last executing test programs: 1m16.474501563s ago: executing program 2 (id=1838): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) setrlimit(0x40000000000008, &(0x7f0000000000)) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc880, &(0x7f0000000540)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}}], 0x2, 0x404c484) 1m16.414912847s ago: executing program 2 (id=1840): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) setitimer(0x1, 0x0, 0x0) 1m16.414138497s ago: executing program 2 (id=1842): bpf$PROG_LOAD(0x5, 0x0, 0x39) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$key(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="020702060700090029bd7000fddbdf2505001700332000000a004e2100000003fe8800000000000000001c0000848442170000010f00000000000000c10300000070f4b3b27978b27467b082c309c6e7"], 0x38}}, 0x800) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00'}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1m14.868806195s ago: executing program 2 (id=1861): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m13.759249326s ago: executing program 2 (id=1876): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x1, 0x8b, 0x3a, 0x20, 0x711, 0x210, 0x7c8a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xd3, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x62, 0x1, 0x2, 0x5b, 0x37, 0xe1, 0x4, [], [{{0x9, 0x5, 0xc, 0x6, 0x200, 0xa, 0x7f, 0x4}}, {{0x9, 0x5, 0x2, 0x2, 0x8, 0x4, 0xdc, 0x9}}]}}]}}]}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r6, 0xffffffffffffffff, 0x45) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 1m13.674981873s ago: executing program 2 (id=1878): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[], 0xffdd) 1m13.614858888s ago: executing program 32 (id=1878): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[], 0xffdd) 3.981637461s ago: executing program 0 (id=2476): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000003c0)) r3 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'team_slave_1\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8400}, 0x20048884) timer_settime(0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000110000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101101) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r7, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC=r8, @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_register(r6, &(0x7f0000000040)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 3.5156421s ago: executing program 0 (id=2479): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0x8ec0}], 0x1}, 0x12) 3.352069563s ago: executing program 0 (id=2480): mkdir(&(0x7f0000000280)='./file0\x00', 0x324) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) socket$inet6(0xa, 0x3, 0x7) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 3.26808055s ago: executing program 5 (id=2483): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x101200, 0x1f9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000340)=ANY=[@ANYBLOB="3a0000780c0000008f1f45bc2e6f419e79a831b0784f895ce0b6b7fe36d5bb463bc9a97c2ccc764f973efcab526735c1c4afef33ef239d97164948193222aa2ff465bf3810b3748c51a97d0379cc533f932b50a1841f95213047957dda7fac9fe0421192cbd1ea31f8295a0e6f55717f03c1923bcdf8fe050f04f6642427038d43a7649db0328906a0dbb7d5a575cea86249ae57e732af59955cd520548f59a35c60e7851b1f3a8ac3723bc8bb0e399bbbbefa2c83cff5cc0b54b94a0e262fe56922ad730e47ef05019c1e77547cdc5d853776897f0350396da4f7d5cad493462a"], 0x8) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x800) ioctl$EVIOCREVOKE(r5, 0x40044591, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r6, 0x1, &(0x7f0000000100)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) read$rfkill(r0, &(0x7f0000000040), 0x8) 2.247360825s ago: executing program 1 (id=2484): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) close(r1) 2.246795545s ago: executing program 0 (id=2485): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000440)='./file2\x00', 0x0, &(0x7f00000006c0)={[{@nolazytime}, {@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@jqfmt_vfsv0}]}, 0x3, 0x42f, &(0x7f00000014c0)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file1\x00', 0x4) 2.211262468s ago: executing program 4 (id=2487): syz_emit_ethernet(0x4e, &(0x7f0000000040)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x10, 0x4, 0x0, 0x2, 0x40, 0x68, 0x0, 0x1, 0x6c, 0x0, @remote, @local, {[@lsrr={0x83, 0x7, 0xbf, [@local]}, @timestamp_addr={0x44, 0x1c, 0x86, 0x1, 0x6, [{@multicast1, 0x4}, {@broadcast, 0x3}, {@private=0xa010100, 0x57d5}]}, @cipso={0x86, 0x6, 0x2}]}}}}}}, 0x0) 2.167786961s ago: executing program 4 (id=2489): r0 = accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x40000) getpeername$packet(r0, 0x0, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002bbd700004000000000000000000000000000000000000016401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000002000000000000000002000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000002008000000000000000001000000000000004400050000110000000000000000000000000000000000003c00000002000000e00000010000000000000000000000000600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e27, 0x6, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 2.167541951s ago: executing program 3 (id=2490): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) unshare(0x22020600) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 2.070529039s ago: executing program 5 (id=2491): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) nanosleep(&(0x7f0000000300), 0x0) 1.980173816s ago: executing program 1 (id=2492): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x44, 0x31, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1000000}}, {0xc}}}]}]}, 0x44}}, 0x0) 1.965594418s ago: executing program 1 (id=2493): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x7, [@restrict={0x1, 0x0, 0x0, 0xb, 0x5}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x2, 0x8}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x5, 0x8}, @struct={0x6, 0x3, 0x0, 0x4, 0x1, 0x0, [{0x9, 0x1, 0x6}, {0xa, 0x1, 0x3c6c}, {0x6, 0x2, 0x9}]}, @enum64={0xe, 0x2, 0x0, 0x13, 0x1, 0xe, [{0x2, 0x3, 0x1}, {0x2, 0x6, 0xd}]}, @struct={0xb, 0x2, 0x0, 0x4, 0x0, 0x6, [{0xa, 0x2, 0x80000000}, {0x5, 0x4, 0x1}]}]}, {0x0, [0x61, 0x30, 0x0, 0x5f, 0x30]}}, &(0x7f00000004c0)=""/25, 0xc3, 0x19}, 0x28) 1.945005309s ago: executing program 3 (id=2494): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 1.922075451s ago: executing program 0 (id=2495): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x17e) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 1.906126993s ago: executing program 4 (id=2496): syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2008802, &(0x7f0000000280)={[{@discard}, {@errors_remount}, {@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@namecase}, {@keep_last_dots}, {@gid={'gid', 0x3d, 0xee01}}, {@allow_utime={'allow_utime', 0x3d, 0x7}}, {@errors_continue}, {@errors_continue}], [{@flag='async'}]}, 0x1, 0x152f, &(0x7f00000037c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x91) link(&(0x7f0000000940)='./file1\x00', 0x0) 1.226866679s ago: executing program 4 (id=2497): mkdir(&(0x7f0000000280)='./file0\x00', 0x324) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) r3 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x2}, 0x20) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x11) 1.182420012s ago: executing program 0 (id=2498): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x44) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000180)={[{0x2b, 'perf_event'}]}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x18) r8 = dup2(r0, r0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r8, 0x1276, 0x0) 423.340865ms ago: executing program 1 (id=2499): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_create1(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xb, 0x5, 0x4, 0xa932, 0x9, 0xffffffffffffffff, 0x800008}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 422.651425ms ago: executing program 5 (id=2500): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r0, r2, r3) fcntl$setstatus(r0, 0x4, 0x44000) 422.061635ms ago: executing program 3 (id=2501): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x237, &(0x7f0000000300)="$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") 395.304238ms ago: executing program 5 (id=2502): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) symlinkat(&(0x7f00000000c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') 394.484127ms ago: executing program 4 (id=2503): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) close(r1) 343.903501ms ago: executing program 5 (id=2504): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) read$FUSE(r0, &(0x7f00000062c0)={0x2020}, 0x2020) 343.537892ms ago: executing program 5 (id=2505): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2008018, &(0x7f00000000c0)=ANY=[], 0x5, 0x202, &(0x7f00000002c0)="$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") syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x22d, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000240)={0x402a, 0x10100002000001, 0x0, 0x7}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 343.092701ms ago: executing program 1 (id=2506): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000440)='./file2\x00', 0x0, &(0x7f00000006c0)={[{@nolazytime}, {@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@jqfmt_vfsv0}]}, 0x3, 0x42f, &(0x7f00000014c0)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file1\x00', 0x4) 281.205406ms ago: executing program 3 (id=2507): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) statfs(&(0x7f0000000200)='.\x00', 0x0) 280.623787ms ago: executing program 3 (id=2508): r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0) unshare(0x22020600) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 258.875388ms ago: executing program 4 (id=2509): mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r2, 0x0, 0x3) syz_fuse_handle_req(r0, &(0x7f0000004900)="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", 0x2000, &(0x7f0000000cc0)={0x0, &(0x7f0000000000)={0x18, 0x0, 0x7e00000000000002, {0xfffffffffffffff7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 74.846633ms ago: executing program 3 (id=2510): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x7, [@restrict={0x1, 0x0, 0x0, 0xb, 0x5}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x2, 0x8}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x5, 0x8}, @struct={0x6, 0x3, 0x0, 0x4, 0x1, 0x0, [{0x9, 0x1, 0x6}, {0xa, 0x1, 0x3c6c}, {0x6, 0x2, 0x9}]}, @enum64={0xe, 0x2, 0x0, 0x13, 0x1, 0xe, [{0x2, 0x3, 0x1}, {0x2, 0x6, 0xd}]}, @struct={0xb, 0x2, 0x0, 0x4, 0x0, 0x6, [{0xa, 0x2, 0x80000000}, {0x5, 0x4, 0x1}]}]}, {0x0, [0x61, 0x30, 0x0, 0x5f, 0x30]}}, &(0x7f00000004c0)=""/25, 0xc3, 0x19}, 0x28) 0s ago: executing program 1 (id=2511): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) setrlimit(0x40000000000008, &(0x7f0000000000)) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0xc880, &(0x7f0000000540)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}}], 0x2, 0x404c484) kernel console output (not intermixed with test programs): inode 18 at logical offset 2050 with max blocks 1024 with error 28 [ 91.793931][ T4280] EXT4-fs (loop0): This should not happen!! Data will be lost [ 91.793931][ T4280] [ 92.304161][ T4316] loop1: detected capacity change from 0 to 4096 [ 92.374599][ T4316] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 93.157478][ T4331] loop4: detected capacity change from 0 to 2048 [ 93.491555][ T4331] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 93.541578][ T4350] loop2: detected capacity change from 0 to 512 [ 93.608253][ T4365] loop1: detected capacity change from 0 to 128 [ 93.621143][ T4350] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 93.638965][ T4366] binfmt_misc: register: failed to install interpreter file ./file2 [ 93.648158][ T4361] hub 9-0:1.0: USB hub found [ 93.652905][ T4361] hub 9-0:1.0: 1 port detected [ 93.680818][ T4364] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 93.696785][ T4364] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1478 with error 28 [ 93.710740][ T4364] EXT4-fs (loop4): This should not happen!! Data will be lost [ 93.710740][ T4364] [ 93.720435][ T4364] EXT4-fs (loop4): Total free blocks count 0 [ 93.726537][ T4364] EXT4-fs (loop4): Free/Dirty block details [ 93.857005][ T4365] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.882319][ T4373] tipc: Cannot configure node identity twice [ 93.894175][ T4364] EXT4-fs (loop4): free_blocks=2415919104 [ 93.894294][ T4365] ext4 filesystem being mounted at /335/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 93.899936][ T4364] EXT4-fs (loop4): dirty_blocks=1488 [ 93.899954][ T4364] EXT4-fs (loop4): Block reservation details [ 93.899963][ T4364] EXT4-fs (loop4): i_reserved_data_blocks=93 [ 94.003712][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 94.003760][ T30] audit: type=1400 audit(1753831210.450:2265): avc: denied { connect } for pid=4378 comm="syz.2.1572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.288188][ T4383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1575'. [ 94.315388][ T4383] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1575'. [ 94.325148][ T30] audit: type=1400 audit(1753831210.760:2266): avc: denied { mount } for pid=4388 comm="syz.2.1577" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 94.366364][ T30] audit: type=1326 audit(1753831210.810:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4394 comm="syz.2.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306ca9e9a9 code=0x7ffc0000 [ 94.391057][ T30] audit: type=1326 audit(1753831210.810:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4394 comm="syz.2.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f306ca9e9a9 code=0x7ffc0000 [ 94.416203][ T30] audit: type=1326 audit(1753831210.810:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4394 comm="syz.2.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306ca9e9a9 code=0x7ffc0000 [ 94.459318][ T30] audit: type=1326 audit(1753831210.810:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4394 comm="syz.2.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f306ca9e9a9 code=0x7ffc0000 [ 94.483056][ T30] audit: type=1326 audit(1753831210.810:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4394 comm="syz.2.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306ca9e9a9 code=0x7ffc0000 [ 94.510415][ T30] audit: type=1326 audit(1753831210.810:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4394 comm="syz.2.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f306ca9e9a9 code=0x7ffc0000 [ 94.538418][ T4408] loop1: detected capacity change from 0 to 512 [ 94.548878][ T30] audit: type=1326 audit(1753831210.810:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4394 comm="syz.2.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306ca9e9a9 code=0x7ffc0000 [ 94.573832][ T30] audit: type=1326 audit(1753831210.810:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4394 comm="syz.2.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f306ca9e9a9 code=0x7ffc0000 [ 94.599271][ T4408] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 94.622900][ T4410] 9pnet: Could not find request transport: rdma [ 94.676029][ T4413] loop2: detected capacity change from 0 to 8192 [ 94.685737][ T4415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1587'. [ 94.750535][ T4418] loop1: detected capacity change from 0 to 512 [ 94.820357][ T4422] loop2: detected capacity change from 0 to 1024 [ 94.831250][ T4418] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 94.847936][ T4418] EXT4-fs (loop1): 1 truncate cleaned up [ 94.854010][ T4418] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.869169][ T4422] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 94.894853][ T4422] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,block_validity,errors=remount-ro,nodelalloc,noblock_validity,nomblk_io_submit,. Quota mode: none. [ 94.962619][ T4438] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1596'. [ 94.974245][ T4438] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1596'. [ 94.976344][ T4440] loop0: detected capacity change from 0 to 512 [ 94.983525][ T4438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1596'. [ 95.016412][ T4442] loop1: detected capacity change from 0 to 4096 [ 95.027584][ T4440] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.029799][ T4444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1599'. [ 95.065845][ T4442] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 95.177355][ T4462] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1608'. [ 95.248016][ T4464] device bridge0 left promiscuous mode [ 95.464952][ T4470] loop0: detected capacity change from 0 to 128 [ 95.488840][ T4474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1612'. [ 95.548757][ T4470] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 95.590537][ T4470] FAT-fs (loop0): Filesystem has been set read-only [ 95.597470][ T4470] attempt to access beyond end of device [ 95.597470][ T4470] loop0: rw=524288, want=2073, limit=128 [ 95.608989][ T4470] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 95.617128][ T4470] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 95.629342][ T4470] attempt to access beyond end of device [ 95.629342][ T4470] loop0: rw=0, want=2073, limit=128 [ 95.640456][ T4470] attempt to access beyond end of device [ 95.640456][ T4470] loop0: rw=0, want=2073, limit=128 [ 95.651506][ T4470] attempt to access beyond end of device [ 95.651506][ T4470] loop0: rw=0, want=2073, limit=128 [ 95.662827][ T4470] attempt to access beyond end of device [ 95.662827][ T4470] loop0: rw=0, want=2073, limit=128 [ 95.675088][ T4470] attempt to access beyond end of device [ 95.675088][ T4470] loop0: rw=0, want=2073, limit=128 [ 95.686222][ T4470] attempt to access beyond end of device [ 95.686222][ T4470] loop0: rw=0, want=2073, limit=128 [ 95.699630][ T4470] attempt to access beyond end of device [ 95.699630][ T4470] loop0: rw=0, want=2073, limit=128 [ 95.710923][ T4470] attempt to access beyond end of device [ 95.710923][ T4470] loop0: rw=0, want=2073, limit=128 [ 95.722516][ T4494] attempt to access beyond end of device [ 95.722516][ T4494] loop0: rw=0, want=2073, limit=128 [ 96.122668][ T4515] loop2: detected capacity change from 0 to 128 [ 96.696882][ T4569] loop1: detected capacity change from 0 to 4096 [ 96.814666][ T4569] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 97.185005][ T4591] __nla_validate_parse: 7 callbacks suppressed [ 97.185022][ T4591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1662'. [ 97.492107][ T4602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1666'. [ 97.528737][ T4602] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1666'. [ 97.658502][ T4616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1673'. [ 97.901150][ T4617] device syzkaller0 left promiscuous mode [ 97.907045][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 97.914961][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 97.961979][ T4626] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1677'. [ 97.988164][ T4630] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1679'. [ 98.005513][ T4631] binfmt_misc: register: failed to install interpreter file ./file2 [ 98.017780][ T4623] hub 9-0:1.0: USB hub found [ 98.022519][ T4623] hub 9-0:1.0: 1 port detected [ 98.406226][ T4647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1686'. [ 98.793088][ T4655] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1689'. [ 98.910582][ T4670] tipc: Enabled bearer , priority 0 [ 98.981544][ T4670] device syzkaller0 entered promiscuous mode [ 98.982332][ T4667] loop0: detected capacity change from 0 to 4096 [ 99.010781][ T4670] tipc: Resetting bearer [ 99.017593][ T4668] tipc: Resetting bearer [ 99.025525][ T4668] tipc: Disabling bearer [ 99.106482][ T4667] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 99.312663][ T30] kauditd_printk_skb: 109 callbacks suppressed [ 99.312672][ T4676] device syz_tun entered promiscuous mode [ 99.312677][ T30] audit: type=1400 audit(1753831215.760:2384): avc: denied { setopt } for pid=4675 comm="syz.0.1698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 99.346303][ T4676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1698'. [ 99.371632][ T30] audit: type=1400 audit(1753831215.820:2385): avc: denied { read write } for pid=4679 comm="syz.2.1700" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 99.372958][ T4680] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.424978][ T30] audit: type=1400 audit(1753831215.820:2386): avc: denied { open } for pid=4679 comm="syz.2.1700" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 99.456683][ T30] audit: type=1400 audit(1753831215.820:2387): avc: denied { ioctl } for pid=4679 comm="syz.2.1700" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 99.524008][ T4687] loop2: detected capacity change from 0 to 7 [ 99.530816][ T2945] loop2: [ 99.538001][ T4687] loop2: [ 99.686333][ T4708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1710'. [ 99.720283][ T30] audit: type=1400 audit(1753831216.160:2388): avc: denied { write } for pid=4711 comm="syz.2.1712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 99.745408][ T30] audit: type=1400 audit(1753831216.170:2389): avc: denied { create } for pid=4715 comm="syz.3.1714" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 99.767434][ T30] audit: type=1400 audit(1753831216.170:2390): avc: denied { write } for pid=4715 comm="syz.3.1714" name="file0" dev="tmpfs" ino=1955 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 99.777436][ T4674] syz.1.1697 (4674) used greatest stack depth: 20864 bytes left [ 99.830700][ T30] audit: type=1400 audit(1753831216.170:2391): avc: denied { open } for pid=4715 comm="syz.3.1714" path="/363/file0" dev="tmpfs" ino=1955 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 99.867600][ T30] audit: type=1400 audit(1753831216.260:2392): avc: denied { read write } for pid=4717 comm="syz.2.1716" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.897557][ T30] audit: type=1400 audit(1753831216.260:2393): avc: denied { open } for pid=4717 comm="syz.2.1716" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.940979][ T4724] loop1: detected capacity change from 0 to 4096 [ 100.024518][ T4733] loop0: detected capacity change from 0 to 4096 [ 100.045143][ T4733] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 100.056402][ T4724] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 100.120681][ T39] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.192396][ T4751] binfmt_misc: register: failed to install interpreter file ./file2 [ 100.201740][ T4744] hub 9-0:1.0: USB hub found [ 100.207109][ T4744] hub 9-0:1.0: 1 port detected [ 100.251594][ T4759] loop1: detected capacity change from 0 to 4096 [ 100.272045][ T4759] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 100.370662][ T39] usb 3-1: Using ep0 maxpacket: 32 [ 100.490796][ T39] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 100.500042][ T39] usb 3-1: config 0 has no interface number 0 [ 100.508388][ T39] usb 3-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 100.518955][ T39] usb 3-1: config 0 interface 1 has no altsetting 0 [ 100.523647][ T4792] loop0: detected capacity change from 0 to 4096 [ 100.576017][ T4792] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 100.690865][ T39] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 100.700218][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.708227][ T39] usb 3-1: Product: syz [ 100.712441][ T39] usb 3-1: Manufacturer: syz [ 100.717044][ T39] usb 3-1: SerialNumber: syz [ 100.722814][ T39] usb 3-1: config 0 descriptor?? [ 100.834887][ T4818] loop0: detected capacity change from 0 to 4096 [ 100.875689][ T4818] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 100.991883][ T39] usb 3-1: USB disconnect, device number 2 [ 101.411813][ T4842] loop0: detected capacity change from 0 to 4096 [ 101.591095][ T39] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 101.677759][ T4842] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 101.745196][ T4858] loop0: detected capacity change from 0 to 2048 [ 101.765607][ T4858] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.795650][ T283] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 101.810990][ T283] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 101.886609][ T4882] fuse: Bad value for 'fd' [ 101.910709][ T39] usb 3-1: Using ep0 maxpacket: 32 [ 102.070758][ T39] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 102.078972][ T39] usb 3-1: config 0 has no interface number 0 [ 102.100984][ T39] usb 3-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 102.131860][ T39] usb 3-1: config 0 interface 1 has no altsetting 0 [ 102.176954][ T4888] loop1: detected capacity change from 0 to 512 [ 102.188023][ T4888] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 102.203605][ T4888] EXT4-fs (loop1): 1 truncate cleaned up [ 102.212963][ T4888] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,grpid,debug_want_extra_isize=0x0000000000000068,resgid=0x0000000000000000,max_dir_size_kb=0x0000000000000009,jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 102.310791][ T39] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 102.319860][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.328517][ T39] usb 3-1: Product: syz [ 102.332736][ T39] usb 3-1: Manufacturer: syz [ 102.337326][ T39] usb 3-1: SerialNumber: syz [ 102.346856][ T39] usb 3-1: config 0 descriptor?? [ 102.372235][ T4907] __nla_validate_parse: 4 callbacks suppressed [ 102.372245][ T4907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1796'. [ 102.845660][ T4938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1809'. [ 102.865228][ T4940] loop4: detected capacity change from 0 to 4096 [ 102.926628][ T4940] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 103.062218][ T4958] loop4: detected capacity change from 0 to 2048 [ 103.144230][ T4958] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 103.336885][ T4967] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 103.413073][ T4967] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 103.426344][ T4967] EXT4-fs (loop4): This should not happen!! Data will be lost [ 103.426344][ T4967] [ 103.437816][ T4967] EXT4-fs (loop4): Total free blocks count 0 [ 103.447493][ T4967] EXT4-fs (loop4): Free/Dirty block details [ 103.457876][ T4967] EXT4-fs (loop4): free_blocks=2415919104 [ 103.464279][ T4967] EXT4-fs (loop4): dirty_blocks=2672 [ 103.469926][ T4967] EXT4-fs (loop4): Block reservation details [ 103.480241][ T4967] EXT4-fs (loop4): i_reserved_data_blocks=167 [ 103.592653][ T45] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 103.619916][ T45] EXT4-fs (loop4): This should not happen!! Data will be lost [ 103.619916][ T45] [ 103.626599][ T4996] loop1: detected capacity change from 0 to 512 [ 103.657300][ T4996] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 103.787900][ T4996] EXT4-fs (loop1): 1 truncate cleaned up [ 103.793756][ T4996] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,grpid,debug_want_extra_isize=0x0000000000000068,resgid=0x0000000000000000,max_dir_size_kb=0x0000000000000009,jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 104.347465][ T4926] usb 3-1: USB disconnect, device number 3 [ 104.411445][ T5008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1836'. [ 104.446563][ T5015] syz.2.1840 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 104.454436][ T5017] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1839'. [ 104.496498][ T5022] loop2: detected capacity change from 0 to 2048 [ 104.583680][ T5030] binfmt_misc: register: failed to install interpreter file ./file2 [ 104.593932][ T5024] hub 9-0:1.0: USB hub found [ 104.598792][ T5024] hub 9-0:1.0: 1 port detected [ 104.599047][ T5022] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 104.696943][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 104.947159][ T5039] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 104.953218][ T5044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1848'. [ 104.967661][ T5039] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 104.985223][ T5039] EXT4-fs (loop2): This should not happen!! Data will be lost [ 104.985223][ T5039] [ 104.998534][ T30] kauditd_printk_skb: 106 callbacks suppressed [ 104.998550][ T30] audit: type=1400 audit(1753831221.440:2500): avc: denied { bind } for pid=5045 comm="syz.3.1850" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 105.006786][ T5039] EXT4-fs (loop2): Total free blocks count 0 [ 105.034485][ T5039] EXT4-fs (loop2): Free/Dirty block details [ 105.040222][ T5048] device syzkaller0 entered promiscuous mode [ 105.045870][ T5039] EXT4-fs (loop2): free_blocks=2415919104 [ 105.056023][ T30] audit: type=1400 audit(1753831221.440:2501): avc: denied { node_bind } for pid=5045 comm="syz.3.1850" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 105.057414][ T5039] EXT4-fs (loop2): dirty_blocks=5216 [ 105.080308][ T30] audit: type=1400 audit(1753831221.480:2502): avc: denied { relabelfrom } for pid=5047 comm="syz.1.1851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 105.089163][ T5039] EXT4-fs (loop2): Block reservation details [ 105.102165][ T30] audit: type=1400 audit(1753831221.480:2503): avc: denied { relabelto } for pid=5047 comm="syz.1.1851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 105.109476][ T5039] EXT4-fs (loop2): i_reserved_data_blocks=326 [ 105.129560][ T30] audit: type=1400 audit(1753831221.580:2504): avc: denied { setopt } for pid=5053 comm="syz.3.1854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 105.153681][ T5040] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 105.167199][ T5040] EXT4-fs (loop2): This should not happen!! Data will be lost [ 105.167199][ T5040] [ 105.212059][ T5054] netlink: 3529 bytes leftover after parsing attributes in process `syz.3.1854'. [ 105.235455][ T30] audit: type=1400 audit(1753831221.680:2505): avc: denied { name_bind } for pid=5057 comm="syz.3.1856" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 106.010054][ T30] audit: type=1326 audit(1753831222.450:2506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5069 comm="syz.1.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83862de9a9 code=0x7ffc0000 [ 106.033929][ T30] audit: type=1326 audit(1753831222.470:2507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5069 comm="syz.1.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f83862de9a9 code=0x7ffc0000 [ 106.037843][ T5070] loop1: detected capacity change from 0 to 512 [ 106.106504][ T30] audit: type=1326 audit(1753831222.470:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5069 comm="syz.1.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f83862de9e3 code=0x7ffc0000 [ 106.133220][ T30] audit: type=1326 audit(1753831222.480:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5069 comm="syz.1.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f83862dd45f code=0x7ffc0000 [ 106.142157][ T5070] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 106.188534][ T5070] EXT4-fs (loop1): 1 truncate cleaned up [ 106.201121][ T5070] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,grpid,debug_want_extra_isize=0x0000000000000068,resgid=0x0000000000000000,max_dir_size_kb=0x0000000000000009,jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 106.236272][ T5075] device syzkaller0 entered promiscuous mode [ 106.389813][ T5086] loop0: detected capacity change from 0 to 128 [ 106.452870][ T5093] loop1: detected capacity change from 0 to 512 [ 106.474373][ T5086] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 106.503401][ T5086] FAT-fs (loop0): Filesystem has been set read-only [ 106.510042][ T5086] handle_bad_sector: 18280 callbacks suppressed [ 106.510060][ T5086] attempt to access beyond end of device [ 106.510060][ T5086] loop0: rw=524288, want=2073, limit=128 [ 106.542413][ T5086] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 106.550430][ T5086] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 106.567801][ T5093] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.1866: bad orphan inode 15 [ 106.578687][ T5093] ext4_test_bit(bit=14, block=5) = 0 [ 106.584344][ T5093] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000001,journal_dev=0x0000000000000003,grpid,journal_ioprio=0x0000000000000002,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 106.594842][ T5086] attempt to access beyond end of device [ 106.594842][ T5086] loop0: rw=0, want=2073, limit=128 [ 106.625439][ T5101] loop4: detected capacity change from 0 to 2048 [ 106.632267][ T5086] attempt to access beyond end of device [ 106.632267][ T5086] loop0: rw=0, want=2073, limit=128 [ 106.643282][ T5086] attempt to access beyond end of device [ 106.643282][ T5086] loop0: rw=0, want=2073, limit=128 [ 106.657047][ T5086] attempt to access beyond end of device [ 106.657047][ T5086] loop0: rw=0, want=2073, limit=128 [ 106.668114][ T5086] attempt to access beyond end of device [ 106.668114][ T5086] loop0: rw=0, want=2073, limit=128 [ 106.696305][ T5086] attempt to access beyond end of device [ 106.696305][ T5086] loop0: rw=0, want=2073, limit=128 [ 106.709237][ T5086] attempt to access beyond end of device [ 106.709237][ T5086] loop0: rw=0, want=2073, limit=128 [ 106.721601][ T5086] attempt to access beyond end of device [ 106.721601][ T5086] loop0: rw=0, want=2073, limit=128 [ 106.786956][ T5086] attempt to access beyond end of device [ 106.786956][ T5086] loop0: rw=0, want=2073, limit=128 [ 106.888689][ T5101] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 106.903112][ T5107] netlink: 3529 bytes leftover after parsing attributes in process `syz.1.1874'. [ 107.057991][ T5110] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 107.073796][ T5110] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 107.086999][ T5110] EXT4-fs (loop4): This should not happen!! Data will be lost [ 107.086999][ T5110] [ 107.097467][ T5110] EXT4-fs (loop4): Total free blocks count 0 [ 107.103695][ T5110] EXT4-fs (loop4): Free/Dirty block details [ 107.109818][ T5110] EXT4-fs (loop4): free_blocks=2415919104 [ 107.115847][ T5110] EXT4-fs (loop4): dirty_blocks=3008 [ 107.121422][ T5110] EXT4-fs (loop4): Block reservation details [ 107.127822][ T5110] EXT4-fs (loop4): i_reserved_data_blocks=188 [ 107.185147][ T332] tipc: Left network mode [ 107.198019][ T5112] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 946 with error 28 [ 107.231587][ T5116] binfmt_misc: register: failed to install interpreter file ./file2 [ 107.234305][ T5112] EXT4-fs (loop4): This should not happen!! Data will be lost [ 107.234305][ T5112] [ 107.249414][ T5116] hub 9-0:1.0: USB hub found [ 107.249492][ T5116] hub 9-0:1.0: 1 port detected [ 107.395258][ T5126] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.409495][ T5126] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.418313][ T5126] device bridge_slave_0 entered promiscuous mode [ 107.425634][ T5126] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.432964][ T5126] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.440492][ T5126] device bridge_slave_1 entered promiscuous mode [ 107.644627][ T5126] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.651730][ T5126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.659023][ T5126] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.666088][ T5126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.738609][ T5159] fuse: Bad value for 'fd' [ 107.746307][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.772145][ T398] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.788668][ T5157] loop4: detected capacity change from 0 to 4096 [ 107.812787][ T398] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.830152][ T5161] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1894'. [ 107.850394][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.871010][ T398] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.878081][ T398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.889865][ T5157] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 107.899529][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.909216][ T398] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.916291][ T398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.938762][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.947024][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.963438][ T332] device bridge_slave_1 left promiscuous mode [ 107.969796][ T332] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.977512][ T332] device bridge_slave_0 left promiscuous mode [ 107.985273][ T332] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.993432][ T332] device veth1_macvtap left promiscuous mode [ 108.000872][ T332] device veth0_vlan left promiscuous mode [ 108.064291][ T5170] loop4: detected capacity change from 0 to 2048 [ 108.106849][ T5170] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 108.169341][ T5126] device veth0_vlan entered promiscuous mode [ 108.176434][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 108.187331][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 108.195907][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 108.203691][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 108.218115][ T5126] device veth1_macvtap entered promiscuous mode [ 108.226488][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 108.234988][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 108.243568][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 108.253605][ T5178] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 108.268618][ T5178] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 108.281644][ T5178] EXT4-fs (loop4): This should not happen!! Data will be lost [ 108.281644][ T5178] [ 108.282786][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 108.292503][ T5178] EXT4-fs (loop4): Total free blocks count 0 [ 108.300293][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 108.305408][ T5178] EXT4-fs (loop4): Free/Dirty block details [ 108.314716][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 108.319465][ T5178] EXT4-fs (loop4): free_blocks=2415919104 [ 108.328270][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 108.333386][ T5178] EXT4-fs (loop4): dirty_blocks=2272 [ 108.346713][ T5178] EXT4-fs (loop4): Block reservation details [ 108.352846][ T5178] EXT4-fs (loop4): i_reserved_data_blocks=142 [ 108.374681][ T5184] syz.5.1879[5184] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.374755][ T5184] syz.5.1879[5184] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.389755][ T4374] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 108.392473][ T5184] loop5: detected capacity change from 0 to 512 [ 108.401566][ T4374] EXT4-fs (loop4): This should not happen!! Data will be lost [ 108.401566][ T4374] [ 108.475753][ T5184] EXT4-fs (loop5): Ignoring removed bh option [ 108.484592][ T5184] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 108.493713][ T5184] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 108.504752][ T5188] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 108.509746][ T5184] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 108.512019][ T5188] IPv6: NLM_F_CREATE should be set when creating new route [ 108.530704][ T445] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 108.535464][ T5184] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 108.547482][ T5184] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,bh,noblock_validity,,errors=continue. Quota mode: none. [ 108.550358][ T5191] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1904'. [ 108.625536][ T5197] loop5: detected capacity change from 0 to 4096 [ 108.665153][ T5197] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 108.910959][ T445] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 108.950679][ T445] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.983277][ T445] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 108.993150][ T445] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.320680][ T5037] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 109.560727][ T5037] usb 6-1: Using ep0 maxpacket: 32 [ 109.634192][ T5221] loop4: detected capacity change from 0 to 512 [ 109.690780][ T5037] usb 6-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 109.703918][ T5037] usb 6-1: config 0 interface 0 has no altsetting 0 [ 109.711936][ T5037] usb 6-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 109.721304][ T5037] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.722661][ T5221] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1914: bg 0: block 248: padding at end of block bitmap is not set [ 109.730517][ T5037] usb 6-1: config 0 descriptor?? [ 109.749768][ T5221] EXT4-fs error (device loop4): ext4_acquire_dquot:6198: comm syz.4.1914: Failed to acquire dquot type 1 [ 109.764986][ T5221] EXT4-fs (loop4): 1 truncate cleaned up [ 109.771206][ T5221] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 109.837177][ T5221] ext4 filesystem being mounted at /285/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.029796][ T5230] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1916'. [ 110.255244][ T5242] loop4: detected capacity change from 0 to 512 [ 110.267104][ T5242] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 110.278995][ T5242] EXT4-fs (loop4): 1 truncate cleaned up [ 110.284701][ T5242] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,grpid,debug_want_extra_isize=0x0000000000000068,resgid=0x0000000000000000,max_dir_size_kb=0x0000000000000009,jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 110.376821][ T5248] binfmt_misc: register: failed to install interpreter file ./file2 [ 110.385965][ T5248] hub 9-0:1.0: USB hub found [ 110.390759][ T5248] hub 9-0:1.0: 1 port detected [ 110.432402][ T5215] UDC core: couldn't find an available UDC or it's busy: -16 [ 110.440393][ T5215] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 110.449269][ T5215] UDC core: couldn't find an available UDC or it's busy: -16 [ 110.456859][ T5215] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 110.731750][ T5037] kye 0003:0458:0138.0003: unknown global tag 0xc [ 110.738230][ T5037] kye 0003:0458:0138.0003: item 0 1 1 12 parsing failed [ 110.745602][ T5037] kye 0003:0458:0138.0003: parse failed [ 110.751641][ T5037] kye: probe of 0003:0458:0138.0003 failed with error -22 [ 110.989638][ T5037] usb 6-1: USB disconnect, device number 2 [ 111.097996][ T30] kauditd_printk_skb: 84 callbacks suppressed [ 111.098009][ T30] audit: type=1326 audit(1753831227.540:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5269 comm="syz.3.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35f51019a9 code=0x7ffc0000 [ 111.128429][ T30] audit: type=1326 audit(1753831227.540:2593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5269 comm="syz.3.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35f51019a9 code=0x7ffc0000 [ 111.152227][ T30] audit: type=1326 audit(1753831227.580:2594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5269 comm="syz.3.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f35f51019a9 code=0x7ffc0000 [ 111.176270][ T30] audit: type=1326 audit(1753831227.580:2595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5269 comm="syz.3.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35f51019a9 code=0x7ffc0000 [ 111.246386][ T30] audit: type=1326 audit(1753831227.580:2596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5269 comm="syz.3.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35f51019a9 code=0x7ffc0000 [ 111.270234][ T30] audit: type=1326 audit(1753831227.600:2597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5269 comm="syz.3.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35f51019a9 code=0x7ffc0000 [ 111.270971][ T445] usb 2-1: USB disconnect, device number 2 [ 111.299632][ T30] audit: type=1326 audit(1753831227.600:2598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5269 comm="syz.3.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35f51019a9 code=0x7ffc0000 [ 111.331314][ T5274] 9pnet: Could not find request transport: rdma [ 111.367090][ T30] audit: type=1326 audit(1753831227.600:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5269 comm="syz.3.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35f51019a9 code=0x7ffc0000 [ 111.391403][ T30] audit: type=1326 audit(1753831227.630:2600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5269 comm="syz.3.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35f51019a9 code=0x7ffc0000 [ 111.415095][ T30] audit: type=1326 audit(1753831227.660:2601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5269 comm="syz.3.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35f51019a9 code=0x7ffc0000 [ 111.454052][ T5282] loop0: detected capacity change from 0 to 512 [ 111.559690][ T5282] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 111.584035][ T5282] EXT4-fs (loop0): 1 truncate cleaned up [ 111.589770][ T5282] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,grpid,debug_want_extra_isize=0x0000000000000068,resgid=0x0000000000000000,max_dir_size_kb=0x0000000000000009,jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 111.692430][ T5294] tipc: Started in network mode [ 111.697558][ T5294] tipc: Node identity 4, cluster identity 4711 [ 111.703839][ T5294] tipc: Node number set to 4 [ 112.097108][ T5307] loop5: detected capacity change from 0 to 512 [ 112.127910][ T5307] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 112.156777][ T5307] EXT4-fs (loop5): 1 truncate cleaned up [ 112.165650][ T5307] EXT4-fs (loop5): mounted filesystem without journal. Opts: nolazytime,grpid,debug_want_extra_isize=0x0000000000000068,resgid=0x0000000000000000,max_dir_size_kb=0x0000000000000009,jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 112.268444][ T5327] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1953'. [ 112.323002][ T5336] usb usb8: usbfs: process 5336 (syz.1.1957) did not claim interface 0 before use [ 112.431283][ T5343] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1960'. [ 112.727612][ T5353] loop4: detected capacity change from 0 to 2048 [ 112.757212][ T5353] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 112.775468][ T5360] loop5: detected capacity change from 0 to 512 [ 112.775789][ T5361] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1968'. [ 112.851735][ T5360] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 112.873999][ T5360] EXT4-fs (loop5): 1 truncate cleaned up [ 112.889717][ T5360] EXT4-fs (loop5): mounted filesystem without journal. Opts: nolazytime,grpid,debug_want_extra_isize=0x0000000000000068,resgid=0x0000000000000000,max_dir_size_kb=0x0000000000000009,jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 112.924922][ T5364] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 112.939952][ T5364] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 112.952483][ T5364] EXT4-fs (loop4): This should not happen!! Data will be lost [ 112.952483][ T5364] [ 112.962476][ T5364] EXT4-fs (loop4): Total free blocks count 0 [ 112.968775][ T5364] EXT4-fs (loop4): Free/Dirty block details [ 112.974770][ T5364] EXT4-fs (loop4): free_blocks=2415919104 [ 112.980603][ T5364] EXT4-fs (loop4): dirty_blocks=4336 [ 112.985986][ T5364] EXT4-fs (loop4): Block reservation details [ 112.992078][ T5364] EXT4-fs (loop4): i_reserved_data_blocks=271 [ 113.036100][ T332] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 113.049129][ T332] EXT4-fs (loop4): This should not happen!! Data will be lost [ 113.049129][ T332] [ 113.270853][ T5381] loop4: detected capacity change from 0 to 4096 [ 113.336152][ T5381] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 113.378738][ T5390] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1979'. [ 113.682532][ T5400] netlink: 'syz.4.1983': attribute type 4 has an invalid length. [ 113.722868][ T5400] netlink: 'syz.4.1983': attribute type 4 has an invalid length. [ 113.808403][ T5400] syz.4.1983 (5400) used greatest stack depth: 18816 bytes left [ 114.420733][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 114.458844][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.560573][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 114.574791][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.583521][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.592179][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.600570][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 114.609333][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.008372][ T5431] loop4: detected capacity change from 0 to 512 [ 115.034476][ T5431] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 115.048555][ T5431] EXT4-fs (loop4): 1 truncate cleaned up [ 115.054778][ T5431] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,grpid,debug_want_extra_isize=0x0000000000000068,resgid=0x0000000000000000,max_dir_size_kb=0x0000000000000009,jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 115.145527][ T5439] netlink: 'syz.1.1995': attribute type 4 has an invalid length. [ 115.165579][ T5439] netlink: 'syz.1.1995': attribute type 4 has an invalid length. [ 116.622091][ T5462] loop4: detected capacity change from 0 to 512 [ 116.628673][ T30] kauditd_printk_skb: 183 callbacks suppressed [ 116.628685][ T30] audit: type=1326 audit(1753831232.980:2785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5458 comm="syz.5.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fd2299a9 code=0x7ffc0000 [ 116.679062][ T5466] overlayfs: unrecognized mount option "verity=on" or missing value [ 116.715564][ T5462] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 116.743498][ T5462] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 116.745362][ T30] audit: type=1326 audit(1753831233.110:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5458 comm="syz.5.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f47fd2299a9 code=0x7ffc0000 [ 116.795251][ T5462] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,usrquota,prjquota,usrquota,user_xattr,usrjquota=min_batch_time=0x00000000ffffffff,bsddf,usrjquota=,,errors=continue. Quota mode: writeback. [ 116.819745][ T30] audit: type=1326 audit(1753831233.110:2787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5458 comm="syz.5.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fd2299a9 code=0x7ffc0000 [ 116.867847][ T5462] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.2004: Directory hole found for htree leaf block 0 [ 116.878691][ T30] audit: type=1326 audit(1753831233.110:2788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5458 comm="syz.5.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fd2299a9 code=0x7ffc0000 [ 116.907356][ T30] audit: type=1326 audit(1753831233.110:2789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5458 comm="syz.5.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47fd2299a9 code=0x7ffc0000 [ 116.931239][ T5476] EXT4-fs (loop4): user quota file already specified [ 116.940491][ T5478] loop5: detected capacity change from 0 to 4096 [ 116.942678][ T30] audit: type=1326 audit(1753831233.110:2790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5458 comm="syz.5.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fd2299a9 code=0x7ffc0000 [ 116.971699][ T30] audit: type=1326 audit(1753831233.110:2791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5458 comm="syz.5.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47fd2299a9 code=0x7ffc0000 [ 117.007462][ T30] audit: type=1326 audit(1753831233.110:2792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5458 comm="syz.5.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fd2299a9 code=0x7ffc0000 [ 117.065846][ T5478] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 117.085236][ T30] audit: type=1326 audit(1753831233.110:2793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5458 comm="syz.5.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47fd2299a9 code=0x7ffc0000 [ 117.109118][ T30] audit: type=1326 audit(1753831233.110:2794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5458 comm="syz.5.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fd2299a9 code=0x7ffc0000 [ 117.198324][ T5484] loop4: detected capacity change from 0 to 512 [ 117.218667][ T5484] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 117.243555][ T5488] loop0: detected capacity change from 0 to 512 [ 117.261257][ T5484] EXT4-fs (loop4): 1 truncate cleaned up [ 117.267021][ T5484] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,grpid,debug_want_extra_isize=0x0000000000000068,resgid=0x0000000000000000,max_dir_size_kb=0x0000000000000009,jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 117.307997][ T5488] EXT4-fs (loop0): Test dummy encryption mode enabled [ 117.315449][ T5488] EXT4-fs (loop0): Can't change test_dummy_encryption on remount [ 117.702876][ T5500] binfmt_misc: register: failed to install interpreter file ./file2 [ 117.722278][ T5495] hub 9-0:1.0: USB hub found [ 117.727054][ T5495] hub 9-0:1.0: 1 port detected [ 117.864541][ T5508] IPv6: NLM_F_REPLACE set, but no existing node found! [ 117.887337][ T5508] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2011'. [ 118.365855][ T5522] loop0: detected capacity change from 0 to 512 [ 118.377573][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 118.443817][ T5522] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 118.472394][ T5522] ext4 filesystem being mounted at /397/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.483696][ T5540] binfmt_misc: register: failed to install interpreter file ./file2 [ 118.551317][ T5534] hub 9-0:1.0: USB hub found [ 118.559270][ T5534] hub 9-0:1.0: 1 port detected [ 119.281519][ T5565] loop1: detected capacity change from 0 to 512 [ 119.337037][ T5565] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 119.348416][ T5565] ext4 filesystem being mounted at /452/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.463153][ T5580] loop0: detected capacity change from 0 to 2048 [ 119.730997][ T5580] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 119.831620][ T5593] loop5: detected capacity change from 0 to 512 [ 119.867241][ T5594] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 119.882231][ T5594] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 119.895174][ T5594] EXT4-fs (loop0): This should not happen!! Data will be lost [ 119.895174][ T5594] [ 119.905109][ T5594] EXT4-fs (loop0): Total free blocks count 0 [ 119.911280][ T5593] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 119.911436][ T5594] EXT4-fs (loop0): Free/Dirty block details [ 119.923152][ T5593] EXT4-fs (loop5): 1 truncate cleaned up [ 119.927402][ T5594] EXT4-fs (loop0): free_blocks=2415919104 [ 119.933233][ T5593] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,lazytime,barrier,barrier,max_batch_time=0x0000000000000005,grpquota,,errors=continue. Quota mode: writeback. [ 119.938698][ T5594] EXT4-fs (loop0): dirty_blocks=3568 [ 119.962067][ T5594] EXT4-fs (loop0): Block reservation details [ 119.968141][ T5594] EXT4-fs (loop0): i_reserved_data_blocks=223 [ 119.996459][ T398] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 120.008972][ T398] EXT4-fs (loop0): This should not happen!! Data will be lost [ 120.008972][ T398] [ 120.047549][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.054788][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.096780][ T5601] loop0: detected capacity change from 0 to 4096 [ 120.126956][ T5601] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 120.468287][ T5609] Restarting kernel threads ... done. [ 120.659436][ T5619] loop0: detected capacity change from 0 to 512 [ 120.830885][ T5619] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 121.037313][ T5619] EXT4-fs (loop0): 1 truncate cleaned up [ 121.056277][ T5619] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,grpid,debug_want_extra_isize=0x0000000000000068,resgid=0x0000000000000000,max_dir_size_kb=0x0000000000000009,jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 121.678152][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 121.678167][ T30] audit: type=1326 audit(1753831238.120:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5640 comm="syz.0.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939d05c9a9 code=0x7ffc0000 [ 122.340101][ T30] audit: type=1326 audit(1753831238.160:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5640 comm="syz.0.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f939d05c9a9 code=0x7ffc0000 [ 122.366037][ T30] audit: type=1326 audit(1753831238.160:2855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5640 comm="syz.0.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939d05c9a9 code=0x7ffc0000 [ 122.663449][ T5659] loop4: detected capacity change from 0 to 512 [ 122.687281][ T5659] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 122.724687][ T5659] EXT4-fs (loop4): 1 truncate cleaned up [ 122.725580][ T5656] binfmt_misc: register: failed to install interpreter file ./file2 [ 122.743121][ T5659] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,grpid,debug_want_extra_isize=0x0000000000000068,resgid=0x0000000000000000,max_dir_size_kb=0x0000000000000009,jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 122.749457][ T5653] hub 9-0:1.0: USB hub found [ 122.781812][ T5653] hub 9-0:1.0: 1 port detected [ 126.549883][ T5703] loop5: detected capacity change from 0 to 4096 [ 126.592784][ T5703] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 127.470809][ T20] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 127.593902][ T30] audit: type=1326 audit(1753831244.040:2856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="syz.3.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35f51019a9 code=0x7ffc0000 [ 127.676236][ T30] audit: type=1326 audit(1753831244.070:2857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="syz.3.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35f51019a9 code=0x7ffc0000 [ 127.700930][ T30] audit: type=1326 audit(1753831244.080:2858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="syz.3.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f35f51019a9 code=0x7ffc0000 [ 127.743065][ T30] audit: type=1326 audit(1753831244.080:2859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="syz.3.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35f51019a9 code=0x7ffc0000 [ 127.767879][ T30] audit: type=1326 audit(1753831244.080:2860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="syz.3.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35f51019a9 code=0x7ffc0000 [ 127.791984][ T5730] loop4: detected capacity change from 0 to 1024 [ 127.804546][ T5730] EXT4-fs (loop4): Ignoring removed nobh option [ 127.811186][ T5730] EXT4-fs (loop4): Ignoring removed bh option [ 127.831326][ T5730] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,noload,,errors=continue. Quota mode: writeback. [ 127.861249][ T30] audit: type=1400 audit(1753831244.310:2861): avc: denied { create } for pid=5729 comm="syz.4.2090" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 127.930723][ T20] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.941823][ T20] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 127.955755][ T20] usb 6-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 127.966162][ T20] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.978328][ T20] usb 6-1: config 0 descriptor?? [ 128.121933][ T5735] overlayfs: conflicting lowerdir path [ 128.176334][ T30] audit: type=1400 audit(1753831244.510:2862): avc: denied { mounton } for pid=5729 comm="syz.4.2090" path="/322/file1/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 128.204430][ T30] audit: type=1400 audit(1753831244.510:2863): avc: denied { write } for pid=5729 comm="syz.4.2090" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 128.262340][ T30] audit: type=1400 audit(1753831244.510:2864): avc: denied { add_name } for pid=5729 comm="syz.4.2090" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 128.282983][ T30] audit: type=1400 audit(1753831244.520:2865): avc: denied { setattr } for pid=5729 comm="syz.4.2090" name="work" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 128.517380][ T20] a4tech 0003:09DA:000A.0004: hidraw0: USB HID v0.00 Device [HID 09da:000a] on usb-dummy_hcd.5-1/input0 [ 128.660720][ T5746] loop0: detected capacity change from 0 to 512 [ 128.707841][ T5750] loop4: detected capacity change from 0 to 4096 [ 128.718766][ T445] usb 6-1: USB disconnect, device number 3 [ 128.724829][ T5746] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 128.742626][ T5750] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 128.767593][ T5746] EXT4-fs (loop0): 1 truncate cleaned up [ 128.775510][ T5746] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,lazytime,barrier,barrier,max_batch_time=0x0000000000000005,grpquota,,errors=continue. Quota mode: writeback. [ 129.281809][ T20] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 129.301551][ T20] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 129.331903][ T5771] loop5: detected capacity change from 0 to 128 [ 129.411275][ T5771] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 129.441834][ T5771] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 130.930276][ T5794] loop0: detected capacity change from 0 to 4096 [ 130.972298][ T5794] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 131.206808][ T5801] loop4: detected capacity change from 0 to 512 [ 131.234960][ T5801] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 131.278272][ T5801] EXT4-fs (loop4): 1 truncate cleaned up [ 131.284319][ T5801] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,grpid,debug_want_extra_isize=0x0000000000000068,resgid=0x0000000000000000,max_dir_size_kb=0x0000000000000009,jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 131.710356][ T5813] Restarting kernel threads ... done. [ 131.767798][ T60] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 132.140705][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.151659][ T60] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 132.164495][ T60] usb 2-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 132.211657][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.222772][ T60] usb 2-1: config 0 descriptor?? [ 132.293205][ T5820] binfmt_misc: register: failed to install interpreter file ./file2 [ 132.302086][ T5819] hub 9-0:1.0: USB hub found [ 132.306815][ T5819] hub 9-0:1.0: 1 port detected [ 132.380704][ T1236] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 132.970780][ T289] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 133.370691][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 133.370705][ T30] audit: type=1326 audit(1753831249.810:2911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5841 comm="syz.3.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35f51019a9 code=0x7ffc0000 [ 133.412282][ T60] a4tech 0003:09DA:000A.0006: hidraw0: USB HID v0.00 Device [HID 09da:000a] on usb-dummy_hcd.1-1/input0 [ 133.424613][ T30] audit: type=1326 audit(1753831249.840:2912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5841 comm="syz.3.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f35f51019a9 code=0x7ffc0000 [ 133.440747][ T289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.448252][ T30] audit: type=1326 audit(1753831249.840:2913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5841 comm="syz.3.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35f51019a9 code=0x7ffc0000 [ 133.481187][ T30] audit: type=1326 audit(1753831249.850:2914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5841 comm="syz.3.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35f51019a9 code=0x7ffc0000 [ 133.484389][ T289] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 133.515737][ T30] audit: type=1326 audit(1753831249.850:2915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5841 comm="syz.3.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35f51019a9 code=0x7ffc0000 [ 133.539254][ T30] audit: type=1326 audit(1753831249.850:2916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5841 comm="syz.3.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35f51019a9 code=0x7ffc0000 [ 133.562819][ T289] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.570661][ T30] audit: type=1326 audit(1753831249.850:2917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5841 comm="syz.3.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35f51019a9 code=0x7ffc0000 [ 133.594392][ T1236] usb 1-1: Using ep0 maxpacket: 32 [ 133.594549][ T289] usb 5-1: config 0 descriptor?? [ 133.618728][ T463] usb 2-1: USB disconnect, device number 3 [ 133.620674][ T30] audit: type=1326 audit(1753831249.850:2918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5841 comm="syz.3.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35f51019a9 code=0x7ffc0000 [ 133.655974][ T30] audit: type=1326 audit(1753831249.850:2919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5841 comm="syz.3.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35f51019a9 code=0x7ffc0000 [ 133.680019][ T30] audit: type=1326 audit(1753831249.850:2920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5841 comm="syz.3.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f35f51019a9 code=0x7ffc0000 [ 133.706456][ T5846] IPv6: NLM_F_REPLACE set, but no existing node found! [ 133.774325][ T1236] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.785527][ T1236] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 133.794819][ T1236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.803922][ T1236] usb 1-1: config 0 descriptor?? [ 133.851365][ T1236] hub 1-1:0.0: USB hub found [ 134.060926][ T1236] hub 1-1:0.0: 1 port detected [ 134.085324][ T5853] binfmt_misc: register: failed to install interpreter file ./file2 [ 134.139086][ T5851] hub 9-0:1.0: USB hub found [ 134.143839][ T5851] hub 9-0:1.0: 1 port detected [ 134.240714][ T289] usbhid 5-1:0.0: can't add hid device: -71 [ 134.246670][ T289] usbhid: probe of 5-1:0.0 failed with error -71 [ 134.257755][ T289] usb 5-1: USB disconnect, device number 2 [ 134.780252][ T5875] loop4: detected capacity change from 0 to 2048 [ 134.794083][ T5875] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 134.922167][ T5681] usb 1-1: USB disconnect, device number 2 [ 134.940895][ T1236] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 134.952425][ T5880] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 134.983735][ T5880] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 480 with error 28 [ 135.020336][ T5880] EXT4-fs (loop4): This should not happen!! Data will be lost [ 135.020336][ T5880] [ 135.030117][ T5880] EXT4-fs (loop4): Total free blocks count 0 [ 135.036160][ T5880] EXT4-fs (loop4): Free/Dirty block details [ 135.042324][ T5880] EXT4-fs (loop4): free_blocks=2415919104 [ 135.048053][ T5880] EXT4-fs (loop4): dirty_blocks=480 [ 135.053477][ T5880] EXT4-fs (loop4): Block reservation details [ 135.059462][ T5880] EXT4-fs (loop4): i_reserved_data_blocks=30 [ 135.132271][ T5892] loop4: detected capacity change from 0 to 512 [ 135.142156][ T5892] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 135.154186][ T5892] EXT4-fs (loop4): 1 truncate cleaned up [ 135.159910][ T5892] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,lazytime,barrier,barrier,max_batch_time=0x0000000000000005,grpquota,,errors=continue. Quota mode: writeback. [ 135.290193][ T5902] loop4: detected capacity change from 0 to 512 [ 135.322567][ T5902] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 135.337099][ T5902] ext4 filesystem being mounted at /341/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.748831][ T5916] loop0: detected capacity change from 0 to 2048 [ 135.782271][ T5916] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 135.958873][ T5919] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 135.973977][ T5919] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 135.986471][ T5919] EXT4-fs (loop0): This should not happen!! Data will be lost [ 135.986471][ T5919] [ 135.996422][ T5919] EXT4-fs (loop0): Total free blocks count 0 [ 136.002720][ T5919] EXT4-fs (loop0): Free/Dirty block details [ 136.009329][ T5919] EXT4-fs (loop0): free_blocks=2415919104 [ 136.020700][ T5919] EXT4-fs (loop0): dirty_blocks=5344 [ 136.026209][ T5919] EXT4-fs (loop0): Block reservation details [ 136.033037][ T5919] EXT4-fs (loop0): i_reserved_data_blocks=334 [ 136.043309][ T5920] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 136.098212][ T5920] EXT4-fs (loop0): This should not happen!! Data will be lost [ 136.098212][ T5920] [ 136.482487][ T5930] loop4: detected capacity change from 0 to 512 [ 136.533407][ T5930] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 136.684920][ T5930] EXT4-fs (loop4): 1 truncate cleaned up [ 136.690602][ T5930] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,lazytime,barrier,barrier,max_batch_time=0x0000000000000005,grpquota,,errors=continue. Quota mode: writeback. [ 137.403192][ T5950] loop0: detected capacity change from 0 to 512 [ 137.442201][ T5950] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 137.443597][ T5957] loop5: detected capacity change from 0 to 512 [ 137.482765][ T5950] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,init_itable=0x0000000000000000,errors=remount-ro,noauto_da_alloc,dioread_lock,. Quota mode: writeback. [ 137.502778][ T5950] ext4 filesystem being mounted at /424/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.515042][ T5957] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 137.534510][ T5957] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.554380][ T5967] loop4: detected capacity change from 0 to 2048 [ 137.621020][ T5974] loop0: detected capacity change from 0 to 512 [ 137.641975][ T5967] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 137.656289][ T5974] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 137.742268][ T5974] EXT4-fs (loop0): 1 truncate cleaned up [ 137.856004][ T5974] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,lazytime,barrier,barrier,max_batch_time=0x0000000000000005,grpquota,,errors=continue. Quota mode: writeback. [ 137.959209][ T5981] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 137.974348][ T5981] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1650 with error 28 [ 137.988314][ T5981] EXT4-fs (loop4): This should not happen!! Data will be lost [ 137.988314][ T5981] [ 137.998176][ T5981] EXT4-fs (loop4): Total free blocks count 0 [ 138.004240][ T5981] EXT4-fs (loop4): Free/Dirty block details [ 138.010220][ T5981] EXT4-fs (loop4): free_blocks=2415919104 [ 138.016028][ T5981] EXT4-fs (loop4): dirty_blocks=1664 [ 138.021705][ T5981] EXT4-fs (loop4): Block reservation details [ 138.027696][ T5981] EXT4-fs (loop4): i_reserved_data_blocks=104 [ 138.034233][ T5982] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 138.046933][ T5982] EXT4-fs (loop4): This should not happen!! Data will be lost [ 138.046933][ T5982] [ 138.419428][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 138.419443][ T30] audit: type=1326 audit(1753831254.860:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6002 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe85ee9a9 code=0x7ffc0000 [ 138.449640][ T30] audit: type=1326 audit(1753831254.860:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6002 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe85ee9a9 code=0x7ffc0000 [ 138.475507][ T30] audit: type=1326 audit(1753831254.870:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6002 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f2fe85ee9a9 code=0x7ffc0000 [ 138.563888][ T30] audit: type=1326 audit(1753831254.870:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6002 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe85ee9a9 code=0x7ffc0000 [ 138.613766][ T30] audit: type=1326 audit(1753831254.870:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6002 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe85ee9a9 code=0x7ffc0000 [ 138.638673][ T30] audit: type=1326 audit(1753831254.870:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6002 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fe85ee9a9 code=0x7ffc0000 [ 138.663071][ T30] audit: type=1326 audit(1753831254.870:3013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6002 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe85ee9a9 code=0x7ffc0000 [ 138.691901][ T30] audit: type=1326 audit(1753831254.870:3014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6002 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe85ee9a9 code=0x7ffc0000 [ 138.715573][ T30] audit: type=1326 audit(1753831254.870:3015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6002 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fe85ee9a9 code=0x7ffc0000 [ 138.739325][ T30] audit: type=1326 audit(1753831254.900:3016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6002 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe85ee9a9 code=0x7ffc0000 [ 138.944238][ T6018] loop0: detected capacity change from 0 to 512 [ 138.953714][ T6018] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 138.965125][ T6018] EXT4-fs (loop0): 1 truncate cleaned up [ 138.970944][ T6018] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,lazytime,barrier,barrier,max_batch_time=0x0000000000000005,grpquota,,errors=continue. Quota mode: writeback. [ 140.445277][ T6039] loop0: detected capacity change from 0 to 2048 [ 140.553121][ T6039] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 140.741211][ T6059] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 140.762853][ T6059] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 580 with error 28 [ 140.777958][ T6059] EXT4-fs (loop0): This should not happen!! Data will be lost [ 140.777958][ T6059] [ 140.830272][ T6059] EXT4-fs (loop0): Total free blocks count 0 [ 140.877635][ T6059] EXT4-fs (loop0): Free/Dirty block details [ 141.026886][ T6059] EXT4-fs (loop0): free_blocks=2415919104 [ 141.086912][ T6059] EXT4-fs (loop0): dirty_blocks=592 [ 141.318134][ T6064] loop5: detected capacity change from 0 to 40427 [ 141.342961][ T6064] F2FS-fs (loop5): invalid crc value [ 141.377141][ T6059] EXT4-fs (loop0): Block reservation details [ 141.492260][ T6059] EXT4-fs (loop0): i_reserved_data_blocks=37 [ 141.507198][ T6064] F2FS-fs (loop5): Found nat_bits in checkpoint [ 141.553293][ T6064] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 142.395528][ T5126] handle_bad_sector: 20564 callbacks suppressed [ 142.395548][ T5126] attempt to access beyond end of device [ 142.395548][ T5126] loop5: rw=2049, want=45104, limit=40427 [ 142.681366][ T6105] loop5: detected capacity change from 0 to 512 [ 142.723131][ T6105] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 142.738098][ T6105] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.774693][ T6113] binfmt_misc: register: failed to install interpreter file ./file2 [ 142.784724][ T6113] hub 9-0:1.0: USB hub found [ 142.789475][ T6113] hub 9-0:1.0: 1 port detected [ 142.831308][ T6118] loop4: detected capacity change from 0 to 512 [ 142.841287][ T6118] EXT4-fs (loop4): Ignoring removed oldalloc option [ 142.855654][ T6118] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 142.865736][ T6118] EXT4-fs (loop4): orphan cleanup on readonly fs [ 142.874580][ T6118] EXT4-fs error (device loop4): ext4_acquire_dquot:6198: comm syz.4.2217: Failed to acquire dquot type 1 [ 142.886474][ T6118] EXT4-fs (loop4): 1 truncate cleaned up [ 142.892385][ T6118] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,mblk_io_submit,abort,nodiscard,noinit_itable,,errors=continue. Quota mode: writeback. [ 144.294165][ T6154] binfmt_misc: register: failed to install interpreter file ./file2 [ 144.303115][ T6152] hub 9-0:1.0: USB hub found [ 144.307948][ T6152] hub 9-0:1.0: 1 port detected [ 144.325347][ T30] kauditd_printk_skb: 115 callbacks suppressed [ 144.325362][ T30] audit: type=1326 audit(1753831260.770:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6155 comm="syz.1.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83862de9a9 code=0x7ffc0000 [ 144.356499][ T30] audit: type=1326 audit(1753831260.770:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6155 comm="syz.1.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83862de9a9 code=0x7ffc0000 [ 144.372649][ T6158] loop1: detected capacity change from 0 to 2048 [ 144.386934][ T30] audit: type=1326 audit(1753831260.770:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6155 comm="syz.1.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f83862de9a9 code=0x7ffc0000 [ 144.410912][ T30] audit: type=1326 audit(1753831260.770:3133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6155 comm="syz.1.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83862de9a9 code=0x7ffc0000 [ 144.422226][ T6158] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 144.434660][ T30] audit: type=1326 audit(1753831260.770:3134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6155 comm="syz.1.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83862de9a9 code=0x7ffc0000 [ 144.573781][ T6161] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 144.588835][ T6161] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 144.601543][ T6161] EXT4-fs (loop1): This should not happen!! Data will be lost [ 144.601543][ T6161] [ 144.611281][ T6161] EXT4-fs (loop1): Total free blocks count 0 [ 144.617298][ T6161] EXT4-fs (loop1): Free/Dirty block details [ 144.623341][ T6161] EXT4-fs (loop1): free_blocks=2415919104 [ 144.629100][ T6161] EXT4-fs (loop1): dirty_blocks=3664 [ 144.630474][ T6166] loop5: detected capacity change from 0 to 512 [ 144.634694][ T6161] EXT4-fs (loop1): Block reservation details [ 144.647028][ T6161] EXT4-fs (loop1): i_reserved_data_blocks=229 [ 144.684830][ T398] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 144.694797][ T6166] EXT4-fs (loop5): orphan cleanup on readonly fs [ 144.701179][ T398] EXT4-fs (loop1): This should not happen!! Data will be lost [ 144.701179][ T398] [ 144.703472][ T6166] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 144.722799][ T6166] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 144.738025][ T6166] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.2231: attempt to clear invalid blocks 2 len 1 [ 144.751282][ T6166] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.2231: invalid indirect mapped block 1819239214 (level 0) [ 144.765855][ T6166] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.2231: invalid indirect mapped block 1819239214 (level 1) [ 144.780308][ T6166] EXT4-fs (loop5): 1 truncate cleaned up [ 144.786234][ T6166] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv0,abort,bsddf,noquota,usrjquota=..,errors=continue. Quota mode: writeback. [ 144.818810][ T6166] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 144.825133][ T6172] loop1: detected capacity change from 0 to 512 [ 144.828492][ T6166] EXT4-fs error (device loop5): ext4_remount:6024: comm syz.5.2231: Abort forced by user [ 144.844507][ T6166] EXT4-fs (loop5): Remounting filesystem read-only [ 144.851065][ T6166] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: writeback. [ 145.113114][ T6172] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 145.127782][ T6172] ext4 filesystem being mounted at /490/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.150572][ T6178] loop4: detected capacity change from 0 to 512 [ 145.201671][ T6180] loop5: detected capacity change from 0 to 4096 [ 145.222590][ T6178] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 145.236262][ T6178] EXT4-fs (loop4): 1 truncate cleaned up [ 145.242147][ T6178] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,lazytime,barrier,barrier,max_batch_time=0x0000000000000005,grpquota,,errors=continue. Quota mode: writeback. [ 145.242885][ T6180] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 145.391361][ T30] audit: type=1326 audit(1753831261.840:3135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6189 comm="syz.4.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe85ee9a9 code=0x7ffc0000 [ 145.415050][ T30] audit: type=1326 audit(1753831261.840:3136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6189 comm="syz.4.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe85ee9a9 code=0x7ffc0000 [ 145.439003][ T30] audit: type=1326 audit(1753831261.840:3137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6189 comm="syz.4.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f2fe85ee9a9 code=0x7ffc0000 [ 145.462722][ T30] audit: type=1326 audit(1753831261.840:3138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6189 comm="syz.4.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe85ee9a9 code=0x7ffc0000 [ 145.486396][ T30] audit: type=1326 audit(1753831261.840:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6189 comm="syz.4.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fe85ee9a9 code=0x7ffc0000 [ 145.518352][ T6195] loop4: detected capacity change from 0 to 512 [ 145.614348][ T6195] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 145.629157][ T6195] EXT4-fs (loop4): 1 truncate cleaned up [ 145.635493][ T6195] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,grpid,debug_want_extra_isize=0x0000000000000068,resgid=0x0000000000000000,max_dir_size_kb=0x0000000000000009,jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 147.023383][ T6223] loop5: detected capacity change from 0 to 512 [ 147.064688][ T6223] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 147.081265][ T6223] EXT4-fs (loop5): 1 truncate cleaned up [ 147.086985][ T6223] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,lazytime,barrier,barrier,max_batch_time=0x0000000000000005,grpquota,,errors=continue. Quota mode: writeback. [ 147.229110][ T6244] loop1: detected capacity change from 0 to 512 [ 147.276342][ T6251] loop5: detected capacity change from 0 to 2048 [ 147.295515][ T6244] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 147.309954][ T6244] ext4 filesystem being mounted at /493/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.362986][ T6251] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 147.634728][ T6259] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 147.649987][ T6259] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 624 with error 28 [ 147.662478][ T6259] EXT4-fs (loop5): This should not happen!! Data will be lost [ 147.662478][ T6259] [ 147.672275][ T6259] EXT4-fs (loop5): Total free blocks count 0 [ 147.678315][ T6259] EXT4-fs (loop5): Free/Dirty block details [ 147.684338][ T6259] EXT4-fs (loop5): free_blocks=2415919104 [ 147.690115][ T6259] EXT4-fs (loop5): dirty_blocks=624 [ 147.695409][ T6259] EXT4-fs (loop5): Block reservation details [ 147.701448][ T6259] EXT4-fs (loop5): i_reserved_data_blocks=39 [ 147.710669][ T463] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 147.722943][ T398] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 147.735270][ T398] EXT4-fs (loop5): This should not happen!! Data will be lost [ 147.735270][ T398] [ 148.140383][ T6269] loop0: detected capacity change from 0 to 512 [ 148.148919][ T6269] EXT4-fs (loop0): Ignoring removed oldalloc option [ 148.155858][ T6269] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 148.173890][ T6269] EXT4-fs (loop0): orphan cleanup on readonly fs [ 148.183823][ T6269] EXT4-fs error (device loop0): ext4_acquire_dquot:6198: comm syz.0.2262: Failed to acquire dquot type 1 [ 148.198212][ T6269] EXT4-fs (loop0): 1 truncate cleaned up [ 148.214039][ T6269] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,mblk_io_submit,abort,nodiscard,noinit_itable,,errors=continue. Quota mode: writeback. [ 148.370797][ T463] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.375905][ T6290] loop0: detected capacity change from 0 to 2048 [ 148.384084][ T463] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.427424][ T6291] loop1: detected capacity change from 0 to 512 [ 148.532232][ T6291] EXT4-fs (loop1): orphan cleanup on readonly fs [ 148.554806][ T6290] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 148.699583][ T463] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 148.708980][ T463] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.709194][ T6291] EXT4-fs error (device loop1): ext4_acquire_dquot:6198: comm syz.1.2270: Failed to acquire dquot type 1 [ 148.725905][ T463] usb 5-1: config 0 descriptor?? [ 148.742562][ T6291] EXT4-fs (loop1): 1 truncate cleaned up [ 148.748396][ T6291] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 148.849617][ T6302] loop1: detected capacity change from 0 to 512 [ 148.868751][ T6298] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 148.883925][ T6298] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 148.896610][ T6298] EXT4-fs (loop0): This should not happen!! Data will be lost [ 148.896610][ T6298] [ 148.907742][ T6298] EXT4-fs (loop0): Total free blocks count 0 [ 148.913915][ T6298] EXT4-fs (loop0): Free/Dirty block details [ 148.915388][ T6302] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 148.919945][ T6298] EXT4-fs (loop0): free_blocks=2415919104 [ 148.934578][ T6302] ext4 filesystem being mounted at /498/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.939803][ T6298] EXT4-fs (loop0): dirty_blocks=5376 [ 148.955763][ T6298] EXT4-fs (loop0): Block reservation details [ 148.962002][ T6298] EXT4-fs (loop0): i_reserved_data_blocks=336 [ 148.993330][ T6300] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 1024 with error 28 [ 149.006431][ T6300] EXT4-fs (loop0): This should not happen!! Data will be lost [ 149.006431][ T6300] [ 149.211919][ T463] hid-thrustmaster 0003:044F:B65D.0007: unknown main item tag 0x0 [ 149.229052][ T463] hid-thrustmaster 0003:044F:B65D.0007: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 149.245436][ T463] hid-thrustmaster 0003:044F:B65D.0007: Wrong number of endpoints? [ 149.409194][ T6329] netlink: 'syz.0.2282': attribute type 4 has an invalid length. [ 149.608701][ T6333] loop5: detected capacity change from 0 to 512 [ 149.620068][ T6333] EXT4-fs (loop5): orphan cleanup on readonly fs [ 149.627383][ T6333] __quota_error: 149 callbacks suppressed [ 149.627399][ T6333] Quota error (device loop5): find_tree_dqentry: Getting block too big (196613 >= 6) [ 149.632138][ T463] usb 5-1: USB disconnect, device number 3 [ 149.633700][ T6333] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 149.650657][ C0] hid-thrustmaster 0003:044F:B65D.0007: URB to get model id failed with error -2 [ 149.658237][ T6333] EXT4-fs error (device loop5): ext4_acquire_dquot:6198: comm syz.5.2284: Failed to acquire dquot type 1 [ 149.726801][ T6333] EXT4-fs (loop5): 1 truncate cleaned up [ 149.737115][ T6333] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 150.062704][ T6342] loop1: detected capacity change from 0 to 32768 [ 150.172592][ T30] audit: type=1326 audit(1753831266.620:3285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6351 comm="syz.5.2290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fd2299a9 code=0x7ffc0000 [ 150.197459][ T30] audit: type=1326 audit(1753831266.620:3286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6351 comm="syz.5.2290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fd2299a9 code=0x7ffc0000 [ 150.222911][ T30] audit: type=1326 audit(1753831266.620:3287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6351 comm="syz.5.2290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f47fd2299a9 code=0x7ffc0000 [ 150.256491][ T30] audit: type=1326 audit(1753831266.620:3288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6351 comm="syz.5.2290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fd2299a9 code=0x7ffc0000 [ 150.364857][ T30] audit: type=1326 audit(1753831266.620:3289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6351 comm="syz.5.2290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47fd2299a9 code=0x7ffc0000 [ 150.390103][ T30] audit: type=1326 audit(1753831266.620:3290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6351 comm="syz.5.2290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fd2299a9 code=0x7ffc0000 [ 150.444652][ T6359] loop4: detected capacity change from 0 to 2048 [ 150.448661][ T30] audit: type=1326 audit(1753831266.620:3291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6351 comm="syz.5.2290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47fd2299a9 code=0x7ffc0000 [ 150.474867][ T30] audit: type=1326 audit(1753831266.640:3292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6351 comm="syz.5.2290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fd2299a9 code=0x7ffc0000 [ 150.522470][ T6359] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 150.662043][ T6372] loop0: detected capacity change from 0 to 128 [ 150.706020][ T6369] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 150.721937][ T6369] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 150.734898][ T6369] EXT4-fs (loop4): This should not happen!! Data will be lost [ 150.734898][ T6369] [ 150.744609][ T6369] EXT4-fs (loop4): Total free blocks count 0 [ 150.750713][ T6369] EXT4-fs (loop4): Free/Dirty block details [ 150.756693][ T6369] EXT4-fs (loop4): free_blocks=2415919104 [ 150.762982][ T6369] EXT4-fs (loop4): dirty_blocks=3376 [ 150.770797][ T6369] EXT4-fs (loop4): Block reservation details [ 150.776946][ T6369] EXT4-fs (loop4): i_reserved_data_blocks=211 [ 150.795181][ T332] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 1322 with error 28 [ 150.813937][ T332] EXT4-fs (loop4): This should not happen!! Data will be lost [ 150.813937][ T332] [ 151.479039][ T6408] loop0: detected capacity change from 0 to 512 [ 151.490202][ T6408] EXT4-fs (loop0): orphan cleanup on readonly fs [ 152.207307][ T6408] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 152.398738][ T289] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 152.416525][ T6408] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 152.431780][ T289] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 152.473758][ T6408] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.2309: attempt to clear invalid blocks 2 len 1 [ 152.539752][ T6408] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2309: invalid indirect mapped block 1819239214 (level 0) [ 152.662044][ T6408] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2309: invalid indirect mapped block 1819239214 (level 1) [ 152.676433][ T6408] EXT4-fs (loop0): 1 truncate cleaned up [ 152.682262][ T6408] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv0,abort,bsddf,noquota,usrjquota=..,errors=continue. Quota mode: writeback. [ 152.971285][ T6408] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 152.988264][ T6408] EXT4-fs error (device loop0): ext4_remount:6024: comm syz.0.2309: Abort forced by user [ 152.998330][ T6408] EXT4-fs (loop0): Remounting filesystem read-only [ 153.004888][ T6408] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 153.007360][ T6417] hid-generic 0000:0000:0000.0008: pid 6417 passed too short report [ 153.052241][ T6435] binfmt_misc: register: failed to install interpreter file ./file2 [ 153.064568][ T6435] hub 9-0:1.0: USB hub found [ 153.074876][ T6435] hub 9-0:1.0: 1 port detected [ 153.110772][ T6441] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 153.312661][ T6445] Restarting kernel threads ... done. [ 153.642811][ T6455] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 153.650817][ T6455] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 153.713108][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 153.723287][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 154.100779][ T457] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 155.189027][ T457] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.200024][ T457] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.211061][ T457] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 155.220185][ T457] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.301168][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 155.301182][ T30] audit: type=1326 audit(1753831271.750:3355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.4.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe85ee9a9 code=0x7ffc0000 [ 155.354246][ T457] usb 6-1: config 0 descriptor?? [ 155.355924][ T30] audit: type=1326 audit(1753831271.780:3356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.4.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f2fe85ee9a9 code=0x7ffc0000 [ 155.384079][ T30] audit: type=1326 audit(1753831271.780:3357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.4.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe85ee9a9 code=0x7ffc0000 [ 155.408454][ T30] audit: type=1326 audit(1753831271.780:3358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.4.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fe85ee9a9 code=0x7ffc0000 [ 155.432260][ T30] audit: type=1326 audit(1753831271.780:3359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.4.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe85ee9a9 code=0x7ffc0000 [ 155.500467][ T30] audit: type=1326 audit(1753831271.780:3360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.4.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fe85ee9a9 code=0x7ffc0000 [ 155.524886][ T30] audit: type=1326 audit(1753831271.780:3361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.4.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe85ee9a9 code=0x7ffc0000 [ 155.549123][ T30] audit: type=1326 audit(1753831271.780:3362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.4.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fe85ee9a9 code=0x7ffc0000 [ 155.575069][ T30] audit: type=1326 audit(1753831271.780:3363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.4.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe85ee9a9 code=0x7ffc0000 [ 155.614515][ T30] audit: type=1326 audit(1753831271.780:3364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.4.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f2fe85ee9a9 code=0x7ffc0000 [ 155.876131][ T457] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 155.921201][ T457] hid-thrustmaster 0003:044F:B65D.0009: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0 [ 155.945212][ T457] hid-thrustmaster 0003:044F:B65D.0009: Wrong number of endpoints? [ 156.351913][ T60] usb 6-1: USB disconnect, device number 4 [ 156.370667][ C0] hid-thrustmaster 0003:044F:B65D.0009: URB to get model id failed with error -2 [ 156.480211][ T6494] binfmt_misc: register: failed to install interpreter file ./file2 [ 156.489642][ T6493] hub 9-0:1.0: USB hub found [ 156.494570][ T6493] hub 9-0:1.0: 1 port detected [ 156.748102][ T6504] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 157.131930][ T6510] Restarting kernel threads ... done. [ 157.448918][ T6512] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2343'. [ 158.883875][ T6531] binfmt_misc: register: failed to install interpreter file ./file2 [ 158.972360][ T6526] hub 9-0:1.0: USB hub found [ 158.977773][ T6526] hub 9-0:1.0: 1 port detected [ 159.365441][ T6544] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.372564][ T6544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.379885][ T6544] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.386939][ T6544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.510845][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 160.424412][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 160.424427][ T30] audit: type=1400 audit(1753831276.870:3382): avc: denied { create } for pid=6555 comm="syz.5.2357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 160.451479][ T30] audit: type=1400 audit(1753831276.890:3383): avc: denied { setopt } for pid=6555 comm="syz.5.2357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 160.482107][ T6560] loop5: detected capacity change from 0 to 4096 [ 161.353316][ T6560] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 161.470269][ T6560] fs-verity: sha256 using implementation "sha256-avx2" [ 162.551826][ T6585] loop1: detected capacity change from 0 to 512 [ 162.580701][ T30] audit: type=1400 audit(1753831278.960:3384): avc: denied { mounton } for pid=6579 comm="syz.4.2365" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 162.635613][ T30] audit: type=1400 audit(1753831278.960:3385): avc: denied { mount } for pid=6579 comm="syz.4.2365" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 162.661446][ T6585] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 162.673201][ T6585] EXT4-fs (loop1): 1 truncate cleaned up [ 162.678861][ T6585] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,grpid,debug_want_extra_isize=0x0000000000000068,resgid=0x0000000000000000,max_dir_size_kb=0x0000000000000009,jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 164.270813][ T30] audit: type=1326 audit(1753831280.700:3386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6600 comm="syz.0.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939d05c9a9 code=0x7ffc0000 [ 164.326436][ T30] audit: type=1326 audit(1753831280.700:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6600 comm="syz.0.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939d05c9a9 code=0x7ffc0000 [ 164.333583][ T6607] binfmt_misc: register: failed to install interpreter file ./file2 [ 164.380849][ T30] audit: type=1326 audit(1753831280.700:3388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6600 comm="syz.0.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f939d05c9a9 code=0x7ffc0000 [ 164.409211][ T6615] hub 9-0:1.0: USB hub found [ 164.420915][ T6615] hub 9-0:1.0: 1 port detected [ 164.421296][ T30] audit: type=1326 audit(1753831280.700:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6600 comm="syz.0.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939d05c9a9 code=0x7ffc0000 [ 164.449432][ T30] audit: type=1326 audit(1753831280.700:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6600 comm="syz.0.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939d05c9a9 code=0x7ffc0000 [ 165.251552][ T30] audit: type=1400 audit(1753831281.700:3391): avc: denied { setopt } for pid=6622 comm="syz.1.2379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 165.323162][ T6640] overlayfs: failed to clone lowerpath [ 166.451839][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 166.451860][ T30] audit: type=1400 audit(1753831282.900:3397): avc: denied { create } for pid=6652 comm="syz.0.2386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 166.484275][ T6654] loop0: detected capacity change from 0 to 512 [ 166.553340][ T6658] loop5: detected capacity change from 0 to 512 [ 166.601398][ T6654] EXT4-fs (loop0): Test dummy encryption mode enabled [ 166.675391][ T6654] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 166.954107][ T6654] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 167.016235][ T6654] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,delalloc,prjquota,usrquota,resuid=0x000000000000ee00,usrjquota=min_batch_time=0x00000000fffffffc,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 167.049344][ T6658] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 167.068086][ T6658] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.079832][ T6654] EXT4-fs (loop0): user quota file already specified [ 167.244615][ T6674] binfmt_misc: register: failed to install interpreter file ./file2 [ 167.255617][ T6673] hub 9-0:1.0: USB hub found [ 167.260724][ T6673] hub 9-0:1.0: 1 port detected [ 168.022004][ T6684] loop0: detected capacity change from 0 to 4096 [ 168.064605][ T6684] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 169.228252][ T6705] Restarting kernel threads ... done. [ 169.285491][ T6708] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.292799][ T6708] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.305199][ T30] audit: type=1326 audit(1753831285.750:3398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6709 comm="syz.3.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35f51019a9 code=0x7ffc0000 [ 169.353122][ T30] audit: type=1326 audit(1753831285.780:3399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6709 comm="syz.3.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f35f51019a9 code=0x7ffc0000 [ 169.379015][ T30] audit: type=1326 audit(1753831285.780:3400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6709 comm="syz.3.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35f51019a9 code=0x7ffc0000 [ 169.410603][ T30] audit: type=1400 audit(1753831285.790:3401): avc: denied { setattr } for pid=6711 comm="syz.1.2402" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 169.434812][ T30] audit: type=1400 audit(1753831285.800:3402): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 169.564279][ T6723] loop4: detected capacity change from 0 to 1024 [ 169.577274][ T6723] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 169.596930][ T30] audit: type=1400 audit(1753831286.040:3403): avc: denied { read } for pid=6725 comm="syz.1.2405" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 169.643892][ T30] audit: type=1400 audit(1753831286.070:3404): avc: denied { open } for pid=6725 comm="syz.1.2405" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 169.656540][ T6723] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,norecovery,resgid=0x0000000000000000,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,grpid,auto_da_alloc=0x0000000000000343,grpid,barrier=0x0000000000000007,nombcache,. Quota mode: none. [ 169.674276][ T30] audit: type=1400 audit(1753831286.070:3405): avc: denied { map } for pid=6725 comm="syz.1.2405" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 169.720715][ T30] audit: type=1400 audit(1753831286.160:3406): avc: denied { setattr } for pid=6721 comm="syz.4.2407" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 170.632038][ T6740] loop4: detected capacity change from 0 to 512 [ 170.653909][ T6742] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.661074][ T6742] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.843820][ T6740] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 170.845063][ T6757] loop5: detected capacity change from 0 to 512 [ 170.893004][ T6740] ext4 filesystem being mounted at /403/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 170.948822][ T6740] EXT4-fs error (device loop4): ext4_do_update_inode:5235: inode #2: comm syz.4.2411: corrupted inode contents [ 170.965348][ T6740] EXT4-fs error (device loop4): ext4_dirty_inode:6071: inode #2: comm syz.4.2411: mark_inode_dirty error [ 170.985060][ T6740] EXT4-fs error (device loop4): ext4_do_update_inode:5235: inode #2: comm syz.4.2411: corrupted inode contents [ 170.999076][ T6740] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.2411: mark_inode_dirty error [ 171.028276][ T6757] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 171.043120][ T6757] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.399607][ T6788] binfmt_misc: register: failed to install interpreter file ./file2 [ 171.448162][ T6790] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.455373][ T6790] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.485764][ T6794] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.492848][ T6794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.595707][ T6796] loop4: detected capacity change from 0 to 40427 [ 171.633835][ T6796] F2FS-fs (loop4): invalid crc value [ 171.641300][ T6796] F2FS-fs (loop4): Found nat_bits in checkpoint [ 171.666800][ T6796] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 171.719843][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 171.719856][ T30] audit: type=1400 audit(1753831288.160:3413): avc: denied { ioctl } for pid=6801 comm="syz.5.2431" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 171.751686][ T30] audit: type=1400 audit(1753831288.160:3414): avc: denied { set_context_mgr } for pid=6801 comm="syz.5.2431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 171.771716][ T30] audit: type=1400 audit(1753831288.170:3415): avc: denied { call } for pid=6801 comm="syz.5.2431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 171.808683][ T30] audit: type=1400 audit(1753831288.170:3416): avc: denied { transfer } for pid=6801 comm="syz.5.2431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 171.837627][ T30] audit: type=1400 audit(1753831288.240:3417): avc: denied { setattr } for pid=6795 comm="syz.4.2430" name="/" dev="loop4" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 171.853826][ T5681] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 171.890958][ T5681] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 173.009913][ T30] audit: type=1400 audit(1753831289.450:3418): avc: denied { write } for pid=6828 comm="syz.4.2440" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 173.021777][ T6832] loop1: detected capacity change from 0 to 512 [ 173.166544][ T6835] loop4: detected capacity change from 0 to 16 [ 173.184510][ T6832] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 173.205104][ T6832] ext4 filesystem being mounted at /526/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.251124][ T6835] erofs: (device loop4): mounted with root inode @ nid 36. [ 173.266178][ T6835] erofs: (device loop4): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 173.275434][ T6835] erofs: (device loop4): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 173.284611][ T6835] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 173.294132][ T6835] erofs: (device loop4): z_erofs_readahead: readahead error at page 83 @ nid 36 [ 173.303548][ T6835] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 173.313193][ T6835] erofs: (device loop4): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 174.413556][ T289] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 174.422545][ T6835] erofs: (device loop4): z_erofs_readahead: readahead error at page 81 @ nid 36 [ 174.432685][ T6835] erofs: (device loop4): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 174.438813][ T30] audit: type=1400 audit(1753831290.880:3419): avc: denied { mounton } for pid=6853 comm="syz.0.2449" path="/466/file0" dev="tmpfs" ino=2504 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 174.464983][ T6835] erofs: (device loop4): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 174.474089][ T6835] erofs: (device loop4): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 174.483458][ T6835] erofs: (device loop4): z_erofs_readahead: readahead error at page 77 @ nid 36 [ 174.493171][ T6835] erofs: (device loop4): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 174.502358][ T6835] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 174.511709][ T6835] erofs: (device loop4): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 174.549877][ T6835] erofs: (device loop4): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 174.558990][ T6835] erofs: (device loop4): z_erofs_readahead: readahead error at page 73 @ nid 36 [ 174.568272][ T6835] erofs: (device loop4): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 174.607840][ T6835] erofs: (device loop4): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 174.617473][ T6835] erofs: (device loop4): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 174.626823][ T6835] erofs: (device loop4): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 174.636420][ T6835] erofs: (device loop4): z_erofs_readahead: readahead error at page 60 @ nid 36 [ 174.656140][ T6835] erofs: (device loop4): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 174.666119][ T6835] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 174.675684][ T6835] erofs: (device loop4): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 174.688129][ T6864] loop0: detected capacity change from 0 to 1024 [ 174.691835][ T6835] erofs: (device loop4): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 174.705765][ T6835] erofs: (device loop4): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 174.714910][ T6835] erofs: (device loop4): z_erofs_readahead: readahead error at page 55 @ nid 36 [ 174.727824][ T6835] erofs: (device loop4): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 174.737127][ T6835] erofs: (device loop4): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 174.746277][ T6835] erofs: (device loop4): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 174.797072][ T6835] erofs: (device loop4): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 174.811672][ T6835] erofs: (device loop4): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 174.822577][ T6835] erofs: (device loop4): z_erofs_readahead: readahead error at page 49 @ nid 36 [ 174.832821][ T6835] erofs: (device loop4): z_erofs_readahead: readahead error at page 48 @ nid 36 [ 174.846040][ T6835] erofs: (device loop4): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 174.849375][ T289] usb 6-1: Using ep0 maxpacket: 32 [ 174.857222][ T6864] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 174.880223][ T6835] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 174.891599][ T6835] erofs: (device loop4): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 174.902106][ T6835] erofs: (device loop4): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 174.922749][ T6835] erofs: (device loop4): z_erofs_readahead: readahead error at page 44 @ nid 36 [ 174.932766][ T6835] erofs: (device loop4): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 174.942473][ T6835] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 174.952298][ T6835] erofs: (device loop4): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 174.961649][ T6835] erofs: (device loop4): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 174.977831][ T6835] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 174.978960][ T30] audit: type=1400 audit(1753831291.420:3420): avc: denied { map } for pid=6863 comm="syz.0.2453" path="/468/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 175.010925][ T30] audit: type=1400 audit(1753831291.460:3421): avc: denied { execute } for pid=6863 comm="syz.0.2453" path="/468/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 175.011450][ T6835] erofs: (device loop4): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 175.083423][ T6835] erofs: (device loop4): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 175.092772][ T6835] erofs: (device loop4): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 175.103751][ T6835] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 175.113134][ T6835] erofs: (device loop4): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 175.122725][ T6835] erofs: (device loop4): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 175.131881][ T6835] erofs: (device loop4): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 175.141330][ T6835] erofs: (device loop4): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 175.150454][ T6835] erofs: (device loop4): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 175.161156][ T289] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 175.172122][ T6835] attempt to access beyond end of device [ 175.172122][ T6835] loop4: rw=524288, want=848, limit=16 [ 175.205215][ T6835] attempt to access beyond end of device [ 175.205215][ T6835] loop4: rw=524288, want=13478624104, limit=16 [ 175.217430][ T6835] attempt to access beyond end of device [ 175.217430][ T6835] loop4: rw=524288, want=13478624080, limit=16 [ 175.229851][ T6835] attempt to access beyond end of device [ 175.229851][ T6835] loop4: rw=524288, want=96, limit=16 [ 175.241113][ T6835] attempt to access beyond end of device [ 175.241113][ T6835] loop4: rw=524288, want=32, limit=16 [ 175.252321][ T6835] attempt to access beyond end of device [ 175.252321][ T6835] loop4: rw=524288, want=14425508776, limit=16 [ 175.318373][ T6864] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3876: comm syz.0.2453: Allocating blocks 497-513 which overlap fs metadata [ 175.332653][ T6864] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3876: comm syz.0.2453: Allocating blocks 497-513 which overlap fs metadata [ 175.371106][ T289] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 175.386552][ T289] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 175.395018][ T289] usb 6-1: Product: syz [ 175.399219][ T289] usb 6-1: Manufacturer: syz [ 175.404258][ T289] usb 6-1: SerialNumber: syz [ 175.421121][ T6874] EXT4-fs (loop0): pa ffff888111e142a0: logic 496, phys. 401, len 7 [ 175.429177][ T6874] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 175.448225][ T289] usb 6-1: config 0 descriptor?? [ 175.470771][ T6833] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 175.587011][ T6885] loop4: detected capacity change from 0 to 256 [ 175.612796][ T6885] exfat: Deprecated parameter 'utf8' [ 175.618338][ T6885] exfat: Deprecated parameter 'utf8' [ 175.635523][ T6885] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 175.669277][ T30] audit: type=1400 audit(1753831292.110:3422): avc: denied { accept } for pid=6877 comm="syz.4.2455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 175.674768][ T289] hub 6-1:0.0: bad descriptor, ignoring hub [ 175.695450][ T289] hub: probe of 6-1:0.0 failed with error -5 [ 175.802473][ T6893] loop0: detected capacity change from 0 to 1024 [ 175.830013][ T6893] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 175.840902][ T6893] ext4 filesystem being mounted at /470/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.487279][ T6909] binfmt_misc: register: failed to install interpreter file ./file2 [ 176.497357][ T6903] hub 9-0:1.0: USB hub found [ 176.502287][ T6903] hub 9-0:1.0: 1 port detected [ 176.558307][ T289] usb 6-1: USB disconnect, device number 5 [ 176.887475][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 176.887488][ T30] audit: type=1400 audit(1753831293.330:3425): avc: denied { setopt } for pid=6928 comm="syz.4.2472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 176.956251][ T6942] binfmt_misc: register: failed to install interpreter file ./file2 [ 176.966044][ T6942] hub 9-0:1.0: USB hub found [ 177.307512][ T6942] hub 9-0:1.0: 1 port detected [ 178.620688][ T30] audit: type=1400 audit(1753831294.530:3426): avc: denied { ioctl } for pid=6956 comm="syz.5.2483" path="/dev/input/event0" dev="devtmpfs" ino=256 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 178.662455][ T6969] loop0: detected capacity change from 0 to 512 [ 178.762004][ T30] audit: type=1400 audit(1753831295.210:3427): avc: denied { mount } for pid=6977 comm="syz.3.2490" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 178.786376][ T6969] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 178.874396][ T6969] EXT4-fs (loop0): 1 truncate cleaned up [ 178.880262][ T6969] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,grpid,debug_want_extra_isize=0x0000000000000068,resgid=0x0000000000000000,max_dir_size_kb=0x0000000000000009,jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 178.999613][ T6991] loop4: detected capacity change from 0 to 256 [ 179.028761][ T6992] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.2494'. [ 179.418720][ T6991] exfat: Deprecated parameter 'namecase' [ 179.446283][ T6991] exfat: Unknown parameter 'keep_last_dots' [ 179.463028][ T6998] loop0: detected capacity change from 0 to 1024 [ 179.568233][ T6998] EXT4-fs (loop0): Ignoring removed nobh option [ 179.600966][ T6998] EXT4-fs (loop0): Ignoring removed bh option [ 179.612224][ T6998] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 179.666690][ T6998] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier,dioread_lock,data_err=ignore,resgid=0x0000000000000000,data_err=ignore,jqfmt=vfsv0,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none. [ 180.563887][ T7020] loop5: detected capacity change from 0 to 16 [ 180.577652][ T7022] loop1: detected capacity change from 0 to 512 [ 180.586631][ T30] audit: type=1326 audit(1753831297.030:3428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7024 comm="syz.3.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35f51019a9 code=0x7ffc0000 [ 180.611127][ T7022] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 180.621233][ T30] audit: type=1326 audit(1753831297.030:3429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7024 comm="syz.3.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f35f51019a9 code=0x7ffc0000 [ 180.647060][ T30] audit: type=1326 audit(1753831297.030:3430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7024 comm="syz.3.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35f51019a9 code=0x7ffc0000 [ 180.689917][ T7022] EXT4-fs (loop1): 1 truncate cleaned up [ 180.695867][ T7022] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,grpid,debug_want_extra_isize=0x0000000000000068,resgid=0x0000000000000000,max_dir_size_kb=0x0000000000000009,jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 180.722639][ T7020] erofs: (device loop5): mounted with root inode @ nid 36. [ 180.851084][ T7020] BUG: scheduling while atomic: syz.5.2505/7020/0x00000002 [ 180.858351][ T7020] Modules linked in: [ 180.862303][ T7020] Preemption disabled at: [ 180.862311][ T7020] [] z_erofs_reload_indexes+0x310/0x410 [ 180.873852][ T7020] CPU: 0 PID: 7020 Comm: syz.5.2505 Tainted: G W 5.15.189-syzkaller-00091-gf32b52534f1d #0 [ 180.885174][ T7020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 180.895667][ T7020] Call Trace: [ 180.898930][ T7020] [ 180.901840][ T7020] __dump_stack+0x21/0x30 [ 180.906152][ T7020] dump_stack_lvl+0xee/0x150 [ 180.910721][ T7020] ? show_regs_print_info+0x20/0x20 [ 180.915957][ T7020] ? z_erofs_reload_indexes+0x310/0x410 [ 180.921483][ T7020] dump_stack+0x15/0x20 [ 180.925615][ T7020] __schedule_bug+0x174/0x230 [ 180.930272][ T7020] ? ttwu_queue_wakelist+0x490/0x490 [ 180.935532][ T7020] ? selinux_file_ioctl+0x377/0x480 [ 180.940711][ T7020] __schedule+0xc2f/0x14c0 [ 180.945218][ T7020] ? __fget_files+0x2c4/0x320 [ 180.949875][ T7020] ? release_firmware_map_entry+0x190/0x190 [ 180.955747][ T7020] ? __x64_sys_futex+0x100/0x100 [ 180.960676][ T7020] ? __kasan_check_write+0x14/0x20 [ 180.965869][ T7020] schedule+0x11e/0x1e0 [ 180.970010][ T7020] exit_to_user_mode_loop+0x50/0xe0 [ 180.975302][ T7020] exit_to_user_mode_prepare+0x5a/0xa0 [ 180.980757][ T7020] syscall_exit_to_user_mode+0x1a/0x30 [ 180.986212][ T7020] do_syscall_64+0x58/0xa0 [ 180.990617][ T7020] ? clear_bhb_loop+0x50/0xa0 [ 180.995294][ T7020] ? clear_bhb_loop+0x50/0xa0 [ 180.999956][ T7020] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 181.005833][ T7020] RIP: 0033:0x7f47fd2299a9 [ 181.010272][ T7020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.029863][ T7020] RSP: 002b:00007f47fb8920e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 181.038266][ T7020] RAX: 0000000000000001 RBX: 00007f47fd450fa8 RCX: 00007f47fd2299a9 [ 181.046240][ T7020] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f47fd450fac [ 181.054194][ T7020] RBP: 00007f47fd450fa0 R08: 00311f08daad3d88 R09: 0000000000000000 [ 181.062151][ T7020] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f47fd450fac [ 181.070117][ T7020] R13: 0000000000000000 R14: 00007ffea3213720 R15: 00007ffea3213808 [ 181.078089][ T7020] [ 181.082085][ T7020] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117]