063][ T2046] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.506: invalid indirect mapped block 256 (level 2) [ 125.997518][ T2050] loop2: detected capacity change from 0 to 1024 [ 126.013772][ T2046] EXT4-fs (loop0): 2 truncates cleaned up [ 126.019726][ T2046] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,nojournal_checksum,dioread_nolock,bsdgroups,,errors=continue. Quota mode: writeback. [ 126.038001][ T39] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 126.064103][ T2050] EXT4-fs (loop2): Ignoring removed oldalloc option [ 126.074265][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.091732][ T2030] loop1: detected capacity change from 0 to 40427 [ 126.098845][ T2050] EXT4-fs (loop2): Ignoring removed orlov option [ 126.105384][ T39] usb 4-1: Product: syz [ 126.110131][ T39] usb 4-1: Manufacturer: syz [ 126.128045][ T39] usb 4-1: SerialNumber: syz [ 126.143260][ T2030] F2FS-fs (loop1): invalid crc value [ 126.149368][ T2050] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000000002,journal_dev=0x0000000000001045,oldalloc,noquota,data_err=ignore,barrier=0x0000000000000002,delalloc,errors=continue,orlov,user_xattr,quota,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 126.192472][ T39] usb 4-1: config 0 descriptor?? [ 126.199275][ T2030] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 126.232848][ T39] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 126.247028][ T39] usb 4-1: Detected FT232H [ 126.250250][ T2030] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 126.281716][ T2053] attempt to access beyond end of device [ 126.281716][ T2053] loop1: rw=2049, want=45104, limit=40427 [ 126.343618][ T30] kauditd_printk_skb: 77 callbacks suppressed [ 126.343631][ T30] audit: type=1400 audit(1751778253.159:6870): avc: denied { mounton } for pid=2059 comm="syz.0.508" path="/100/file0" dev="tmpfs" ino=562 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 126.349664][ T2060] fuse: Bad value for 'fd' [ 126.377967][ T30] audit: type=1400 audit(1751778253.189:6871): avc: denied { wake_alarm } for pid=2059 comm="syz.0.508" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 126.399212][ T30] audit: type=1400 audit(1751778253.199:6872): avc: denied { read } for pid=2059 comm="syz.0.508" name="event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 126.423614][ T30] audit: type=1400 audit(1751778253.199:6873): avc: denied { open } for pid=2059 comm="syz.0.508" path="/dev/input/event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 126.503573][ T39] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 127.053846][ T39] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 127.124804][ T30] audit: type=1400 audit(1751778253.939:6874): avc: denied { name_bind } for pid=2072 comm="syz.4.513" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 127.146681][ T30] audit: type=1400 audit(1751778253.939:6875): avc: denied { node_bind } for pid=2072 comm="syz.4.513" saddr=224.0.0.2 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 127.171813][ T30] audit: type=1400 audit(1751778253.949:6876): avc: denied { module_request } for pid=2072 comm="syz.4.513" kmod="tcp_scalable" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 127.199384][ T2076] tipc: Started in network mode [ 127.204373][ T30] audit: type=1400 audit(1751778254.009:6877): avc: denied { mount } for pid=2075 comm="syz.0.514" name="/" dev="configfs" ino=13680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 127.210441][ T2076] tipc: Node identity ac14140f, cluster identity 4711 [ 127.233959][ T2076] tipc: New replicast peer: 255.255.255.255 [ 127.240038][ T2076] tipc: Enabled bearer , priority 10 [ 127.242871][ T30] audit: type=1400 audit(1751778254.009:6878): avc: denied { read } for pid=2075 comm="syz.0.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 127.315204][ T30] audit: type=1400 audit(1751778254.129:6879): avc: denied { read } for pid=2040 comm="syz.3.505" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 127.353107][ T2041] futex_wake_op: syz.3.505 tries to shift op by -1; fix this program [ 127.362583][ T60] usb 4-1: USB disconnect, device number 4 [ 127.375062][ T60] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 127.385055][ T60] ftdi_sio 4-1:0.0: device disconnected [ 131.702815][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 131.702832][ T30] audit: type=1400 audit(1751778254.369:6897): avc: denied { create } for pid=2082 comm="syz.2.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 131.933367][ T30] audit: type=1400 audit(1751778254.369:6898): avc: denied { setopt } for pid=2082 comm="syz.2.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 132.005402][ T2028] tipc: Node number set to 2886997007 [ 132.011678][ T30] audit: type=1400 audit(1751778255.429:6899): avc: denied { create } for pid=2085 comm="syz.1.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 132.028708][ T2119] loop1: detected capacity change from 0 to 512 [ 132.031413][ T30] audit: type=1400 audit(1751778258.589:6900): avc: denied { read write } for pid=282 comm="syz-executor" name="loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 132.061825][ T30] audit: type=1400 audit(1751778258.589:6901): avc: denied { open } for pid=282 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 132.061857][ T30] audit: type=1400 audit(1751778258.589:6902): avc: denied { ioctl } for pid=282 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=119 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 132.061882][ T30] audit: type=1400 audit(1751778258.669:6903): avc: denied { create } for pid=2097 comm="syz.2.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 132.061903][ T30] audit: type=1400 audit(1751778258.669:6904): avc: denied { bind } for pid=2097 comm="syz.2.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 132.061925][ T30] audit: type=1400 audit(1751778258.669:6905): avc: denied { listen } for pid=2097 comm="syz.2.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 132.061947][ T30] audit: type=1400 audit(1751778258.699:6906): avc: denied { setopt } for pid=2104 comm="syz.0.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 132.205094][ T2119] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,dioread_lock,,errors=continue. Quota mode: writeback. [ 132.220385][ T2119] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.958679][ T2140] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 132.958762][ T2140] SELinux: security_context_str_to_sid(system_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 132.977082][ T2140] loop4: detected capacity change from 0 to 512 [ 133.016394][ T2140] EXT4-fs (loop4): Ignoring removed bh option [ 133.103547][ T2140] EXT4-fs (loop4): orphan cleanup on readonly fs [ 133.105992][ T2140] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.529: bg 0: block 248: padding at end of block bitmap is not set [ 133.106662][ T2140] EXT4-fs error (device loop4): ext4_acquire_dquot:6195: comm syz.4.529: Failed to acquire dquot type 1 [ 133.108128][ T2140] EXT4-fs (loop4): 1 truncate cleaned up [ 133.109333][ T2140] EXT4-fs (loop4): mounted filesystem without journal. Opts: bh,nolazytime,noblock_validity,barrier,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 133.371601][ T2145] loop3: detected capacity change from 0 to 512 [ 133.418734][ T2145] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 133.458591][ T2145] EXT4-fs (loop3): 1 truncate cleaned up [ 133.458641][ T2145] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 134.447372][ T2166] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 134.457292][ T2166] SELinux: security_context_str_to_sid(system_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 134.508337][ T2166] loop2: detected capacity change from 0 to 512 [ 134.635738][ T2166] EXT4-fs (loop2): Ignoring removed bh option [ 134.665400][ T2166] EXT4-fs (loop2): orphan cleanup on readonly fs [ 134.675267][ T2166] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.538: bg 0: block 248: padding at end of block bitmap is not set [ 134.690588][ T2166] EXT4-fs error (device loop2): ext4_acquire_dquot:6195: comm syz.2.538: Failed to acquire dquot type 1 [ 134.703951][ T2166] EXT4-fs (loop2): 1 truncate cleaned up [ 134.710621][ T2166] EXT4-fs (loop2): mounted filesystem without journal. Opts: bh,nolazytime,noblock_validity,barrier,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 135.604853][ T2176] fuse: Bad value for 'fd' [ 136.118768][ T2189] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 136.128513][ T2189] SELinux: security_context_str_to_sid(system_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 136.152646][ T2189] loop1: detected capacity change from 0 to 512 [ 136.196128][ T2189] EXT4-fs (loop1): Ignoring removed bh option [ 136.248325][ T2189] EXT4-fs (loop1): orphan cleanup on readonly fs [ 136.258159][ T2189] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.545: bg 0: block 248: padding at end of block bitmap is not set [ 136.273764][ T2189] EXT4-fs error (device loop1): ext4_acquire_dquot:6195: comm syz.1.545: Failed to acquire dquot type 1 [ 136.287453][ T2189] EXT4-fs (loop1): 1 truncate cleaned up [ 136.295099][ T2189] EXT4-fs (loop1): mounted filesystem without journal. Opts: bh,nolazytime,noblock_validity,barrier,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 137.018765][ T30] kauditd_printk_skb: 90 callbacks suppressed [ 137.018791][ T30] audit: type=1400 audit(1751778263.749:6991): avc: denied { execmem } for pid=2193 comm="syz.2.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 137.018819][ T30] audit: type=1400 audit(1751778263.829:6992): avc: denied { setopt } for pid=2193 comm="syz.2.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 137.018919][ T2171] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 137.077463][ T2200] loop2: detected capacity change from 0 to 16 [ 137.114892][ T2200] erofs: (device loop2): mounted with root inode @ nid 36. [ 137.124422][ T30] audit: type=1400 audit(1751778263.939:6993): avc: denied { read } for pid=2193 comm="syz.2.557" name="file2" dev="loop2" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 137.148672][ T48] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 137.150282][ T30] audit: type=1400 audit(1751778263.939:6994): avc: denied { open } for pid=2193 comm="syz.2.557" path="/104/file1/file2" dev="loop2" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 137.184884][ T30] audit: type=1400 audit(1751778263.939:6995): avc: denied { map } for pid=2193 comm="syz.2.557" path="/104/file1/file2" dev="loop2" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 137.213820][ T2200] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 137.234063][ T2200] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 137.254471][ T2200] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 137.274587][ T2200] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 137.372181][ T1516] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 137.422174][ T2171] usb 1-1: Using ep0 maxpacket: 16 [ 137.612166][ T1516] usb 5-1: Using ep0 maxpacket: 16 [ 137.702207][ T2171] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 137.711309][ T2171] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.719382][ T2171] usb 1-1: Product: syz [ 137.723586][ T2171] usb 1-1: Manufacturer: syz [ 137.728195][ T2171] usb 1-1: SerialNumber: syz [ 137.734169][ T2171] usb 1-1: config 0 descriptor?? [ 137.792756][ T2171] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 137.800519][ T2171] usb 1-1: Detected FT232H [ 137.922221][ T1516] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 137.931311][ T1516] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.939401][ T1516] usb 5-1: Product: syz [ 137.943830][ T1516] usb 5-1: Manufacturer: syz [ 138.147326][ T2171] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 138.154216][ T1516] usb 5-1: SerialNumber: syz [ 138.177453][ T1516] usb 5-1: config 0 descriptor?? [ 138.223149][ T1516] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 138.230960][ T1516] usb 5-1: Detected FT232H [ 138.432204][ T1516] ftdi_sio ttyUSB1: Unable to read latency timer: -32 [ 138.613265][ T2171] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 138.833155][ T2192] futex_wake_op: syz.0.546 tries to shift op by -1; fix this program [ 138.843034][ T20] usb 1-1: USB disconnect, device number 5 [ 138.855764][ T20] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 138.866702][ T30] audit: type=1400 audit(1751778265.639:6996): avc: denied { read } for pid=2191 comm="syz.0.546" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 138.867842][ T20] ftdi_sio 1-1:0.0: device disconnected [ 138.889801][ T30] audit: type=1400 audit(1751778265.639:6997): avc: denied { open } for pid=2191 comm="syz.0.546" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 138.918081][ T30] audit: type=1400 audit(1751778265.639:6998): avc: denied { ioctl } for pid=2191 comm="syz.0.546" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 138.944211][ T1516] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 139.049080][ T2223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.556'. [ 139.145805][ T2198] futex_wake_op: syz.4.548 tries to shift op by -1; fix this program [ 139.155623][ T2171] usb 5-1: USB disconnect, device number 2 [ 139.164036][ T2171] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 139.174699][ T2171] ftdi_sio 5-1:0.0: device disconnected [ 139.322172][ T1516] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 139.562203][ T1516] usb 2-1: Using ep0 maxpacket: 16 [ 139.682554][ T1516] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 139.693618][ T1516] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 139.703697][ T1516] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 139.714916][ T1516] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 140.212214][ T1516] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 140.221360][ T1516] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.229628][ T1516] usb 2-1: Product: syz [ 140.233843][ T1516] usb 2-1: Manufacturer: syz [ 140.238476][ T1516] usb 2-1: SerialNumber: syz [ 140.344370][ T30] audit: type=1400 audit(1751778267.159:6999): avc: denied { create } for pid=2235 comm="syz.0.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 140.371014][ T30] audit: type=1400 audit(1751778267.159:7000): avc: denied { read write } for pid=2235 comm="syz.0.562" name="vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 140.908603][ T2247] loop4: detected capacity change from 0 to 1024 [ 140.946413][ T2249] loop1: detected capacity change from 0 to 4096 [ 140.983475][ T2247] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,abort,dioread_lock,jqfmt=vfsv0,nombcache,lazytime,noload,usrquota,noauto_da_alloc,resuid=0x0000000000000000,init_itable=0x0000000000000000,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 141.030665][ T1516] usb 2-1: USB disconnect, device number 5 [ 141.043486][ T2249] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 141.420470][ T2265] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 141.430192][ T2265] SELinux: security_context_str_to_sid(system_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 141.458277][ T2265] loop0: detected capacity change from 0 to 512 [ 141.524207][ T2265] EXT4-fs (loop0): Ignoring removed bh option [ 141.639062][ T2265] EXT4-fs (loop0): orphan cleanup on readonly fs [ 141.648495][ T2265] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.569: bg 0: block 248: padding at end of block bitmap is not set [ 141.664665][ T2265] EXT4-fs error (device loop0): ext4_acquire_dquot:6195: comm syz.0.569: Failed to acquire dquot type 1 [ 141.678489][ T2265] EXT4-fs (loop0): 1 truncate cleaned up [ 141.685137][ T2265] EXT4-fs (loop0): mounted filesystem without journal. Opts: bh,nolazytime,noblock_validity,barrier,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 142.441959][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 142.441976][ T30] audit: type=1400 audit(1751778269.249:7020): avc: denied { bind } for pid=2267 comm="syz.2.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 142.472197][ T30] audit: type=1400 audit(1751778269.279:7021): avc: denied { listen } for pid=2267 comm="syz.2.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 142.634071][ T2273] loop2: detected capacity change from 0 to 512 [ 142.652307][ T39] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 142.812959][ T2273] EXT4-fs (loop2): Ignoring removed nobh option [ 142.917330][ T2273] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 142.949419][ T2273] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.573: invalid indirect mapped block 256 (level 2) [ 142.963269][ T2273] EXT4-fs (loop2): 2 truncates cleaned up [ 142.969054][ T2273] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,nojournal_checksum,dioread_nolock,bsdgroups,,errors=continue. Quota mode: writeback. [ 143.007060][ T30] audit: type=1400 audit(1751778269.819:7022): avc: denied { create } for pid=2272 comm="syz.2.573" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 143.008061][ T2273] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.573: bg 0: block 5: invalid block bitmap [ 143.027443][ T30] audit: type=1400 audit(1751778269.819:7023): avc: denied { write } for pid=2272 comm="syz.2.573" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 143.062400][ T2273] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 143.074891][ T2273] EXT4-fs (loop2): This should not happen!! Data will be lost [ 143.074891][ T2273] [ 143.084886][ T2273] EXT4-fs (loop2): Total free blocks count 0 [ 143.101308][ T2273] EXT4-fs (loop2): Free/Dirty block details [ 143.107525][ T2273] EXT4-fs (loop2): free_blocks=0 [ 143.112596][ T2273] EXT4-fs (loop2): dirty_blocks=2 [ 143.117724][ T2273] EXT4-fs (loop2): Block reservation details [ 143.123887][ T2273] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 143.132244][ T39] usb 4-1: device descriptor read/64, error -71 [ 143.152431][ T10] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 143.165103][ T10] EXT4-fs (loop2): This should not happen!! Data will be lost [ 143.165103][ T10] [ 143.194300][ T2284] netlink: 9 bytes leftover after parsing attributes in process `syz.1.577'. [ 143.204704][ T2284] device gretap0 entered promiscuous mode [ 143.212776][ T30] audit: type=1400 audit(1751778270.029:7024): avc: denied { write } for pid=2285 comm="syz.2.576" name="nf_conntrack" dev="proc" ino=4026532675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 143.236081][ T2284] netlink: 5 bytes leftover after parsing attributes in process `syz.1.577'. [ 143.245353][ T2284] 0ªX¹¦D: renamed from gretap0 [ 143.248755][ T2286] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 143.257065][ T1453] Bluetooth: hci0: Frame reassembly failed (-84) [ 143.263982][ T2284] device 30ªX¹¦D left promiscuous mode [ 143.270208][ T2284] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 143.338301][ T2288] loop1: detected capacity change from 0 to 1024 [ 143.346574][ T2290] loop4: detected capacity change from 0 to 1024 [ 143.353674][ T2288] EXT4-fs (loop1): Ignoring removed oldalloc option [ 143.360498][ T2288] EXT4-fs (loop1): Ignoring removed orlov option [ 143.373216][ T2288] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000002,journal_dev=0x0000000000001045,oldalloc,noquota,data_err=ignore,barrier=0x0000000000000002,delalloc,errors=continue,orlov,user_xattr,quota,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 143.386071][ T2290] EXT4-fs (loop4): Ignoring removed oldalloc option [ 143.408390][ T2290] EXT4-fs (loop4): Ignoring removed orlov option [ 143.418212][ T30] audit: type=1400 audit(1751778270.229:7025): avc: denied { setattr } for pid=2287 comm="syz.1.578" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 143.447874][ T2290] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000002,journal_dev=0x0000000000001045,oldalloc,noquota,data_err=ignore,barrier=0x0000000000000002,delalloc,errors=continue,orlov,user_xattr,quota,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 143.592175][ T39] usb 4-1: device descriptor read/64, error -71 [ 143.803226][ T2305] loop0: detected capacity change from 0 to 512 [ 143.827436][ T2305] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 143.846402][ T2305] EXT4-fs (loop0): 1 truncate cleaned up [ 143.852678][ T2305] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 143.873704][ T39] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 143.954218][ T30] audit: type=1400 audit(1751778270.769:7026): avc: denied { write } for pid=2307 comm="syz.0.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 143.974838][ T30] audit: type=1400 audit(1751778270.789:7027): avc: denied { nlmsg_write } for pid=2307 comm="syz.0.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 143.995600][ T30] audit: type=1400 audit(1751778270.809:7028): avc: denied { nlmsg_read } for pid=2307 comm="syz.0.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 144.093081][ T30] audit: type=1400 audit(1751778270.909:7029): avc: denied { write } for pid=2307 comm="syz.0.585" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 144.141800][ T2308] loop0: detected capacity change from 0 to 4096 [ 144.163287][ T2308] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 144.212226][ T39] usb 4-1: device descriptor read/64, error -71 [ 145.004412][ T2323] netlink: 96 bytes leftover after parsing attributes in process `syz.4.589'. [ 145.013637][ T2323] FAULT_INJECTION: forcing a failure. [ 145.013637][ T2323] name failslab, interval 1, probability 0, space 0, times 0 [ 145.026516][ T2323] CPU: 1 PID: 2323 Comm: syz.4.589 Tainted: G W 5.15.185-syzkaller-00178-g5cf73bface18 #0 [ 145.037718][ T2323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 145.047785][ T2323] Call Trace: [ 145.051071][ T2323] [ 145.054003][ T2323] __dump_stack+0x21/0x30 [ 145.058342][ T2323] dump_stack_lvl+0xee/0x150 [ 145.062946][ T2323] ? show_regs_print_info+0x20/0x20 [ 145.068153][ T2323] ? update_rt_migration+0x3a0/0x3a0 [ 145.073449][ T2323] dump_stack+0x15/0x20 [ 145.077606][ T2323] should_fail+0x3c1/0x510 [ 145.082030][ T2323] __should_failslab+0xa4/0xe0 [ 145.086799][ T2323] should_failslab+0x9/0x20 [ 145.091303][ T2323] slab_pre_alloc_hook+0x3b/0xe0 [ 145.096244][ T2323] ? __alloc_skb+0xe0/0x740 [ 145.100746][ T2323] kmem_cache_alloc+0x44/0x260 [ 145.105511][ T2323] __alloc_skb+0xe0/0x740 [ 145.109843][ T2323] netlink_ack+0x3a6/0xb60 [ 145.114261][ T2323] ? em_text_dump+0x130/0x340 [ 145.118938][ T2323] ? sysvec_reschedule_ipi+0x78/0x80 [ 145.124228][ T2323] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 145.129864][ T2323] ? netlink_dump+0xd40/0xd40 [ 145.134547][ T2323] netlink_rcv_skb+0x265/0x430 [ 145.139319][ T2323] ? rtnetlink_bind+0x80/0x80 [ 145.144005][ T2323] ? netlink_ack+0xb60/0xb60 [ 145.148604][ T2323] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 145.154250][ T2323] rtnetlink_rcv+0x1c/0x20 [ 145.158690][ T2323] netlink_unicast+0x87c/0xa40 [ 145.163480][ T2323] netlink_sendmsg+0x86a/0xb70 [ 145.168271][ T2323] ? netlink_getsockopt+0x530/0x530 [ 145.173491][ T2323] ? security_socket_sendmsg+0x82/0xa0 [ 145.178975][ T2323] __sys_sendto+0x423/0x580 [ 145.183501][ T2323] ? __ia32_sys_getpeername+0x90/0x90 [ 145.188880][ T2323] ? finish_task_switch+0x16b/0x780 [ 145.194099][ T2323] ? __kasan_check_write+0x14/0x20 [ 145.199218][ T2323] __x64_sys_sendto+0xe5/0x100 [ 145.203994][ T2323] x64_sys_call+0x178/0x9a0 [ 145.208501][ T2323] do_syscall_64+0x4c/0xa0 [ 145.212936][ T2323] ? clear_bhb_loop+0x50/0xa0 [ 145.217620][ T2323] ? clear_bhb_loop+0x50/0xa0 [ 145.222321][ T2323] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 145.222343][ T2323] RIP: 0033:0x7f713a6c8929 [ 145.222361][ T2323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.222378][ T2323] RSP: 002b:00007f7138cef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 145.222399][ T2323] RAX: ffffffffffffffda RBX: 00007f713a8f0160 RCX: 00007f713a6c8929 [ 145.222414][ T2323] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000003 [ 145.222427][ T2323] RBP: 00007f7138cef090 R08: 0000000000000000 R09: 0000000000000000 [ 145.222440][ T2323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.222452][ T2323] R13: 0000000000000000 R14: 00007f713a8f0160 R15: 00007ffe28396cb8 [ 145.222469][ T2323] [ 145.264676][ T447] Bluetooth: hci0: command 0x1003 tx timeout [ 145.264792][ T402] Bluetooth: hci0: sending frame failed (-49) [ 145.331048][ T2327] loop3: detected capacity change from 0 to 1024 [ 145.350965][ T2327] EXT4-fs (loop3): Ignoring removed oldalloc option [ 145.351017][ T2327] EXT4-fs (loop3): Ignoring removed orlov option [ 145.377241][ T2327] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000002,journal_dev=0x0000000000001045,oldalloc,noquota,data_err=ignore,barrier=0x0000000000000002,delalloc,errors=continue,orlov,user_xattr,quota,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 145.480959][ T2336] loop1: detected capacity change from 0 to 512 [ 145.491184][ T2336] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 9 [ 145.505331][ T2337] loop0: detected capacity change from 0 to 512 [ 145.520442][ T2337] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 145.558666][ T2337] EXT4-fs (loop0): 1 truncate cleaned up [ 145.567792][ T2337] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 146.904317][ T2350] netlink: 104 bytes leftover after parsing attributes in process `syz.4.599'. [ 147.105480][ T2350] loop4: detected capacity change from 0 to 128 [ 147.310302][ T2350] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 147.340134][ T2350] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.350935][ T347] Bluetooth: hci0: command 0x1001 tx timeout [ 147.357035][ T402] Bluetooth: hci0: sending frame failed (-49) [ 147.909386][ T2367] loop1: detected capacity change from 0 to 1024 [ 147.927274][ T2367] EXT4-fs (loop1): Ignoring removed oldalloc option [ 147.934847][ T2367] EXT4-fs (loop1): Ignoring removed orlov option [ 147.944272][ T2367] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000002,journal_dev=0x0000000000001045,oldalloc,noquota,data_err=ignore,barrier=0x0000000000000002,delalloc,errors=continue,orlov,user_xattr,quota,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 148.120052][ T2379] loop1: detected capacity change from 0 to 512 [ 148.145359][ T2379] EXT4-fs (loop1): Ignoring removed nobh option [ 148.151830][ T2379] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 148.214066][ T2382] netlink: 96 bytes leftover after parsing attributes in process `syz.0.608'. [ 148.301929][ T2379] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.610: invalid indirect mapped block 256 (level 2) [ 148.372275][ T2379] EXT4-fs (loop1): 2 truncates cleaned up [ 148.381016][ T2379] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,nojournal_checksum,dioread_nolock,bsdgroups,,errors=continue. Quota mode: writeback. [ 148.441471][ T2386] loop1: detected capacity change from 0 to 512 [ 148.513490][ T2386] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 9 [ 148.642176][ T1582] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 148.972364][ T1582] usb 5-1: Using ep0 maxpacket: 16 [ 149.124235][ T2395] netlink: 96 bytes leftover after parsing attributes in process `syz.0.614'. [ 149.282211][ T1582] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 149.291338][ T1582] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.299556][ T1582] usb 5-1: Product: syz [ 149.303907][ T1582] usb 5-1: Manufacturer: syz [ 149.308527][ T1582] usb 5-1: SerialNumber: syz [ 149.317272][ T1582] usb 5-1: config 0 descriptor?? [ 149.363181][ T1582] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 149.371010][ T1582] usb 5-1: Detected FT232H [ 149.422273][ T1516] Bluetooth: hci0: command 0x1009 tx timeout [ 149.572233][ T1582] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 150.057718][ T1582] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 150.307801][ T2384] futex_wake_op: syz.4.611 tries to shift op by -1; fix this program [ 150.318777][ T1516] usb 5-1: USB disconnect, device number 3 [ 150.329513][ T2408] loop1: detected capacity change from 0 to 1024 [ 150.336214][ T1516] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 150.346179][ T1516] ftdi_sio 5-1:0.0: device disconnected [ 150.353160][ T2408] EXT4-fs (loop1): Ignoring removed oldalloc option [ 150.359948][ T2408] EXT4-fs (loop1): Ignoring removed orlov option [ 150.373891][ T2408] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000002,journal_dev=0x0000000000001045,oldalloc,noquota,data_err=ignore,barrier=0x0000000000000002,delalloc,errors=continue,orlov,user_xattr,quota,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 150.794880][ T2422] loop0: detected capacity change from 0 to 512 [ 150.818882][ T2422] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 150.830340][ T2422] EXT4-fs (loop0): 1 truncate cleaned up [ 150.836153][ T2422] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 150.944547][ T2427] loop4: detected capacity change from 0 to 512 [ 151.059696][ T2427] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 9 [ 151.809161][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 151.809175][ T30] audit: type=1400 audit(1751778278.619:7035): avc: denied { create } for pid=2443 comm="syz.4.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 151.949520][ T2450] loop4: detected capacity change from 0 to 512 [ 151.959363][ T2450] EXT4-fs (loop4): Ignoring removed nobh option [ 151.965844][ T2450] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 151.979254][ T2450] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.634: invalid indirect mapped block 256 (level 2) [ 151.993088][ T2450] EXT4-fs (loop4): 2 truncates cleaned up [ 151.998848][ T2450] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,nojournal_checksum,dioread_nolock,bsdgroups,,errors=continue. Quota mode: writeback. [ 152.023870][ T2450] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.634: bg 0: block 5: invalid block bitmap [ 152.037404][ T2450] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 152.049774][ T2450] EXT4-fs (loop4): This should not happen!! Data will be lost [ 152.049774][ T2450] [ 152.059455][ T2450] EXT4-fs (loop4): Total free blocks count 0 [ 152.065556][ T2450] EXT4-fs (loop4): Free/Dirty block details [ 152.071448][ T2450] EXT4-fs (loop4): free_blocks=0 [ 152.072177][ T297] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 152.076812][ T2450] EXT4-fs (loop4): dirty_blocks=2 [ 152.089081][ T2450] EXT4-fs (loop4): Block reservation details [ 152.095436][ T2450] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 152.116145][ T2458] capability: warning: `syz.1.636' uses deprecated v2 capabilities in a way that may be insecure [ 152.126951][ T10] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 152.139455][ T10] EXT4-fs (loop4): This should not happen!! Data will be lost [ 152.139455][ T10] [ 152.232821][ T2461] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2461 comm=syz.1.636 [ 152.322238][ T297] usb 1-1: Using ep0 maxpacket: 16 [ 152.367677][ T2463] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 152.388809][ T30] audit: type=1400 audit(1751778279.189:7036): avc: denied { create } for pid=2459 comm="syz.4.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 152.410860][ T30] audit: type=1400 audit(1751778279.199:7037): avc: denied { setopt } for pid=2459 comm="syz.4.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 152.635818][ T2466] loop3: detected capacity change from 0 to 16 [ 152.672237][ T297] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 152.681362][ T297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.689553][ T297] usb 1-1: Product: syz [ 152.689553][ T2466] erofs: (device loop3): mounted with root inode @ nid 36. [ 152.701119][ T297] usb 1-1: Manufacturer: syz [ 152.705860][ T297] usb 1-1: SerialNumber: syz [ 152.711408][ T297] usb 1-1: config 0 descriptor?? [ 152.711942][ T48] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 152.738529][ T2466] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 152.752891][ T297] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 152.765396][ T297] usb 1-1: Detected FT232H [ 152.771706][ T2466] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 152.792502][ T2466] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 152.812853][ T2466] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 152.982276][ T297] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 154.274769][ T2482] loop3: detected capacity change from 0 to 512 [ 154.324851][ T2482] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 9 [ 154.423482][ T297] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 154.591046][ T30] audit: type=1400 audit(1751778281.399:7038): avc: denied { name_bind } for pid=2493 comm="syz.2.648" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 154.616865][ T30] audit: type=1400 audit(1751778281.429:7039): avc: denied { node_bind } for pid=2493 comm="syz.2.648" saddr=224.0.0.2 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 154.644602][ T2442] futex_wake_op: syz.0.630 tries to shift op by -1; fix this program [ 154.653824][ T39] usb 1-1: USB disconnect, device number 6 [ 154.674572][ T39] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 154.695588][ T39] ftdi_sio 1-1:0.0: device disconnected [ 154.753174][ T30] audit: type=1400 audit(1751778281.569:7040): avc: denied { read write } for pid=2481 comm="syz.3.642" name="loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.782327][ T30] audit: type=1400 audit(1751778281.569:7041): avc: denied { open } for pid=2481 comm="syz.3.642" path="/dev/loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.806269][ T30] audit: type=1400 audit(1751778281.569:7042): avc: denied { ioctl } for pid=2481 comm="syz.3.642" path="/dev/loop3" dev="devtmpfs" ino=119 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.841781][ T30] audit: type=1400 audit(1751778281.649:7043): avc: denied { execmem } for pid=2481 comm="syz.3.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 154.878484][ T30] audit: type=1400 audit(1751778281.649:7044): avc: denied { create } for pid=2502 comm="syz.1.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 155.024661][ T2507] loop1: detected capacity change from 0 to 16 [ 155.063473][ T2507] erofs: (device loop1): mounted with root inode @ nid 36. [ 155.075638][ T49] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 155.094067][ T2507] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 155.114225][ T2507] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 155.134586][ T2507] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 155.154939][ T2507] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 155.438363][ T2514] loop3: detected capacity change from 0 to 512 [ 156.674184][ T2515] loop0: detected capacity change from 0 to 16 [ 157.052238][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 157.052262][ T30] audit: type=1400 audit(1751778283.839:7066): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 157.083075][ T2514] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 157.093730][ T2515] erofs: (device loop0): mounted with root inode @ nid 36. [ 157.125524][ T49] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 157.145649][ T2515] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 157.166281][ T2515] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 157.186795][ T2515] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 157.206920][ T2515] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 157.457698][ T2514] EXT4-fs (loop3): 1 truncate cleaned up [ 157.463897][ T2514] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,nombcache,noinit_itable,quota,,errors=continue. Quota mode: writeback. [ 157.480819][ T30] audit: type=1400 audit(1751778284.279:7067): avc: denied { create } for pid=2521 comm="syz.4.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 157.514195][ T2511] bridge_slave_0: default FDB implementation only supports local addresses [ 157.549921][ T30] audit: type=1400 audit(1751778284.319:7068): avc: denied { write } for pid=2509 comm="syz.3.653" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.573609][ T30] audit: type=1400 audit(1751778284.319:7069): avc: denied { add_name } for pid=2509 comm="syz.3.653" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.602678][ T30] audit: type=1400 audit(1751778284.319:7070): avc: denied { create } for pid=2509 comm="syz.3.653" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 157.623656][ T30] audit: type=1400 audit(1751778284.319:7071): avc: denied { write } for pid=2509 comm="syz.3.653" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 157.634487][ T2522] futex_wake_op: syz.4.656 tries to shift op by 35; fix this program [ 157.648900][ T30] audit: type=1400 audit(1751778284.319:7072): avc: denied { ioctl } for pid=2509 comm="syz.3.653" path="/131/file2/file1" dev="loop3" ino=15 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 157.702390][ T30] audit: type=1400 audit(1751778284.329:7073): avc: denied { create } for pid=2509 comm="syz.3.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 157.763357][ T30] audit: type=1400 audit(1751778284.329:7074): avc: denied { ioctl } for pid=2509 comm="syz.3.653" path="socket:[22559]" dev="sockfs" ino=22559 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 157.821570][ T30] audit: type=1400 audit(1751778284.539:7075): avc: denied { read write } for pid=2527 comm="syz.0.658" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 157.997894][ T2540] loop3: detected capacity change from 0 to 256 [ 158.004287][ T297] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 158.022735][ T2540] FAT-fs (loop3): Directory bread(block 64) failed [ 158.029492][ T2540] FAT-fs (loop3): Directory bread(block 65) failed [ 158.036399][ T2540] FAT-fs (loop3): Directory bread(block 66) failed [ 158.043039][ T2540] FAT-fs (loop3): Directory bread(block 67) failed [ 158.049787][ T2540] FAT-fs (loop3): Directory bread(block 68) failed [ 158.056748][ T2540] FAT-fs (loop3): Directory bread(block 69) failed [ 158.064775][ T2540] FAT-fs (loop3): Directory bread(block 70) failed [ 158.071400][ T2540] FAT-fs (loop3): Directory bread(block 71) failed [ 158.078093][ T2540] FAT-fs (loop3): Directory bread(block 72) failed [ 158.084721][ T2540] FAT-fs (loop3): Directory bread(block 73) failed [ 158.252158][ T297] usb 1-1: Using ep0 maxpacket: 8 [ 158.382228][ T297] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.392571][ T297] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.403733][ T297] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.413849][ T297] usb 1-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 158.511795][ T297] usb 1-1: config 0 interface 0 has no altsetting 0 [ 158.527691][ T297] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 158.537239][ T297] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.554877][ T297] usb 1-1: config 0 descriptor?? [ 159.043976][ T297] ryos 0003:1E7D:3232.0001: hidraw0: USB HID vff.ff Device [HID 1e7d:3232] on usb-dummy_hcd.0-1/input0 [ 159.445493][ T297] usb 1-1: USB disconnect, device number 7 [ 159.550433][ T2550] fido_id[2550]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 159.582972][ T2552] fuse: Unknown parameter 'user_i00000000000000000000' [ 159.786731][ T2557] FAULT_INJECTION: forcing a failure. [ 159.786731][ T2557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.848844][ T2557] CPU: 1 PID: 2557 Comm: syz.3.666 Tainted: G W 5.15.185-syzkaller-00178-g5cf73bface18 #0 [ 159.860090][ T2557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 159.870154][ T2557] Call Trace: [ 159.873446][ T2557] [ 159.876382][ T2557] __dump_stack+0x21/0x30 [ 159.880717][ T2557] dump_stack_lvl+0xee/0x150 [ 159.885313][ T2557] ? show_regs_print_info+0x20/0x20 [ 159.890517][ T2557] dump_stack+0x15/0x20 [ 159.894674][ T2557] should_fail+0x3c1/0x510 [ 159.899095][ T2557] should_fail_usercopy+0x1a/0x20 [ 159.904123][ T2557] _copy_from_user+0x20/0xd0 [ 159.908725][ T2557] __se_sys_mount+0x176/0x380 [ 159.913415][ T2557] ? __x64_sys_mount+0xd0/0xd0 [ 159.918193][ T2557] ? __ia32_sys_read+0x90/0x90 [ 159.922963][ T2557] ? __bpf_trace_sys_enter+0x62/0x70 [ 159.928252][ T2557] __x64_sys_mount+0xbf/0xd0 [ 159.932861][ T2557] x64_sys_call+0x6bf/0x9a0 [ 159.937375][ T2557] do_syscall_64+0x4c/0xa0 [ 159.941798][ T2557] ? clear_bhb_loop+0x50/0xa0 [ 159.946483][ T2557] ? clear_bhb_loop+0x50/0xa0 [ 159.951174][ T2557] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 159.957070][ T2557] RIP: 0033:0x7ff0f2e04929 [ 159.961493][ T2557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.981106][ T2557] RSP: 002b:00007ff0f142b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 159.989529][ T2557] RAX: ffffffffffffffda RBX: 00007ff0f302c160 RCX: 00007ff0f2e04929 [ 159.997521][ T2557] RDX: 0000200000000080 RSI: 0000200000000100 RDI: 0000000000000000 [ 160.005507][ T2557] RBP: 00007ff0f142b090 R08: 0000200000000140 R09: 0000000000000000 [ 160.013483][ T2557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.021466][ T2557] R13: 0000000000000000 R14: 00007ff0f302c160 R15: 00007ffc9a9435e8 [ 160.029452][ T2557] [ 160.182533][ T2557] overlayfs: failed to resolve './bus': -2 [ 160.465823][ T2564] loop2: detected capacity change from 0 to 16 [ 160.512093][ T2568] fuse: Unknown parameter '000000000000000000000040x00000000000000040x0000000000000004000000000000000000000x000000000000000400000000000000000000' [ 160.576426][ T2564] erofs: (device loop2): mounted with root inode @ nid 36. [ 160.587587][ T48] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 160.608785][ T2564] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 160.629473][ T2564] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 160.649564][ T2564] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 160.669450][ T2564] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 160.778821][ T2573] loop1: detected capacity change from 0 to 16 [ 160.789063][ T2574] overlayfs: failed to resolve './bus': -2 [ 160.828207][ T2573] erofs: (device loop1): mounted with root inode @ nid 36. [ 160.838734][ T48] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 160.858995][ T2573] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 160.877657][ T2573] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 160.896412][ T2573] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 160.914563][ T2577] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 161.650924][ T2588] loop3: detected capacity change from 0 to 1024 [ 161.682325][ T2588] EXT4-fs (loop3): Ignoring removed oldalloc option [ 161.696445][ T2588] EXT4-fs (loop3): Ignoring removed orlov option [ 161.724369][ T2588] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000002,journal_dev=0x0000000000001045,oldalloc,noquota,data_err=ignore,barrier=0x0000000000000002,delalloc,errors=continue,orlov,user_xattr,quota,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 162.098610][ T346] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 162.111388][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 162.111403][ T30] audit: type=1400 audit(1751778288.919:7150): avc: denied { name_bind } for pid=2607 comm="syz.2.684" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 162.139113][ T30] audit: type=1400 audit(1751778288.919:7151): avc: denied { node_bind } for pid=2607 comm="syz.2.684" saddr=224.0.0.2 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 162.343116][ T30] audit: type=1400 audit(1751778289.159:7152): avc: denied { read write } for pid=285 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 162.370648][ T346] usb 4-1: Using ep0 maxpacket: 16 [ 162.373708][ T2612] loop4: detected capacity change from 0 to 1024 [ 162.376138][ T30] audit: type=1400 audit(1751778289.159:7153): avc: denied { open } for pid=285 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 162.406321][ T30] audit: type=1400 audit(1751778289.159:7154): avc: denied { ioctl } for pid=285 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=120 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 162.432094][ T30] audit: type=1400 audit(1751778289.169:7155): avc: denied { map_create } for pid=2611 comm="syz.4.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 162.451447][ T30] audit: type=1400 audit(1751778289.169:7156): avc: denied { bpf } for pid=2611 comm="syz.4.685" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 162.472010][ T30] audit: type=1400 audit(1751778289.169:7157): avc: denied { map_read map_write } for pid=2611 comm="syz.4.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 162.474624][ T2612] EXT4-fs (loop4): Ignoring removed oldalloc option [ 162.491972][ T30] audit: type=1400 audit(1751778289.169:7158): avc: denied { prog_load } for pid=2611 comm="syz.4.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 162.498552][ T2612] EXT4-fs (loop4): Ignoring removed orlov option [ 162.524132][ T30] audit: type=1400 audit(1751778289.169:7159): avc: denied { perfmon } for pid=2611 comm="syz.4.685" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 162.547053][ T2612] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000002,journal_dev=0x0000000000001045,oldalloc,noquota,data_err=ignore,barrier=0x0000000000000002,delalloc,errors=continue,orlov,user_xattr,quota,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 162.732216][ T346] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 162.741307][ T346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.749303][ T346] usb 4-1: Product: syz [ 162.753487][ T346] usb 4-1: Manufacturer: syz [ 162.758076][ T346] usb 4-1: SerialNumber: syz [ 162.763871][ T346] usb 4-1: config 0 descriptor?? [ 162.802834][ T346] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 162.810664][ T346] usb 4-1: Detected FT232H [ 163.029154][ T346] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 163.167912][ T2622] loop2: detected capacity change from 0 to 256 [ 163.213295][ T2622] exfat: Deprecated parameter 'utf8' [ 163.218764][ T2622] exfat: Deprecated parameter 'utf8' [ 163.224106][ T2622] exfat: Deprecated parameter 'utf8' [ 163.229426][ T2622] exfat: Deprecated parameter 'utf8' [ 163.234762][ T2622] exfat: Deprecated parameter 'utf8' [ 163.254102][ T2622] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xa18d3b1e, utbl_chksum : 0xe619d30d) [ 163.513186][ T346] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 163.715623][ T2600] futex_wake_op: syz.3.681 tries to shift op by -1; fix this program [ 163.724748][ T2171] usb 4-1: USB disconnect, device number 7 [ 163.733216][ T2171] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 163.742826][ T2171] ftdi_sio 4-1:0.0: device disconnected [ 164.759276][ T2636] loop1: detected capacity change from 0 to 1024 [ 164.841272][ T2636] EXT4-fs (loop1): Ignoring removed oldalloc option [ 164.847991][ T2636] EXT4-fs (loop1): Ignoring removed orlov option [ 164.863573][ T2636] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000002,journal_dev=0x0000000000001045,oldalloc,noquota,data_err=ignore,barrier=0x0000000000000002,delalloc,errors=continue,orlov,user_xattr,quota,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 164.892892][ T2644] loop2: detected capacity change from 0 to 16 [ 164.953882][ T2644] erofs: (device loop2): mounted with root inode @ nid 36. [ 164.964125][ T49] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 164.981578][ T2644] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 165.000847][ T2644] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 165.020970][ T2644] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 165.034662][ T2649] loop1: detected capacity change from 0 to 512 [ 165.047216][ T2648] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 165.065801][ T2650] loop0: detected capacity change from 0 to 16 [ 165.089815][ T2649] EXT4-fs (loop1): Ignoring removed nobh option [ 165.097265][ T2649] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 165.111215][ T2649] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.695: invalid indirect mapped block 256 (level 2) [ 165.124932][ T2649] EXT4-fs (loop1): 2 truncates cleaned up [ 165.130705][ T2649] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,nojournal_checksum,dioread_nolock,bsdgroups,,errors=continue. Quota mode: writeback. [ 165.151373][ T2649] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.695: bg 0: block 5: invalid block bitmap [ 165.173488][ T2650] erofs: (device loop0): mounted with root inode @ nid 36. [ 165.184117][ T49] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 165.204145][ T2650] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 165.204578][ T2649] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 165.236380][ T2650] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 165.256651][ T2650] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 165.276750][ T2650] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 165.296797][ T2649] EXT4-fs (loop1): This should not happen!! Data will be lost [ 165.296797][ T2649] [ 165.306515][ T2649] EXT4-fs (loop1): Total free blocks count 0 [ 165.312760][ T2649] EXT4-fs (loop1): Free/Dirty block details [ 165.318693][ T2649] EXT4-fs (loop1): free_blocks=0 [ 165.323703][ T2649] EXT4-fs (loop1): dirty_blocks=2 [ 165.338041][ T2649] EXT4-fs (loop1): Block reservation details [ 165.347572][ T2649] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 165.370188][ T10] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 165.384265][ T10] EXT4-fs (loop1): This should not happen!! Data will be lost [ 165.384265][ T10] [ 165.822056][ T2673] loop3: detected capacity change from 0 to 1024 [ 165.838893][ T2673] EXT4-fs (loop3): Ignoring removed oldalloc option [ 165.852265][ T2673] EXT4-fs (loop3): Ignoring removed orlov option [ 165.886171][ T2673] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000002,journal_dev=0x0000000000001045,oldalloc,noquota,data_err=ignore,barrier=0x0000000000000002,delalloc,errors=continue,orlov,user_xattr,quota,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 166.770209][ T2693] loop3: detected capacity change from 0 to 512 [ 166.822615][ T2693] EXT4-fs (loop3): Ignoring removed nobh option [ 166.828934][ T2693] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 166.853737][ T2693] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.710: invalid indirect mapped block 256 (level 2) [ 166.871196][ T2693] EXT4-fs (loop3): 2 truncates cleaned up [ 166.878098][ T2693] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,nojournal_checksum,dioread_nolock,bsdgroups,,errors=continue. Quota mode: writeback. [ 166.970578][ T2693] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.710: bg 0: block 5: invalid block bitmap [ 166.994981][ T2693] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 167.007899][ T2693] EXT4-fs (loop3): This should not happen!! Data will be lost [ 167.007899][ T2693] [ 167.008303][ T2702] loop4: detected capacity change from 0 to 16 [ 167.017748][ T2693] EXT4-fs (loop3): Total free blocks count 0 [ 167.029957][ T2693] EXT4-fs (loop3): Free/Dirty block details [ 167.036157][ T2693] EXT4-fs (loop3): free_blocks=0 [ 167.043246][ T2693] EXT4-fs (loop3): dirty_blocks=2 [ 167.048329][ T2693] EXT4-fs (loop3): Block reservation details [ 167.054533][ T2693] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 167.065871][ T2702] erofs: (device loop4): mounted with root inode @ nid 36. [ 167.074837][ T48] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 167.094781][ T2702] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 167.115329][ T2702] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 167.135731][ T2702] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 167.156627][ T2702] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 167.183722][ T30] kauditd_printk_skb: 94 callbacks suppressed [ 167.183735][ T30] audit: type=1400 audit(1751778293.989:7254): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 167.209726][ T199] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 167.222025][ T199] EXT4-fs (loop3): This should not happen!! Data will be lost [ 167.222025][ T199] [ 167.291412][ T30] audit: type=1400 audit(1751778294.099:7255): avc: denied { read write } for pid=2706 comm="syz.3.714" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 167.314941][ T30] audit: type=1400 audit(1751778294.099:7256): avc: denied { open } for pid=2706 comm="syz.3.714" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 167.732269][ T30] audit: type=1400 audit(1751778294.519:7257): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 167.819152][ T30] audit: type=1400 audit(1751778294.559:7258): avc: denied { create } for pid=2710 comm="syz.1.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 167.840951][ T30] audit: type=1400 audit(1751778294.569:7259): avc: denied { execmem } for pid=2708 comm="syz.2.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 167.860573][ T30] audit: type=1400 audit(1751778294.629:7260): avc: denied { create } for pid=2708 comm="syz.2.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 167.880261][ T30] audit: type=1400 audit(1751778294.629:7261): avc: denied { module_request } for pid=2708 comm="syz.2.716" kmod="netdev-team0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 167.902340][ T30] audit: type=1400 audit(1751778294.629:7262): avc: denied { setopt } for pid=2708 comm="syz.2.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 167.902992][ T2712] loop2: detected capacity change from 0 to 16 [ 168.023239][ T2712] erofs: (device loop2): mounted with root inode @ nid 36. [ 168.045834][ T49] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 168.066322][ T2712] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 168.087411][ T2712] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 168.108428][ T2712] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 168.121307][ T2716] loop4: detected capacity change from 0 to 128 [ 168.135279][ T2712] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 168.163926][ T2716] EXT4-fs (loop4): Test dummy encryption mode enabled [ 168.171182][ T2716] EXT4-fs (loop4): Mount option "nodelalloc" incompatible with ext2 [ 168.189283][ T2719] loop3: detected capacity change from 0 to 256 [ 168.216441][ T2719] exfat: Deprecated parameter 'utf8' [ 168.226066][ T30] audit: type=1326 audit(1751778295.039:7263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2714 comm="syz.4.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713a6c8929 code=0x7ffc0000 [ 168.229634][ T2716] loop4: detected capacity change from 0 to 16 [ 168.259041][ T2719] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 168.289123][ T2719] overlayfs: failed to resolve './file1': -2 [ 168.294352][ T2716] erofs: (device loop4): mounted with root inode @ nid 36. [ 168.436063][ T2725] loop4: detected capacity change from 0 to 512 [ 168.446429][ T2725] EXT4-fs (loop4): Ignoring removed nobh option [ 168.453017][ T2725] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 168.470577][ T2725] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.720: invalid indirect mapped block 256 (level 2) [ 168.484773][ T2725] EXT4-fs (loop4): 2 truncates cleaned up [ 168.490574][ T2725] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,nojournal_checksum,dioread_nolock,bsdgroups,,errors=continue. Quota mode: writeback. [ 168.514457][ T2725] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.720: bg 0: block 5: invalid block bitmap [ 168.526915][ T2725] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 168.539230][ T2725] EXT4-fs (loop4): This should not happen!! Data will be lost [ 168.539230][ T2725] [ 168.548919][ T2725] EXT4-fs (loop4): Total free blocks count 0 [ 168.554977][ T2725] EXT4-fs (loop4): Free/Dirty block details [ 168.562184][ T2725] EXT4-fs (loop4): free_blocks=0 [ 168.602279][ T2725] EXT4-fs (loop4): dirty_blocks=2 [ 168.607446][ T2725] EXT4-fs (loop4): Block reservation details [ 168.613545][ T2725] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 168.631600][ T10] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 168.643890][ T10] EXT4-fs (loop4): This should not happen!! Data will be lost [ 168.643890][ T10] [ 168.678717][ T2733] loop1: detected capacity change from 0 to 512 [ 168.688254][ T2733] EXT4-fs (loop1): Ignoring removed nobh option [ 168.695407][ T2733] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 168.721002][ T2733] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.724: invalid indirect mapped block 256 (level 2) [ 168.734687][ T2733] EXT4-fs (loop1): 2 truncates cleaned up [ 168.740464][ T2733] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,nojournal_checksum,dioread_nolock,bsdgroups,,errors=continue. Quota mode: writeback. [ 168.761465][ T2733] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.724: bg 0: block 5: invalid block bitmap [ 168.773929][ T2733] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 168.793694][ T2733] EXT4-fs (loop1): This should not happen!! Data will be lost [ 168.793694][ T2733] [ 168.803431][ T2733] EXT4-fs (loop1): Total free blocks count 0 [ 168.809570][ T2733] EXT4-fs (loop1): Free/Dirty block details [ 168.815727][ T2733] EXT4-fs (loop1): free_blocks=0 [ 168.820727][ T2733] EXT4-fs (loop1): dirty_blocks=2 [ 168.825797][ T2733] EXT4-fs (loop1): Block reservation details [ 168.831826][ T2733] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 169.828218][ T8] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 169.889456][ T8] EXT4-fs (loop1): This should not happen!! Data will be lost [ 169.889456][ T8] [ 169.939012][ T2750] loop2: detected capacity change from 0 to 16 [ 169.984933][ T2750] erofs: (device loop2): mounted with root inode @ nid 36. [ 171.483626][ T2764] loop3: detected capacity change from 0 to 16 [ 171.513055][ T2766] loop0: detected capacity change from 0 to 256 [ 171.536048][ T2764] erofs: (device loop3): mounted with root inode @ nid 36. [ 171.545687][ T49] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 171.565620][ T2766] exfat: Deprecated parameter 'utf8' [ 171.566083][ T2764] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 171.591652][ T2764] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 171.594408][ T2766] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 171.624271][ T2764] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 171.644727][ T2764] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 171.683324][ T2766] overlayfs: failed to resolve './file1': -2 [ 171.689731][ T2766] FAULT_INJECTION: forcing a failure. [ 171.689731][ T2766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.718336][ T2766] CPU: 0 PID: 2766 Comm: syz.0.733 Tainted: G W 5.15.185-syzkaller-00178-g5cf73bface18 #0 [ 171.729573][ T2766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 171.739644][ T2766] Call Trace: [ 171.742972][ T2766] [ 171.745909][ T2766] __dump_stack+0x21/0x30 [ 171.750246][ T2766] dump_stack_lvl+0xee/0x150 [ 171.754836][ T2766] ? show_regs_print_info+0x20/0x20 [ 171.760043][ T2766] dump_stack+0x15/0x20 [ 171.764212][ T2766] should_fail+0x3c1/0x510 [ 171.768634][ T2766] should_fail_usercopy+0x1a/0x20 [ 171.773664][ T2766] _copy_to_user+0x20/0x90 [ 171.778093][ T2766] simple_read_from_buffer+0xe9/0x160 [ 171.783485][ T2766] proc_fail_nth_read+0x19a/0x210 [ 171.788525][ T2766] ? proc_fault_inject_write+0x2f0/0x2f0 [ 171.794166][ T2766] ? security_file_permission+0x83/0xa0 [ 171.799717][ T2766] ? proc_fault_inject_write+0x2f0/0x2f0 [ 171.805359][ T2766] vfs_read+0x282/0xbe0 [ 171.809546][ T2766] ? kernel_read+0x1f0/0x1f0 [ 171.814141][ T2766] ? __kasan_check_write+0x14/0x20 [ 171.819270][ T2766] ? mutex_lock+0x95/0x1a0 [ 171.823692][ T2766] ? wait_for_completion_killable_timeout+0x10/0x10 [ 171.830287][ T2766] ? __fget_files+0x2c4/0x320 [ 171.834978][ T2766] ? __fdget_pos+0x2d2/0x380 [ 171.839574][ T2766] ? ksys_read+0x71/0x240 [ 171.843908][ T2766] ksys_read+0x140/0x240 [ 171.848168][ T2766] ? vfs_write+0xf70/0xf70 [ 171.852593][ T2766] ? __bpf_trace_sys_enter+0x62/0x70 [ 171.857888][ T2766] __x64_sys_read+0x7b/0x90 [ 171.862407][ T2766] x64_sys_call+0x96d/0x9a0 [ 171.866920][ T2766] do_syscall_64+0x4c/0xa0 [ 171.871350][ T2766] ? clear_bhb_loop+0x50/0xa0 [ 171.876048][ T2766] ? clear_bhb_loop+0x50/0xa0 [ 171.880783][ T2766] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 171.886682][ T2766] RIP: 0033:0x7ff2b888433c [ 171.891110][ T2766] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 171.910730][ T2766] RSP: 002b:00007ff2b6eee030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 171.919168][ T2766] RAX: ffffffffffffffda RBX: 00007ff2b8aacfa0 RCX: 00007ff2b888433c [ 171.927156][ T2766] RDX: 000000000000000f RSI: 00007ff2b6eee0a0 RDI: 0000000000000004 [ 171.935126][ T2766] RBP: 00007ff2b6eee090 R08: 0000000000000000 R09: 0000000000000000 [ 171.943090][ T2766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.951059][ T2766] R13: 0000000000000000 R14: 00007ff2b8aacfa0 R15: 00007ffeeb978178 [ 171.959030][ T2766] [ 172.067385][ T2773] loop1: detected capacity change from 0 to 512 [ 172.161144][ T2775] loop0: detected capacity change from 0 to 512 [ 173.631504][ T2773] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 9 [ 173.651864][ T2777] loop2: detected capacity change from 0 to 1024 [ 173.681602][ T2775] EXT4-fs (loop0): orphan cleanup on readonly fs [ 173.688840][ T2775] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.734: bg 0: block 248: padding at end of block bitmap is not set [ 173.703615][ T2775] __quota_error: 60 callbacks suppressed [ 173.703630][ T2775] Quota error (device loop0): write_blk: dquota write failed [ 173.716758][ T2775] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 173.726764][ T2775] EXT4-fs error (device loop0): ext4_acquire_dquot:6195: comm syz.0.734: Failed to acquire dquot type 1 [ 173.738848][ T2775] EXT4-fs (loop0): 1 truncate cleaned up [ 173.745826][ T2775] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 174.059654][ T2777] EXT4-fs (loop2): Ignoring removed oldalloc option [ 174.066630][ T2789] loop3: detected capacity change from 0 to 512 [ 174.073833][ T2777] EXT4-fs (loop2): Ignoring removed orlov option [ 174.085347][ T2777] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000000002,journal_dev=0x0000000000001045,oldalloc,noquota,data_err=ignore,barrier=0x0000000000000002,delalloc,errors=continue,orlov,user_xattr,quota,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 174.116066][ T2789] EXT4-fs (loop3): Ignoring removed nobh option [ 174.122439][ T2789] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 174.153528][ T2789] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.740: invalid indirect mapped block 256 (level 2) [ 174.167309][ T2789] EXT4-fs (loop3): 2 truncates cleaned up [ 174.173296][ T2789] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,nojournal_checksum,dioread_nolock,bsdgroups,,errors=continue. Quota mode: writeback. [ 174.198358][ T30] audit: type=1400 audit(1751778301.009:7324): avc: denied { setattr } for pid=2776 comm="syz.2.737" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 174.227751][ T2789] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.740: bg 0: block 5: invalid block bitmap [ 174.240328][ T2789] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 174.257775][ T2789] EXT4-fs (loop3): This should not happen!! Data will be lost [ 174.257775][ T2789] [ 174.269511][ T2789] EXT4-fs (loop3): Total free blocks count 0 [ 174.275910][ T2789] EXT4-fs (loop3): Free/Dirty block details [ 174.282427][ T2798] loop0: detected capacity change from 0 to 16 [ 174.289039][ T2789] EXT4-fs (loop3): free_blocks=0 [ 174.294296][ T2789] EXT4-fs (loop3): dirty_blocks=2 [ 174.299449][ T2789] EXT4-fs (loop3): Block reservation details [ 174.305796][ T2789] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 174.313455][ T2798] erofs: (device loop0): mounted with root inode @ nid 36. [ 174.322630][ T49] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 174.343597][ T2798] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 174.364315][ T2798] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 174.384953][ T2798] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 174.405361][ T2798] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 174.412394][ T8] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 174.444469][ T8] EXT4-fs (loop3): This should not happen!! Data will be lost [ 174.444469][ T8] [ 174.624284][ T2817] loop4: detected capacity change from 0 to 512 [ 174.644968][ T2817] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 174.656439][ T2817] EXT4-fs (loop4): 1 truncate cleaned up [ 174.662497][ T2817] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 174.848576][ T30] audit: type=1400 audit(1751778301.539:7325): avc: denied { create } for pid=2808 comm="syz.3.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 175.191466][ T30] audit: type=1400 audit(1751778301.999:7326): avc: denied { read write } for pid=2827 comm="syz.4.750" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 175.216891][ T30] audit: type=1400 audit(1751778302.029:7327): avc: denied { open } for pid=2827 comm="syz.4.750" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 175.249237][ T30] audit: type=1400 audit(1751778302.029:7328): avc: denied { ioctl } for pid=2827 comm="syz.4.750" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 175.338870][ T30] audit: type=1400 audit(1751778302.149:7329): avc: denied { read } for pid=2813 comm="syz.1.747" path="/dev/input/event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 175.365099][ T30] audit: type=1400 audit(1751778302.149:7330): avc: denied { read write } for pid=282 comm="syz-executor" name="loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.390519][ T30] audit: type=1400 audit(1751778302.149:7331): avc: denied { open } for pid=282 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.956436][ T2838] loop0: detected capacity change from 0 to 512 [ 175.995089][ T2838] EXT4-fs (loop0): Ignoring removed nobh option [ 176.005041][ T2838] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 176.018913][ T2838] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.754: invalid indirect mapped block 256 (level 2) [ 176.038609][ T2838] EXT4-fs (loop0): 2 truncates cleaned up [ 176.050797][ T2838] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,nojournal_checksum,dioread_nolock,bsdgroups,,errors=continue. Quota mode: writeback. [ 176.075648][ T2838] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.754: bg 0: block 5: invalid block bitmap [ 176.111706][ T2838] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 176.124189][ T2838] EXT4-fs (loop0): This should not happen!! Data will be lost [ 176.124189][ T2838] [ 176.132384][ T2846] loop2: detected capacity change from 0 to 512 [ 176.134991][ T2838] EXT4-fs (loop0): Total free blocks count 0 [ 176.149135][ T2838] EXT4-fs (loop0): Free/Dirty block details [ 176.155489][ T2838] EXT4-fs (loop0): free_blocks=0 [ 176.156681][ T2846] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 9 [ 176.160494][ T2838] EXT4-fs (loop0): dirty_blocks=2 [ 176.175731][ T2838] EXT4-fs (loop0): Block reservation details [ 176.181770][ T2838] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 176.195245][ T10] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 176.208110][ T10] EXT4-fs (loop0): This should not happen!! Data will be lost [ 176.208110][ T10] [ 176.499286][ T2854] loop1: detected capacity change from 0 to 16 [ 176.620696][ T2857] loop0: detected capacity change from 0 to 16 [ 176.632699][ T2854] erofs: (device loop1): mounted with root inode @ nid 36. [ 176.669653][ T2857] erofs: (device loop0): mounted with root inode @ nid 36. [ 176.679521][ T49] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 176.700206][ T2857] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 176.721151][ T2857] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 176.741511][ T2857] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 176.762155][ T2857] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 176.794635][ T2860] loop1: detected capacity change from 0 to 512 [ 176.803172][ T2860] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 176.815737][ T2860] EXT4-fs (loop1): 1 truncate cleaned up [ 176.821542][ T2860] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 177.039160][ T2870] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 177.048995][ T2870] SELinux: security_context_str_to_sid(system_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 177.076569][ T2870] loop1: detected capacity change from 0 to 512 [ 177.106218][ T2870] EXT4-fs (loop1): Ignoring removed bh option [ 177.247442][ T2870] EXT4-fs (loop1): orphan cleanup on readonly fs [ 177.256376][ T2870] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.762: bg 0: block 248: padding at end of block bitmap is not set [ 177.272677][ T2870] EXT4-fs error (device loop1): ext4_acquire_dquot:6195: comm syz.1.762: Failed to acquire dquot type 1 [ 177.285737][ T2870] EXT4-fs (loop1): 1 truncate cleaned up [ 177.291908][ T2870] EXT4-fs (loop1): mounted filesystem without journal. Opts: bh,nolazytime,noblock_validity,barrier,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 178.645530][ T2894] loop1: detected capacity change from 0 to 16 [ 179.314855][ T2898] loop4: detected capacity change from 0 to 16 [ 179.326745][ T2894] erofs: (device loop1): mounted with root inode @ nid 36. [ 179.388636][ T2898] erofs: (device loop4): mounted with root inode @ nid 36. [ 179.398465][ T48] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 179.419949][ T2898] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 179.440342][ T2898] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 179.461391][ T2898] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 179.482102][ T2898] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 180.185600][ T2910] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 180.196568][ T2910] SELinux: security_context_str_to_sid(system_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 180.325294][ T2910] loop1: detected capacity change from 0 to 512 [ 180.394481][ T2910] EXT4-fs (loop1): Ignoring removed bh option [ 180.540529][ T2910] EXT4-fs (loop1): orphan cleanup on readonly fs [ 180.549517][ T2910] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.776: bg 0: block 248: padding at end of block bitmap is not set [ 180.564668][ T2910] __quota_error: 88 callbacks suppressed [ 180.564693][ T2910] Quota error (device loop1): write_blk: dquota write failed [ 180.577887][ T2910] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 180.587872][ T2910] EXT4-fs error (device loop1): ext4_acquire_dquot:6195: comm syz.1.776: Failed to acquire dquot type 1 [ 180.600879][ T2910] EXT4-fs (loop1): 1 truncate cleaned up [ 180.607292][ T2910] EXT4-fs (loop1): mounted filesystem without journal. Opts: bh,nolazytime,noblock_validity,barrier,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 181.391897][ T2919] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 181.401535][ T2919] SELinux: security_context_str_to_sid(system_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 181.416077][ T2919] loop4: detected capacity change from 0 to 512 [ 181.447677][ T2915] loop3: detected capacity change from 0 to 512 [ 181.462658][ T30] audit: type=1400 audit(1751778308.279:7418): avc: denied { create } for pid=2920 comm="syz.2.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 181.493726][ T2919] EXT4-fs (loop4): Ignoring removed bh option [ 181.691766][ T2919] EXT4-fs (loop4): orphan cleanup on readonly fs [ 181.700831][ T2919] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.779: bg 0: block 248: padding at end of block bitmap is not set [ 181.716630][ T2919] Quota error (device loop4): write_blk: dquota write failed [ 181.724160][ T2919] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 181.734145][ T2919] EXT4-fs error (device loop4): ext4_acquire_dquot:6195: comm syz.4.779: Failed to acquire dquot type 1 [ 181.747105][ T2919] EXT4-fs (loop4): 1 truncate cleaned up [ 181.753610][ T2919] EXT4-fs (loop4): mounted filesystem without journal. Opts: bh,nolazytime,noblock_validity,barrier,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 182.005144][ T30] audit: type=1400 audit(1751778308.369:7419): avc: denied { read write } for pid=2920 comm="syz.2.780" name="vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 182.093727][ T30] audit: type=1400 audit(1751778308.369:7420): avc: denied { open } for pid=2920 comm="syz.2.780" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 182.119931][ T30] audit: type=1400 audit(1751778308.369:7421): avc: denied { ioctl } for pid=2920 comm="syz.2.780" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 182.156267][ T2915] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 9 [ 182.316103][ T2932] loop1: detected capacity change from 0 to 16 [ 182.378132][ T2932] erofs: (device loop1): mounted with root inode @ nid 36. [ 182.388446][ T48] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 182.408758][ T2932] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 182.429624][ T2932] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 182.429832][ T2933] loop0: detected capacity change from 0 to 16 [ 182.455547][ T2932] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 182.476063][ T2932] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 182.524097][ T2933] erofs: (device loop0): mounted with root inode @ nid 36. [ 182.533111][ T48] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 182.552945][ T2933] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 182.573879][ T2933] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 182.595194][ T2933] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 182.616403][ T2933] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 182.690946][ T30] audit: type=1400 audit(1751778309.499:7422): avc: denied { create } for pid=2940 comm="syz.4.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 182.742204][ T30] audit: type=1400 audit(1751778309.519:7423): avc: denied { bind } for pid=2940 comm="syz.4.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 182.886586][ T2944] loop4: detected capacity change from 0 to 16 [ 182.962640][ T2944] erofs: (device loop4): mounted with root inode @ nid 36. [ 183.252913][ T2950] loop1: detected capacity change from 0 to 16 [ 184.525572][ T2950] erofs: (device loop1): mounted with root inode @ nid 36. [ 184.776216][ T2954] loop0: detected capacity change from 0 to 512 [ 184.790223][ T2955] loop4: detected capacity change from 0 to 512 [ 184.843460][ T2955] EXT4-fs (loop4): Ignoring removed nobh option [ 184.849874][ T2955] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 184.864417][ T2955] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.790: invalid indirect mapped block 256 (level 2) [ 184.933403][ T2962] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 184.943028][ T2962] SELinux: security_context_str_to_sid(system_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 184.958863][ T2962] loop2: detected capacity change from 0 to 512 [ 185.033584][ T2955] EXT4-fs (loop4): 2 truncates cleaned up [ 185.043887][ T2962] EXT4-fs (loop2): Ignoring removed bh option [ 185.155809][ T2962] EXT4-fs (loop2): orphan cleanup on readonly fs [ 185.165000][ T2962] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.792: bg 0: block 248: padding at end of block bitmap is not set [ 185.180633][ T2962] EXT4-fs error (device loop2): ext4_acquire_dquot:6195: comm syz.2.792: Failed to acquire dquot type 1 [ 185.193794][ T2962] EXT4-fs (loop2): 1 truncate cleaned up [ 185.200164][ T2962] EXT4-fs (loop2): mounted filesystem without journal. Opts: bh,nolazytime,noblock_validity,barrier,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 185.303896][ T2955] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,nojournal_checksum,dioread_nolock,bsdgroups,,errors=continue. Quota mode: writeback. [ 186.169328][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 186.169343][ T30] audit: type=1326 audit(1751778312.979:7427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2973 comm="syz.3.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0f2e04929 code=0x7ffc0000 [ 186.218583][ T30] audit: type=1326 audit(1751778313.019:7428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2973 comm="syz.3.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0f2e04929 code=0x7ffc0000 [ 186.332164][ T30] audit: type=1326 audit(1751778313.019:7429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2973 comm="syz.3.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0f2e04929 code=0x7ffc0000 [ 187.023329][ T30] audit: type=1326 audit(1751778313.019:7430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2973 comm="syz.3.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0f2e04929 code=0x7ffc0000 [ 187.062050][ T2989] loop0: detected capacity change from 0 to 16 [ 187.082167][ T60] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 187.095876][ T30] audit: type=1326 audit(1751778313.019:7431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2973 comm="syz.3.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0f2e04929 code=0x7ffc0000 [ 187.104687][ T2989] erofs: (device loop0): mounted with root inode @ nid 36. [ 187.157711][ T30] audit: type=1326 audit(1751778313.019:7432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2973 comm="syz.3.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0f2e04929 code=0x7ffc0000 [ 187.181427][ T30] audit: type=1326 audit(1751778313.019:7433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2973 comm="syz.3.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0f2e04929 code=0x7ffc0000 [ 187.276226][ T30] audit: type=1326 audit(1751778313.019:7434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2973 comm="syz.3.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0f2e04929 code=0x7ffc0000 [ 187.300680][ T30] audit: type=1326 audit(1751778313.019:7435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2973 comm="syz.3.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7ff0f2e04929 code=0x7ffc0000 [ 187.368135][ T30] audit: type=1326 audit(1751778313.019:7436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2973 comm="syz.3.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0f2e04929 code=0x7ffc0000 [ 187.697693][ T60] usb 3-1: Using ep0 maxpacket: 16 [ 187.788105][ T3004] tipc: Enabled bearer , priority 0 [ 187.802949][ T3004] FAULT_INJECTION: forcing a failure. [ 187.802949][ T3004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.820921][ T3004] CPU: 0 PID: 3004 Comm: syz.0.805 Tainted: G W 5.15.185-syzkaller-00178-g5cf73bface18 #0 [ 187.832138][ T3004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 187.842211][ T3004] Call Trace: [ 187.845501][ T3004] [ 187.848447][ T3004] __dump_stack+0x21/0x30 [ 187.852792][ T3004] dump_stack_lvl+0xee/0x150 [ 187.857398][ T3004] ? show_regs_print_info+0x20/0x20 [ 187.862611][ T3004] dump_stack+0x15/0x20 [ 187.866770][ T3004] should_fail+0x3c1/0x510 [ 187.871212][ T3004] should_fail_usercopy+0x1a/0x20 [ 187.876245][ T3004] _copy_to_user+0x20/0x90 [ 187.880668][ T3004] simple_read_from_buffer+0xe9/0x160 [ 187.886049][ T3004] proc_fail_nth_read+0x19a/0x210 [ 187.891090][ T3004] ? proc_fault_inject_write+0x2f0/0x2f0 [ 187.896733][ T3004] ? security_file_permission+0x83/0xa0 [ 187.902289][ T3004] ? proc_fault_inject_write+0x2f0/0x2f0 [ 187.907932][ T3004] vfs_read+0x282/0xbe0 [ 187.912098][ T3004] ? kernel_read+0x1f0/0x1f0 [ 187.916695][ T3004] ? __kasan_check_write+0x14/0x20 [ 187.921833][ T3004] ? mutex_lock+0x95/0x1a0 [ 187.926255][ T3004] ? wait_for_completion_killable_timeout+0x10/0x10 [ 187.932867][ T3004] ? __fget_files+0x2c4/0x320 [ 187.937558][ T3004] ? __fdget_pos+0x2d2/0x380 [ 187.942159][ T3004] ? ksys_read+0x71/0x240 [ 187.946492][ T3004] ksys_read+0x140/0x240 [ 187.950743][ T3004] ? vfs_write+0xf70/0xf70 [ 187.955169][ T3004] ? debug_smp_processor_id+0x17/0x20 [ 187.960542][ T3004] __x64_sys_read+0x7b/0x90 [ 187.965044][ T3004] x64_sys_call+0x96d/0x9a0 [ 187.969551][ T3004] do_syscall_64+0x4c/0xa0 [ 187.973972][ T3004] ? clear_bhb_loop+0x50/0xa0 [ 187.978649][ T3004] ? clear_bhb_loop+0x50/0xa0 [ 187.983330][ T3004] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 187.989228][ T3004] RIP: 0033:0x7ff2b888433c [ 187.993642][ T3004] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 188.013251][ T3004] RSP: 002b:00007ff2b6eee030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 188.021667][ T3004] RAX: ffffffffffffffda RBX: 00007ff2b8aacfa0 RCX: 00007ff2b888433c [ 188.029648][ T3004] RDX: 000000000000000f RSI: 00007ff2b6eee0a0 RDI: 0000000000000007 [ 188.037634][ T3004] RBP: 00007ff2b6eee090 R08: 0000000000000000 R09: 0000000000000000 [ 188.045613][ T3004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.053580][ T3004] R13: 0000000000000000 R14: 00007ff2b8aacfa0 R15: 00007ffeeb978178 [ 188.061546][ T3004] [ 188.102719][ T3004] tipc: Resetting bearer [ 188.164127][ T3004] tipc: Disabling bearer [ 188.262249][ T60] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 188.275366][ T3009] loop0: detected capacity change from 0 to 512 [ 188.284416][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.308586][ T3011] loop4: detected capacity change from 0 to 2048 [ 188.315024][ T60] usb 3-1: Product: syz [ 188.329675][ T60] usb 3-1: Manufacturer: syz [ 188.334639][ T3009] EXT4-fs (loop0): Ignoring removed nobh option [ 188.362771][ T60] usb 3-1: SerialNumber: syz [ 188.375612][ T60] usb 3-1: config 0 descriptor?? [ 188.376240][ T3011] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 188.382285][ T3009] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 188.417564][ T3011] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 188.443273][ T60] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 188.472251][ T60] usb 3-1: Detected FT232H [ 188.503422][ T3009] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.807: invalid indirect mapped block 256 (level 2) [ 188.517013][ T630] ------------[ cut here ]------------ [ 188.522790][ T3009] EXT4-fs (loop0): 2 truncates cleaned up [ 188.523152][ T630] kernel BUG at fs/ext4/inode.c:2747! [ 188.546339][ T3009] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,nojournal_checksum,dioread_nolock,bsdgroups,,errors=continue. Quota mode: writeback. [ 188.580582][ T630] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 188.586687][ T630] CPU: 0 PID: 630 Comm: kworker/u4:4 Tainted: G W 5.15.185-syzkaller-00178-g5cf73bface18 #0 [ 188.598063][ T630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 188.608140][ T630] Workqueue: writeback wb_workfn (flush-7:4) [ 188.614144][ T630] RIP: 0010:ext4_writepages+0x2f75/0x2f90 [ 188.619869][ T630] Code: 00 00 00 e8 7d 8f 8f ff 84 db 75 2c e8 e4 8c 8f ff 49 bc 00 00 00 00 00 fc ff df 48 8b 5c 24 20 e9 d6 f7 ff ff e8 cb 8c 8f ff <0f> 0b e8 c4 8c 8f ff e8 ab 5b 27 ff eb a2 e8 b8 8c 8f ff e8 9f 5b [ 188.639477][ T630] RSP: 0018:ffffc900010b7100 EFLAGS: 00010293 [ 188.645545][ T630] RAX: ffffffff81d91b15 RBX: 000000c410000000 RCX: ffff8881184362c0 [ 188.653520][ T630] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 188.661486][ T630] RBP: ffffc900010b7470 R08: dffffc0000000000 R09: ffffed1026a03528 [ 188.669454][ T630] R10: ffffed1026a03528 R11: 1ffff11026a03527 R12: dffffc0000000000 [ 188.677424][ T630] R13: 0000000000000001 R14: 0000008000000000 R15: ffff88813501abd0 [ 188.685393][ T630] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 188.694308][ T630] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 188.700884][ T630] CR2: 000000110c282852 CR3: 000000011da80000 CR4: 00000000003506b0 [ 188.708847][ T630] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 188.716812][ T630] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 188.724779][ T630] Call Trace: [ 188.728049][ T630] [ 188.730975][ T630] ? __kasan_check_write+0x14/0x20 [ 188.736082][ T630] ? pagecache_get_page+0xcb6/0xda0 [ 188.741272][ T630] ? __kasan_check_read+0x11/0x20 [ 188.746283][ T630] ? mark_page_accessed+0x3b6/0x8d0 [ 188.751481][ T630] ? __activate_page+0xd40/0xd40 [ 188.756404][ T630] ? ext4_readpage+0x220/0x220 [ 188.761157][ T630] ? __switch_to+0x51d/0xe20 [ 188.765738][ T630] ? memcpy+0x56/0x70 [ 188.769709][ T630] ? copy_page_from_iter_atomic+0x784/0x1350 [ 188.775681][ T630] ? __kasan_check_write+0x14/0x20 [ 188.780782][ T630] ? ext4_readpage+0x220/0x220 [ 188.785538][ T630] do_writepages+0x48a/0x6c0 [ 188.790120][ T630] ? update_curr+0x2f3/0x5b0 [ 188.794711][ T630] ? __writepage+0x130/0x130 [ 188.799298][ T630] ? enqueue_task_fair+0xaa7/0x2120 [ 188.804488][ T630] ? __kasan_check_write+0x14/0x20 [ 188.809591][ T630] ? _raw_spin_lock+0x8e/0xe0 [ 188.814264][ T630] __writeback_single_inode+0xd5/0x9c0 [ 188.819711][ T630] ? wbc_attach_and_unlock_inode+0x194/0x5f0 [ 188.825687][ T630] writeback_sb_inodes+0x9c0/0x1590 [ 188.830899][ T630] ? psi_task_change+0x212/0x370 [ 188.835834][ T630] ? tracing_record_taskinfo+0x7c/0x220 [ 188.841372][ T630] ? queue_io+0x4c0/0x4c0 [ 188.845692][ T630] ? __kasan_check_read+0x11/0x20 [ 188.850706][ T630] ? queue_io+0x382/0x4c0 [ 188.855026][ T630] wb_writeback+0x3f1/0x980 [ 188.859521][ T630] ? inode_cgwb_move_to_attached+0x3e0/0x3e0 [ 188.865491][ T630] ? set_worker_desc+0x155/0x1c0 [ 188.870427][ T630] ? __kasan_check_write+0x14/0x20 [ 188.875531][ T630] wb_workfn+0x38f/0xe20 [ 188.879767][ T630] ? inode_wait_for_writeback+0x200/0x200 [ 188.885475][ T630] ? compat_start_thread+0x20/0x20 [ 188.890583][ T630] ? _raw_spin_unlock+0x4d/0x70 [ 188.895430][ T630] ? finish_task_switch+0x16b/0x780 [ 188.900622][ T630] ? __switch_to_asm+0x3a/0x60 [ 188.905379][ T630] ? __schedule+0xb76/0x14c0 [ 188.909958][ T630] process_one_work+0x6be/0xba0 [ 188.914805][ T630] worker_thread+0xa59/0x1200 [ 188.919474][ T630] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 188.924929][ T630] kthread+0x411/0x500 [ 188.928985][ T630] ? worker_clr_flags+0x190/0x190 [ 188.933998][ T630] ? kthread_blkcg+0xd0/0xd0 [ 188.938578][ T630] ret_from_fork+0x1f/0x30 [ 188.942987][ T630] [ 188.946006][ T630] Modules linked in: [ 188.951896][ T630] ---[ end trace db42d2134c82e84e ]--- [ 188.957431][ T630] RIP: 0010:ext4_writepages+0x2f75/0x2f90 [ 188.963216][ T630] Code: 00 00 00 e8 7d 8f 8f ff 84 db 75 2c e8 e4 8c 8f ff 49 bc 00 00 00 00 00 fc ff df 48 8b 5c 24 20 e9 d6 f7 ff ff e8 cb 8c 8f ff <0f> 0b e8 c4 8c 8f ff e8 ab 5b 27 ff eb a2 e8 b8 8c 8f ff e8 9f 5b [ 188.982927][ T630] RSP: 0018:ffffc900010b7100 EFLAGS: 00010293 [ 188.989721][ T630] RAX: ffffffff81d91b15 RBX: 000000c410000000 RCX: ffff8881184362c0 [ 188.998110][ T630] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 189.006158][ T630] RBP: ffffc900010b7470 R08: dffffc0000000000 R09: ffffed1026a03528 [ 189.012201][ T60] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 189.014185][ T630] R10: ffffed1026a03528 R11: 1ffff11026a03527 R12: dffffc0000000000 [ 189.028938][ T630] R13: 0000000000000001 R14: 0000008000000000 R15: ffff88813501abd0 [ 189.036959][ T630] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 189.045941][ T630] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.052590][ T630] CR2: 000000110c2d134d CR3: 000000011daaa000 CR4: 00000000003506a0 [ 189.060710][ T630] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 189.068751][ T630] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 189.076805][ T630] Kernel panic - not syncing: Fatal exception [ 189.083130][ T630] Kernel Offset: disabled [ 189.087454][ T630] Rebooting in 86400 seconds..