last executing test programs: 9.096921969s ago: executing program 2 (id=811): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1d, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8003}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x3c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8954, &(0x7f0000000000)={{0x2, 0x0, @remote}, {0x0, @link_local}, 0x0, {0x2, 0x0, @broadcast}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000480)=""/233, &(0x7f00000001c0)=0xe9) sendmsg$tipc(r6, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x2, {0x41, 0x1}}, 0x10, 0x0}, 0x8c4) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x50) getrandom(&(0x7f00000002c0)=""/55, 0x37, 0x3) 8.741238327s ago: executing program 1 (id=813): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xa, 0x1, 0x8, 0x8}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 8.740294968s ago: executing program 1 (id=814): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000240)='timer_start\x00', r2}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) r3 = syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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") r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000d80)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d2, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x40000, 0x2}, {}, {}, 0x0, 0x0, 0xa}}, [@mark={0xc, 0x15, {0x35075d, 0xffffffff}}]}, 0x104}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f800000016000100000050a8000000000000ff010000000000000001ff010000000000000001000000feffffff00"/66, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe880000000000000000000000000001000000003300000000000000000000000000ffffac14142900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00"/176], 0xf8}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1a37c1, 0x42) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) fsetxattr(r3, &(0x7f0000000040)=@random={'os2.', '+@\x98\x00'}, &(0x7f0000000980)='\x00\xcc\xcel\xdf\xaa[\xc1\xe8e\xdf0\xbep\xc9\x0f\xbb\xc4\xd4\x011/\xfd\x8a\xaa-L\xc44=\x1f\x92b\t\x1d\xa4\x7f.\tW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbd\x81\x97/\x1d\xc4\xdd6F\x16-\x95+T\xc8\xe81\xbf_+\xc1p\xd1H4E\xaa\xa4\x03\xc2H~Y\x98\x88\xbfq\x11\xa9s \xf6\".\xf1i\x9e\xaf\x87v\xe4+\xbb=\x8a\xd3Q\x86w\xfa\x8f\xff3\xc5\xaf\xad\x0e:+XUW\x01\x90\xd6\x8b\xc1\xeb\x066\xbf\x9aS\xc7\\\xc6\x03\xeb\x8b\xc8\x03\b\x98\x19\x0eY\xd25jq\xe9H\xbe\x14\v\xb9\x9e\x1e\xa2\xd5d\xf4\x84\x17\xde\x8f\xe1]+O\xe7)\x12\x7f\x80\xdbMnNHOi?\xb5\xa5l\xc5R.\xa2\xf46y\x82\xa1J\xe7\x11\xd7T*\x91\xd0\x0f\x89\xe64y-\xb1}\xadgo?\xf59\xff\xff\x00\x00\x00\x00\x00\x00\x1f\x90\'0\x127\xf2\x04\xf6\x01\x82\xed\xec\x18@%\xb2\x95T\x1b\xe3\xb3@\v\xd1vW\x80|\xb6\x03Z', 0x104, 0x2) 8.738592148s ago: executing program 3 (id=815): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f0000001600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@resuid}, {@lazytime}, {@noblock_validity}, {@usrquota}]}, 0x1, 0x443, &(0x7f0000001040)="$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") r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2, &(0x7f0000005f80)={[{@shortname_mixed}, {@uni_xlateno}, {@uni_xlateno}, {@uni_xlate}, {@uni_xlateno}, {@shortname_lower}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@shortname_winnt}, {@rodir}, {@uni_xlate}, {@uni_xlate}, {@shortname_lower}, {@uni_xlateno}, {@shortname_lower}, {@utf8no}, {@numtail}, {@shortname_lower}]}, 0x29, 0x365, &(0x7f0000000640)="$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") mmap(&(0x7f00002b3000/0x4000)=nil, 0x4000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c9a000/0x2000)=nil) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000200)={0x5, 0x4, 0xe, 0x0, 0x2, 0x0, [{0xfffffffffffffffa, 0x8, 0x5, '\x00', 0x202}, {0x2, 0x5, 0x1, '\x00', 0x5081}]}) openat$sysfs(0xffffffffffffff9c, 0x0, 0x4000, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 8.21225881s ago: executing program 1 (id=818): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000240)='timer_start\x00', r2}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) r3 = syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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") r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000d80)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d2, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x40000, 0x2}, {}, {}, 0x0, 0x0, 0xa}}, [@mark={0xc, 0x15, {0x35075d, 0xffffffff}}]}, 0x104}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f800000016000100000050a8000000000000ff010000000000000001ff010000000000000001000000feffffff00"/66, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe880000000000000000000000000001000000003300000000000000000000000000ffffac14142900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00"/176], 0xf8}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1a37c1, 0x42) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) fsetxattr(r3, &(0x7f0000000040)=@random={'os2.', '+@\x98\x00'}, &(0x7f0000000980)='\x00\xcc\xcel\xdf\xaa[\xc1\xe8e\xdf0\xbep\xc9\x0f\xbb\xc4\xd4\x011/\xfd\x8a\xaa-L\xc44=\x1f\x92b\t\x1d\xa4\x7f.\tW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbd\x81\x97/\x1d\xc4\xdd6F\x16-\x95+T\xc8\xe81\xbf_+\xc1p\xd1H4E\xaa\xa4\x03\xc2H~Y\x98\x88\xbfq\x11\xa9s \xf6\".\xf1i\x9e\xaf\x87v\xe4+\xbb=\x8a\xd3Q\x86w\xfa\x8f\xff3\xc5\xaf\xad\x0e:+XUW\x01\x90\xd6\x8b\xc1\xeb\x066\xbf\x9aS\xc7\\\xc6\x03\xeb\x8b\xc8\x03\b\x98\x19\x0eY\xd25jq\xe9H\xbe\x14\v\xb9\x9e\x1e\xa2\xd5d\xf4\x84\x17\xde\x8f\xe1]+O\xe7)\x12\x7f\x80\xdbMnNHOi?\xb5\xa5l\xc5R.\xa2\xf46y\x82\xa1J\xe7\x11\xd7T*\x91\xd0\x0f\x89\xe64y-\xb1}\xadgo?\xf59\xff\xff\x00\x00\x00\x00\x00\x00\x1f\x90\'0\x127\xf2\x04\xf6\x01\x82\xed\xec\x18@%\xb2\x95T\x1b\xe3\xb3@\v\xd1vW\x80|\xb6\x03Z', 0x104, 0x2) 8.163598064s ago: executing program 2 (id=819): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80e02, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x30, 0x401) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000040)={0x5, 0x1}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000380)) 7.745932398s ago: executing program 3 (id=820): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x1}, 0x48) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv2(0xffffffffffffffff, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x2, 0x5002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r6, 0x5456, &(0x7f0000000000)={0x5, 0x9, 0x1, 0x0, 0x6, "1723784f0565dd1daf07fddcb681d44fa53e26"}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) unshare(0x62000000) 7.5873841s ago: executing program 2 (id=822): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xeb38e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xe9) fallocate(r4, 0x0, 0x4000, 0x1001f0) r5 = socket$inet6(0xa, 0x2, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = timerfd_create(0x0, 0x0) read(r6, &(0x7f0000000380)=""/189, 0x8) timerfd_settime(r6, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000000)=0x5, 0x4) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) sendto$inet6(r5, &(0x7f0000000100)="00b11e080078aa08", 0x8, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000180)={@dev}, &(0x7f00000001c0)=0x14) recvmmsg(r5, &(0x7f0000006280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000040)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}], [{@pcr={'pcr', 0x3d, 0x3f}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}]}, 0x3, 0x4d1, &(0x7f0000000b80)="$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") fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xee01, 0x0, 0x1000) 6.038459375s ago: executing program 3 (id=824): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xa, 0x1, 0x8, 0x8}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 5.904358216s ago: executing program 3 (id=825): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x8000, &(0x7f0000000040)={[{@nodelalloc}, {@orlov}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000030000000800"], 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r2}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r3}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x8, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x34) lseek(0xffffffffffffffff, 0x9, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x7}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xfff}, 0x1c) readv(r4, &(0x7f0000001500)=[{&(0x7f0000000140)=""/31, 0x1f}, {0x0}], 0x2) (fail_nth: 1) 5.788901065s ago: executing program 1 (id=827): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x8000, &(0x7f0000000040)={[{@nodelalloc}, {@orlov}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r2}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r3}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x8, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000006b000000a30000000000b223e3dbaf444c2ac8a4e6225538d9bd8ebde3624f8ca2fc215fdf58fb6b246ff971a4ad4a167be5c211e01db81774852d8b3e37f3737128a4c44ce1a412d1171a0000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) lseek(0xffffffffffffffff, 0x9, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r7, &(0x7f0000000280)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14aab82d", @ANYRESDEC=r2, @ANYBLOB="040029bd7000ffdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x40, 0x80, 0x7fff, 0x48d2, {{0xd, 0x4, 0x0, 0x38, 0x34, 0x66, 0x0, 0x8, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@lsrr={0x83, 0x1b, 0xa0, [@empty, @empty, @empty, @multicast2, @multicast2, @loopback]}, @end, @noop]}}}}}) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f00000009c0)=ANY=[@ANYBLOB="9e000000", @ANYRES16=r8, @ANYBLOB="000125bd7000fbdbdf250500000040000680060005004e240000060005004e22000014000400fc01000000000000000000000000000008000300ac1414bb050002000600000008000300640101000800040003000000040001803400018014000400fe800000000000000000000000000023080006000f00000014000400000000000000000000000000000000000800030004000000"], 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x7}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xfff}, 0x1c) readv(r5, &(0x7f0000001500)=[{&(0x7f0000000140)=""/31, 0x1f}, {0x0}], 0x2) 5.697293532s ago: executing program 0 (id=829): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1d, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8003}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x3c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8954, &(0x7f0000000000)={{0x2, 0x0, @remote}, {0x0, @link_local}, 0x0, {0x2, 0x0, @broadcast}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000480)=""/233, &(0x7f00000001c0)=0xe9) sendmsg$tipc(r4, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x2, {0x41, 0x1}}, 0x10, 0x0}, 0x8c4) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x50) getrandom(&(0x7f00000002c0)=""/55, 0x37, 0x3) 5.213574261s ago: executing program 2 (id=830): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xeb38e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xe9) fallocate(r4, 0x0, 0x4000, 0x1001f0) r5 = socket$inet6(0xa, 0x2, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = timerfd_create(0x0, 0x0) read(r6, &(0x7f0000000380)=""/189, 0x8) timerfd_settime(r6, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) sendto$inet6(r5, &(0x7f0000000100)="00b11e080078aa08", 0x8, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000180)={@dev}, &(0x7f00000001c0)=0x14) recvmmsg(r5, &(0x7f0000006280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) 4.797067924s ago: executing program 4 (id=831): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xeb38e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xe9) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) 3.943320183s ago: executing program 2 (id=832): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xeb38e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xe9) fallocate(r4, 0x0, 0x4000, 0x1001f0) r5 = socket$inet6(0xa, 0x2, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = timerfd_create(0x0, 0x0) read(r6, &(0x7f0000000380)=""/189, 0x8) timerfd_settime(r6, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000000)=0x5, 0x4) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) sendto$inet6(r5, &(0x7f0000000100)="00b11e080078aa08", 0x8, 0x0, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r7, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xee01, 0x0, 0x1000) 3.942812653s ago: executing program 0 (id=833): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) setreuid(0x0, 0xee01) 3.870142729s ago: executing program 4 (id=834): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x1}, 0x48) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv2(0xffffffffffffffff, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, r3, 0x2, 0x5002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r7, 0x5456, &(0x7f0000000000)={0x5, 0x9, 0x1, 0x0, 0x6, "1723784f0565dd1daf07fddcb681d44fa53e26"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) unshare(0x62000000) 3.869662189s ago: executing program 0 (id=835): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xa, 0x1, 0x8, 0x8}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 3.725529771s ago: executing program 0 (id=836): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) userfaultfd(0x80001) unshare(0x2040400) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002100)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0x28, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x10, 0xa}}, @TCA_FW_MASK={0x8, 0x5, 0x6}, @TCA_FW_INDEV={0x14, 0x3, 'veth1_virt_wifi\x00'}]}}]}, 0x54}}, 0x24040084) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/warn_count', 0x80800, 0x113) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r4}, 0xffffffffffffff39) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r5 = eventfd(0xff7ffff7) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000500)={r5, 0x3, 0x2, r5}) preadv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000300)=""/155, 0x9b}, {&(0x7f00000003c0)=""/127, 0x7f}, {&(0x7f0000000540)=""/250, 0xfa}, {&(0x7f0000000440)=""/81, 0x51}, {&(0x7f00000004c0)=""/30, 0x1e}], 0x5, 0x3, 0x1) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={r5, 0x7, 0x2, r5}) 2.4866269s ago: executing program 4 (id=837): openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x2) 2.24508818s ago: executing program 3 (id=838): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) 2.23977175s ago: executing program 4 (id=839): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x8000, &(0x7f0000000040)={[{@nodelalloc}, {@orlov}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000030000000800000008"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$KVM_GET_TSC_KHZ_vm(r0, 0xaea3) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x202, 0x80002) r4 = dup(r3) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000240)={0x20, 0x1, 0x2, 0x41, 0x0, 0x5, 0x0}) 2.165093116s ago: executing program 1 (id=840): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xeb38e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xe9) fallocate(r4, 0x0, 0x4000, 0x1001f0) r5 = socket$inet6(0xa, 0x2, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = timerfd_create(0x0, 0x0) read(r6, &(0x7f0000000380)=""/189, 0x8) timerfd_settime(r6, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000000)=0x5, 0x4) sendto$inet6(r5, &(0x7f0000000100)="00b11e080078aa08", 0x8, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000180)={@dev}, &(0x7f00000001c0)=0x14) recvmmsg(r5, &(0x7f0000006280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) 2.164658506s ago: executing program 0 (id=841): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xeb38e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xe9) r3 = socket$inet6(0xa, 0x2, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000000)=0x5, 0x4) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) sendto$inet6(r3, &(0x7f0000000100)="00b11e080078aa08", 0x8, 0x0, 0x0, 0x0) 2.164052716s ago: executing program 3 (id=842): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = getpid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$packet(0x11, 0x4000000000002, 0x300) chdir(0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace$pokeuser(0x6, r1, 0x5f35ba8e, 0xd4d) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000001000/0x400000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x208}, 0x0) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) write$cgroup_int(r0, &(0x7f0000000000)=0x10000000000700, 0xfffffd65) 2.012891389s ago: executing program 2 (id=843): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000000c0)='./bus\x00', 0xc808, &(0x7f0000000180)={[{@nodelalloc}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffeb8) openat(r0, &(0x7f0000000040)='.\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x0, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) inotify_init() timerfd_create(0x8, 0x0) epoll_create1(0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRESDEC=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) fsetxattr$trusted_overlay_redirect(r1, &(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0x8, 0x2) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) 1.955506353s ago: executing program 4 (id=844): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x1}, 0x48) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv2(0xffffffffffffffff, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x2, 0x5002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r6, 0x5456, &(0x7f0000000000)={0x5, 0x9, 0x1, 0x0, 0x6, "1723784f0565dd1daf07fddcb681d44fa53e26"}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) unshare(0x62000000) 3.56799ms ago: executing program 4 (id=845): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$eJzs3V1rHFUYAOB3Nkm/tSmUoiIS6IWV2k2T+FFBsF6KFgt6X5dkGmo23ZLdlCYW2l7YG2+kCCIWxB/gvZfFP+CvKGihSAl64U1kNrPtNtnN52q2zvPAtOfMzObM2TPv2Xd2dtkACmsk+6cU8WLcjK+TiMNt2wYj3ziyst/So+uT2ZLE8vInfySR5Ota+yf5/wfzygsR8cuXESdLa9utLyzOVKrVdC6vjzZmr4zWFxZPXZqtTKfT6eXxiYkzb06Mv/P2Wz3r62vn//ru43sfnPnq+NK3Pz04cieJs3Eo39bejx242V4ZiZH8ORmKs6t2HOtBY/0k2e0DYFsG8jgfimwOOBwDedQD/383ImIZKKhE/ENBtfKA1rV9j66DnxkP31+5AFrb/8GV90ZiX/Pa6MBS8tSVUXa9O9yD9rM2fv797p1siQ3eh7jRg/YAWm7eiojTg4Nr578kn/+273TzzeP1rW6jaK8/sJvuZfnP653yn9Lj/Cc65D8HO8Tudmwc/6UHPWimqyz/e7dj/vt46hoeyGvPNXO+oeTipWp6OiKej4gTMbQ3q693P+fM0v3lbtva879sydpv5YL5cTwY3Pv0Y6YqjcpO+tzu4a2Il57kv0msmf/3NXPd1eOfPR/nN9nGsfTuK922bdz/dr3PgJd/jHi14/g/uaOVrH9/crR5Poy2zoq1/rx97Ndu7W+t/72Xjf+B9fs/nLTfr61vvY0f9v2ddtu23fN/T/Jps7wnX3et0mjMjUXsST5au378yWNb9db+Wf9PHF9//ut0/u+PiM822f/bR2933bUfxn9qS+O/9cL9D7/4vlv7mxv/N5qlE/mazcx/mz3AnTx3AAAAAAAA0G9KEXEoklL5cblUKpdXPt9xNA6UqrV64+TF2vzlqWh+V3Y4hkqtO92H2z4PMZZ/HrZVH19Vn4iIIxHxzcD+Zr08WatO7XbnAQAAAAAAAAAAAAAAAAAAoE8c7PL9/8xvA7t9dMC/zk9+Q3FtGP+9+KUnoC95/Yfi6hL/pgUoAIEOxSX+objEPxSX+IfiEv9QXOIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAeur8uXPZsrz06PpkVp+6ujA/U7t6aiqtz5Rn5yfLk7W5K+XpWm26mpYna7Mb/b1qrXZlbDzmr4020npjtL6weGG2Nn+5ceHSbGU6vZAO/Se9AgAAAAAAAAAAAAAAAAAAgGdLfWFxplKtpnMKXQvvxW4fxucv7+ThSedRTto6uGJbTQz2yzAp9LSwyxMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALT5JwAA//821zOC") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xeb38e000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xe9) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) 3.0662ms ago: executing program 0 (id=846): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000007c0)="7800000019001f05b9409b0dffff000d0207be04020506c8388827a685a168d9a446060045653600648dcaaf6c26c291214549932fde4a460c89b6547f5090589a86c902003a03004a32000400160012000a00000000000000000000080756ede4ccbe58800000000000000000000000000000d1ddd859228248f4", 0x7b, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) r2 = dup(r1) ioctl$GIO_UNISCRNMAP(r2, 0x43403d0e, &(0x7f0000000080)=""/96) futex(&(0x7f000000cffc)=0x40000000, 0x80000000000d, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=847): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x1, &(0x7f0000000100)={0x0, 0x6, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000180)=0x0) timer_getoverrun(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000002bc0)={[{@noblock_validity}, {@noblock_validity}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)=ANY=[@ANYBLOB="5365637500058a0c93367eb69400"], &(0x7f0000001180)='contention_begin\x00', 0x11, 0x1) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x800) ioctl$LOOP_SET_DIRECT_IO(r3, 0x401870cb, 0x10001) ioctl$BLKIOMIN(r3, 0x1278, &(0x7f0000000200)) chdir(&(0x7f0000000000)='./file0\x00') unlink(&(0x7f00000000c0)='./file0\x00') kernel console output (not intermixed with test programs): 9 code=0x7ffc0000 [ 81.134531][ T800] futex_wake_op: syz.4.127 tries to shift op by -1; fix this program [ 81.280113][ T28] audit: type=1326 audit(1755603329.249:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=795 comm="syz.2.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f512758ebe9 code=0x7ffc0000 [ 82.039682][ T804] loop4: detected capacity change from 0 to 128 [ 82.965184][ T806] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 82.973350][ T806] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 83.111925][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 83.997436][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.914983][ T28] audit: type=1326 audit(1755603329.249:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=795 comm="syz.2.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512758ebe9 code=0x7ffc0000 [ 84.947036][ T818] futex_wake_op: syz.4.130 tries to shift op by -1; fix this program [ 84.972655][ T821] futex_wake_op: syz.0.131 tries to shift op by -1; fix this program [ 85.064304][ T28] audit: type=1326 audit(1755603329.249:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=795 comm="syz.2.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512758ebe9 code=0x7ffc0000 [ 85.088345][ T28] audit: type=1326 audit(1755603329.249:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=795 comm="syz.2.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f512758ebe9 code=0x7ffc0000 [ 85.112920][ T28] audit: type=1326 audit(1755603329.249:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=795 comm="syz.2.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512758ebe9 code=0x7ffc0000 [ 86.299712][ T827] loop0: detected capacity change from 0 to 128 [ 86.456355][ T28] audit: type=1326 audit(1755603329.249:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=795 comm="syz.2.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512758ebe9 code=0x7ffc0000 [ 86.494049][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 86.899474][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.915593][ T822] loop4: detected capacity change from 0 to 128 [ 86.967539][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.991267][ T28] audit: type=1326 audit(1755603329.249:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=795 comm="syz.2.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f512758ebe9 code=0x7ffc0000 [ 87.019382][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.143785][ T830] futex_wake_op: syz.4.134 tries to shift op by -1; fix this program [ 87.196753][ T28] audit: type=1326 audit(1755603329.249:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=795 comm="syz.2.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512758ebe9 code=0x7ffc0000 [ 87.226037][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.317959][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.326467][ T835] futex_wake_op: syz.0.135 tries to shift op by -1; fix this program [ 88.395573][ T838] loop4: detected capacity change from 0 to 128 [ 89.612632][ T840] loop0: detected capacity change from 0 to 128 [ 89.881310][ T28] audit: type=1326 audit(1755603329.249:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=795 comm="syz.2.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512758ebe9 code=0x7ffc0000 [ 89.906746][ T28] audit: type=1326 audit(1755603329.249:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=795 comm="syz.2.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f512758ebe9 code=0x7ffc0000 [ 90.638623][ T28] audit: type=1326 audit(1755603329.249:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=795 comm="syz.2.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512758ebe9 code=0x7ffc0000 [ 90.721573][ T851] loop2: detected capacity change from 0 to 512 [ 90.769232][ T851] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 90.791833][ T853] futex_wake_op: syz.1.143 tries to shift op by -1; fix this program [ 91.278352][ T28] audit: type=1326 audit(1755603329.249:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=795 comm="syz.2.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512758ebe9 code=0x7ffc0000 [ 91.370733][ T862] loop1: detected capacity change from 0 to 128 [ 91.488179][ T28] audit: type=1326 audit(1755603329.249:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=795 comm="syz.2.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f512758ebe9 code=0x7ffc0000 [ 91.512261][ T851] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 91.758158][ T851] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.781926][ T28] audit: type=1326 audit(1755603329.249:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=795 comm="syz.2.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512758ebe9 code=0x7ffc0000 [ 91.983071][ T28] audit: type=1326 audit(1755603329.249:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=795 comm="syz.2.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512758ebe9 code=0x7ffc0000 [ 92.021053][ T28] audit: type=1326 audit(1755603329.249:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=795 comm="syz.2.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f512758ebe9 code=0x7ffc0000 [ 92.094228][ T28] audit: type=1326 audit(1755603329.279:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=795 comm="syz.2.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512758ebe9 code=0x7ffc0000 [ 92.200359][ T28] audit: type=1326 audit(1755603329.379:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=795 comm="syz.2.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f512758ebe9 code=0x7ffc0000 [ 92.246383][ T847] loop0: detected capacity change from 0 to 40427 [ 92.279000][ T847] F2FS-fs (loop0): Unrecognized mount option "grpquota=/dev/uhid" or missing value [ 92.308758][ T28] audit: type=1326 audit(1755603329.379:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=795 comm="syz.2.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512758ebe9 code=0x7ffc0000 [ 92.358996][ T28] audit: type=1326 audit(1755603329.379:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=795 comm="syz.2.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f512758ebe9 code=0x7ffc0000 [ 92.398826][ T851] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 92.423682][ T28] audit: type=1326 audit(1755603329.539:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=795 comm="syz.2.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512758ebe9 code=0x7ffc0000 [ 92.440623][ T851] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1833 with error 28 [ 92.483143][ T851] EXT4-fs (loop2): This should not happen!! Data will be lost [ 92.483143][ T851] [ 92.502061][ T28] audit: type=1326 audit(1755603329.539:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=795 comm="syz.2.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f512758ebe9 code=0x7ffc0000 [ 92.502401][ T851] EXT4-fs (loop2): Total free blocks count 0 [ 92.560053][ T851] EXT4-fs (loop2): Free/Dirty block details [ 92.572317][ T851] EXT4-fs (loop2): free_blocks=39626 [ 92.586528][ T851] EXT4-fs (loop2): dirty_blocks=1833 [ 92.599701][ T851] EXT4-fs (loop2): Block reservation details [ 92.615835][ T851] EXT4-fs (loop2): i_reserved_data_blocks=1833 [ 92.717432][ T285] EXT4-fs (loop2): unmounting filesystem. [ 93.245511][ T6] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 93.346554][ T856] loop4: detected capacity change from 0 to 131072 [ 93.358783][ T856] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 93.367467][ T856] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 93.387572][ T856] F2FS-fs (loop4): invalid crc value [ 93.410166][ T856] F2FS-fs (loop4): Found nat_bits in checkpoint [ 93.416623][ T510] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 93.436592][ T6] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 93.449992][ T6] usb 1-1: config 1 has an invalid descriptor of length 98, skipping remainder of the config [ 93.465900][ T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 93.475089][ T6] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 23624, setting to 64 [ 93.560066][ T856] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 93.568206][ T856] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 93.577259][ T6] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 93.590119][ T6] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 93.600950][ T6] usb 1-1: Product: syz [ 93.605144][ T6] usb 1-1: Manufacturer: syz [ 94.519476][ T6] cdc_wdm 1-1:1.0: skipping garbage [ 94.526702][ T6] cdc_wdm 1-1:1.0: skipping garbage [ 94.532128][ T6] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 94.569583][ T510] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 94.578911][ T510] usb 3-1: config 1 has an invalid descriptor of length 98, skipping remainder of the config [ 94.591197][ T510] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 94.600357][ T510] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 23624, setting to 64 [ 94.668324][ T510] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 94.677491][ T510] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 94.686001][ T510] usb 3-1: Product: syz [ 94.690173][ T510] usb 3-1: Manufacturer: syz [ 94.703252][ T510] cdc_wdm 3-1:1.0: skipping garbage [ 94.708562][ T510] cdc_wdm 3-1:1.0: skipping garbage [ 94.713794][ T510] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 94.724872][ T872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.734053][ T872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.936400][ T510] usb 1-1: USB disconnect, device number 6 [ 95.131492][ T881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.141026][ T881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.230221][ T510] usb 3-1: USB disconnect, device number 5 [ 95.312894][ T910] futex_wake_op: syz.4.156 tries to shift op by -1; fix this program [ 95.537834][ T912] loop4: detected capacity change from 0 to 128 [ 95.794597][ T914] futex_wake_op: syz.1.157 tries to shift op by -1; fix this program [ 96.868137][ T917] loop1: detected capacity change from 0 to 128 [ 98.350771][ T924] netlink: 20 bytes leftover after parsing attributes in process `syz.2.159'. [ 98.803429][ T929] futex_wake_op: syz.4.161 tries to shift op by -1; fix this program [ 98.854740][ T933] futex_wake_op: syz.1.163 tries to shift op by -1; fix this program [ 100.351085][ T942] loop4: detected capacity change from 0 to 128 [ 103.372218][ T941] loop1: detected capacity change from 0 to 128 [ 105.131870][ T965] futex_wake_op: syz.4.172 tries to shift op by -1; fix this program [ 105.342472][ T973] loop4: detected capacity change from 0 to 128 [ 105.350596][ T972] netlink: 40 bytes leftover after parsing attributes in process `syz.0.174'. [ 105.387422][ T39] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 105.657207][ T39] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 105.666838][ T39] usb 2-1: config 1 has an invalid descriptor of length 98, skipping remainder of the config [ 105.689142][ T39] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 105.700299][ T39] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 23624, setting to 64 [ 105.719045][ T39] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 105.728725][ T39] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 105.737766][ T39] usb 2-1: Product: syz [ 105.743025][ T39] usb 2-1: Manufacturer: syz [ 105.785290][ T39] cdc_wdm 2-1:1.0: skipping garbage [ 105.792228][ T39] cdc_wdm 2-1:1.0: skipping garbage [ 105.814504][ T39] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 106.405545][ T961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.414190][ T961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.061958][ T841] usb 2-1: USB disconnect, device number 4 [ 109.112018][ T1001] futex_wake_op: syz.4.183 tries to shift op by -1; fix this program [ 109.175511][ T336] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 109.239414][ T1003] futex_wake_op: syz.0.184 tries to shift op by -1; fix this program [ 110.298436][ T1005] loop4: detected capacity change from 0 to 128 [ 111.458412][ T1007] loop0: detected capacity change from 0 to 128 [ 112.473702][ T1018] netlink: 40 bytes leftover after parsing attributes in process `syz.1.186'. [ 112.879383][ T336] usb 3-1: device not accepting address 6, error -71 [ 113.658238][ T1030] loop1: detected capacity change from 0 to 40427 [ 113.665278][ T1011] loop3: detected capacity change from 0 to 131072 [ 113.678081][ T1030] F2FS-fs (loop1): Wrong SIT boundary, start(1536) end(16648704) blocks(1024) [ 113.696483][ T1011] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 113.724892][ T1011] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 113.734372][ T1030] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 113.756545][ T1011] F2FS-fs (loop3): invalid crc value [ 113.773150][ T1030] F2FS-fs (loop1): fault_injection options not supported [ 113.793296][ T1030] F2FS-fs (loop1): Image doesn't support compression [ 113.800797][ T1030] F2FS-fs (loop1): Image doesn't support compression [ 113.814094][ T1032] loop0: detected capacity change from 0 to 40427 [ 113.816240][ T1030] F2FS-fs (loop1): invalid crc value [ 113.827109][ T1011] F2FS-fs (loop3): Found nat_bits in checkpoint [ 113.845922][ T1032] F2FS-fs (loop0): Wrong SIT boundary, start(1536) end(16648704) blocks(1024) [ 113.868507][ T1032] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 113.871433][ T1030] F2FS-fs (loop1): Found nat_bits in checkpoint [ 113.895623][ T1032] F2FS-fs (loop0): fault_injection options not supported [ 113.907916][ T1032] F2FS-fs (loop0): Image doesn't support compression [ 113.924810][ T1032] F2FS-fs (loop0): Image doesn't support compression [ 113.934201][ T1011] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 113.945964][ T1011] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 113.953912][ T1032] F2FS-fs (loop0): invalid crc value [ 113.960064][ T1030] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 114.003827][ T1030] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 114.008237][ T1032] F2FS-fs (loop0): Found nat_bits in checkpoint [ 114.034009][ T1044] futex_wake_op: syz.4.195 tries to shift op by -1; fix this program [ 114.068104][ T1032] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 114.075303][ T1032] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 114.088149][ T1023] loop2: detected capacity change from 0 to 131072 [ 114.131377][ T1023] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 114.141807][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 114.141823][ T28] audit: type=1400 audit(1755603362.399:237): avc: denied { read } for pid=1010 comm="syz.3.188" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 114.176908][ T1023] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 114.262005][ T1047] loop4: detected capacity change from 0 to 128 [ 114.413200][ T1023] F2FS-fs (loop2): invalid crc value [ 114.719839][ T1023] F2FS-fs (loop2): Found nat_bits in checkpoint [ 115.365246][ T28] audit: type=1400 audit(1755603362.399:238): avc: denied { open } for pid=1010 comm="syz.3.188" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 115.442495][ T1023] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 115.471845][ T28] audit: type=1400 audit(1755603362.419:239): avc: denied { ioctl } for pid=1029 comm="syz.1.193" path="/36/bus/file1" dev="loop1" ino=10 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 115.498950][ T28] audit: type=1400 audit(1755603362.729:240): avc: denied { append } for pid=1010 comm="syz.3.188" name="file1" dev="loop3" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 115.505461][ T1023] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 115.521973][ T28] audit: type=1400 audit(1755603363.009:241): avc: denied { remove_name } for pid=1010 comm="syz.3.188" name="file1" dev="loop3" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.558952][ T28] audit: type=1400 audit(1755603363.009:242): avc: denied { unlink } for pid=1010 comm="syz.3.188" name="file1" dev="loop3" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 115.842760][ T1055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.196'. [ 116.317683][ T287] syz-executor: attempt to access beyond end of device [ 116.317683][ T287] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 116.361405][ T284] syz-executor: attempt to access beyond end of device [ 116.361405][ T284] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 116.495079][ T1059] futex_wake_op: syz.2.197 tries to shift op by -1; fix this program [ 116.652113][ T1064] futex_wake_op: syz.1.202 tries to shift op by -1; fix this program [ 117.017173][ T1067] loop2: detected capacity change from 0 to 128 [ 117.956680][ T1069] loop1: detected capacity change from 0 to 128 [ 118.207032][ T1070] netlink: 40 bytes leftover after parsing attributes in process `syz.4.203'. [ 120.917028][ T1110] futex_wake_op: syz.1.218 tries to shift op by -1; fix this program [ 121.173977][ T1116] loop1: detected capacity change from 0 to 128 [ 121.571855][ T1118] futex_wake_op: syz.4.219 tries to shift op by -1; fix this program [ 121.708869][ T1106] loop3: detected capacity change from 0 to 40427 [ 123.342334][ T1120] loop4: detected capacity change from 0 to 128 [ 123.523611][ T1106] F2FS-fs (loop3): Wrong SIT boundary, start(1536) end(16648704) blocks(1024) [ 123.770694][ T1106] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 123.926433][ T1106] F2FS-fs (loop3): fault_injection options not supported [ 123.984149][ T1106] F2FS-fs (loop3): Image doesn't support compression [ 124.017485][ T1106] F2FS-fs (loop3): Image doesn't support compression [ 124.058594][ T1106] F2FS-fs (loop3): invalid crc value [ 124.084455][ T1106] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-4) [ 124.546751][ T1126] futex_wake_op: syz.0.222 tries to shift op by -1; fix this program [ 126.144412][ T1146] loop0: detected capacity change from 0 to 128 [ 127.413265][ T1154] futex_wake_op: syz.3.230 tries to shift op by -1; fix this program [ 127.861647][ T1164] loop3: detected capacity change from 0 to 128 [ 128.178677][ T1165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.231'. [ 128.632715][ T1167] futex_wake_op: syz.0.234 tries to shift op by -1; fix this program [ 129.691090][ T1178] loop0: detected capacity change from 0 to 128 [ 131.500837][ T1200] futex_wake_op: syz.1.244 tries to shift op by -1; fix this program [ 131.635443][ T815] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 131.745716][ T1206] loop1: detected capacity change from 0 to 128 [ 131.775541][ T39] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 131.915518][ T510] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 132.088088][ T39] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 132.106889][ T39] usb 1-1: config 1 has an invalid descriptor of length 98, skipping remainder of the config [ 132.151620][ T39] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 132.189742][ T39] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 23624, setting to 64 [ 132.204224][ T510] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 132.221917][ T510] usb 3-1: config 1 has an invalid descriptor of length 98, skipping remainder of the config [ 132.260844][ T39] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 132.277144][ T510] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 132.310088][ T39] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 132.324287][ T510] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 23624, setting to 64 [ 132.775590][ T39] usb 1-1: Product: syz [ 132.779895][ T39] usb 1-1: Manufacturer: syz [ 132.787479][ T510] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 132.806556][ T39] cdc_wdm 1-1:1.0: skipping garbage [ 132.811786][ T39] cdc_wdm 1-1:1.0: skipping garbage [ 132.825693][ T510] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 132.833958][ T39] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 132.840648][ T510] usb 3-1: Product: syz [ 132.846626][ T815] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 132.855449][ T510] usb 3-1: Manufacturer: syz [ 132.855802][ T815] usb 5-1: config 1 has an invalid descriptor of length 98, skipping remainder of the config [ 132.864774][ T510] cdc_wdm 3-1:1.0: skipping garbage [ 132.885225][ T510] cdc_wdm 3-1:1.0: skipping garbage [ 133.174806][ T510] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 133.221431][ T815] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 133.222065][ T1204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.230531][ T815] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 23624, setting to 64 [ 133.250398][ T1193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.250501][ T1204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.265545][ T1193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.276624][ T815] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 133.290127][ T815] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 133.298574][ T815] usb 5-1: Product: syz [ 133.307326][ T815] usb 5-1: Manufacturer: syz [ 133.322397][ T634] usb 1-1: USB disconnect, device number 7 [ 133.332455][ T815] cdc_wdm 5-1:1.0: skipping garbage [ 133.342451][ T815] cdc_wdm 5-1:1.0: skipping garbage [ 133.348046][ T815] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 133.379407][ T1216] futex_wake_op: syz.3.249 tries to shift op by -1; fix this program [ 133.412538][ T815] usb 3-1: USB disconnect, device number 8 [ 133.583669][ T1219] loop3: detected capacity change from 0 to 128 [ 134.692865][ T428] usb 5-1: USB disconnect, device number 3 [ 136.295471][ T1228] netlink: 40 bytes leftover after parsing attributes in process `syz.4.250'. [ 137.114701][ T1233] futex_wake_op: syz.4.253 tries to shift op by -1; fix this program [ 139.688744][ T1253] loop4: detected capacity change from 0 to 128 [ 140.145706][ T1256] futex_wake_op: syz.2.260 tries to shift op by -1; fix this program [ 140.505060][ T1267] loop2: detected capacity change from 0 to 128 [ 143.273508][ T1281] futex_wake_op: syz.1.267 tries to shift op by -1; fix this program [ 143.808081][ T1286] loop1: detected capacity change from 0 to 128 [ 145.402203][ T1298] futex_wake_op: syz.2.273 tries to shift op by -1; fix this program [ 146.251326][ T1305] loop2: detected capacity change from 0 to 128 [ 148.052789][ T1311] loop1: detected capacity change from 0 to 512 [ 148.061738][ T1311] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.274: casefold flag without casefold feature [ 148.133743][ T1311] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.274: couldn't read orphan inode 15 (err -117) [ 148.149546][ T1311] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 148.171137][ T1321] FAULT_INJECTION: forcing a failure. [ 148.171137][ T1321] name failslab, interval 1, probability 0, space 0, times 1 [ 148.529197][ T1321] CPU: 1 PID: 1321 Comm: syz.0.279 Not tainted 6.1.145-syzkaller-00015-g87b9d836c3d8 #0 [ 148.538975][ T1321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 148.549057][ T1321] Call Trace: [ 148.552456][ T1321] [ 148.555404][ T1321] __dump_stack+0x21/0x24 [ 148.559774][ T1321] dump_stack_lvl+0xee/0x150 [ 148.564488][ T1321] ? __cfi_dump_stack_lvl+0x8/0x8 [ 148.569540][ T1321] dump_stack+0x15/0x24 [ 148.573738][ T1321] should_fail_ex+0x3d4/0x520 [ 148.578438][ T1321] __should_failslab+0xac/0xf0 [ 148.583218][ T1321] ? kernfs_fop_write_iter+0x156/0x410 [ 148.588714][ T1321] should_failslab+0x9/0x20 [ 148.593233][ T1321] __kmem_cache_alloc_node+0x3d/0x2c0 [ 148.598607][ T1321] ? kernfs_fop_write_iter+0x156/0x410 [ 148.604071][ T1321] __kmalloc+0xa1/0x1e0 [ 148.608237][ T1321] kernfs_fop_write_iter+0x156/0x410 [ 148.613611][ T1321] vfs_write+0x5db/0xca0 [ 148.617850][ T1321] ? slab_free_freelist_hook+0xc2/0x190 [ 148.623397][ T1321] ? __cfi_vfs_write+0x10/0x10 [ 148.628191][ T1321] ? __cfi_mutex_lock+0x10/0x10 [ 148.633217][ T1321] ? __fdget_pos+0x2cd/0x380 [ 148.637898][ T1321] ? ksys_write+0x71/0x240 [ 148.642500][ T1321] ksys_write+0x140/0x240 [ 148.646854][ T1321] ? __cfi_ksys_write+0x10/0x10 [ 148.651710][ T1321] ? debug_smp_processor_id+0x17/0x20 [ 148.657179][ T1321] __x64_sys_write+0x7b/0x90 [ 148.661768][ T1321] x64_sys_call+0x27b/0x9a0 [ 148.666269][ T1321] do_syscall_64+0x4c/0xa0 [ 148.670685][ T1321] ? clear_bhb_loop+0x30/0x80 [ 148.675355][ T1321] ? clear_bhb_loop+0x30/0x80 [ 148.680118][ T1321] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 148.686004][ T1321] RIP: 0033:0x7fcb6e18ebe9 [ 148.690415][ T1321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.710106][ T1321] RSP: 002b:00007fcb6eff3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 148.718703][ T1321] RAX: ffffffffffffffda RBX: 00007fcb6e3b5fa0 RCX: 00007fcb6e18ebe9 [ 148.726961][ T1321] RDX: 0000000000000012 RSI: 0000200000000080 RDI: 0000000000000007 [ 148.735188][ T1321] RBP: 00007fcb6eff3090 R08: 0000000000000000 R09: 0000000000000000 [ 148.743253][ T1321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.751247][ T1321] R13: 00007fcb6e3b6038 R14: 00007fcb6e3b5fa0 R15: 00007ffe58a3f7a8 [ 148.759665][ T1321] [ 148.766878][ T28] audit: type=1400 audit(1755603397.029:243): avc: denied { write } for pid=1325 comm="syz.3.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 148.806934][ T28] audit: type=1400 audit(1755603397.029:244): avc: denied { ioctl } for pid=1325 comm="syz.3.280" path="socket:[19953]" dev="sockfs" ino=19953 ioctlcmd=0x9416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 148.840704][ T28] audit: type=1400 audit(1755603397.089:245): avc: denied { append } for pid=1309 comm="syz.1.274" path="/57/file0/memory.events" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 150.276701][ T287] EXT4-fs (loop1): unmounting filesystem. [ 150.398877][ T1354] futex_wake_op: syz.1.289 tries to shift op by -1; fix this program [ 151.677811][ T1361] loop1: detected capacity change from 0 to 128 [ 152.950019][ T1377] loop2: detected capacity change from 0 to 4096 [ 153.019934][ T1377] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 154.562155][ T285] EXT4-fs (loop2): unmounting filesystem. [ 154.658604][ T28] audit: type=1400 audit(1755603402.919:246): avc: denied { read } for pid=1406 comm="syz.0.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 156.937201][ T1420] futex_wake_op: syz.4.308 tries to shift op by -1; fix this program [ 157.251877][ T1422] loop1: detected capacity change from 0 to 1024 [ 157.275516][ T510] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 157.322671][ T1426] loop4: detected capacity change from 0 to 128 [ 157.463224][ T1422] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 157.507526][ T510] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.625338][ T510] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.528788][ T510] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 158.540093][ T28] audit: type=1400 audit(1755603406.799:247): avc: denied { setopt } for pid=1421 comm="syz.1.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 158.939261][ T510] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.008379][ T28] audit: type=1400 audit(1755603406.799:248): avc: denied { connect } for pid=1421 comm="syz.1.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 159.183202][ T510] usb 1-1: config 0 descriptor?? [ 159.542082][ T510] usb 1-1: can't set config #0, error -71 [ 159.558344][ T510] usb 1-1: USB disconnect, device number 8 [ 159.613330][ T28] audit: type=1400 audit(1755603406.799:249): avc: denied { getopt } for pid=1421 comm="syz.1.310" laddr=fe80::11 lport=2 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 159.664718][ T287] EXT4-fs (loop1): unmounting filesystem. [ 159.675661][ T28] audit: type=1400 audit(1755603406.799:250): avc: denied { read } for pid=1421 comm="syz.1.310" laddr=fe80::11 lport=2 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 159.853949][ T1436] loop2: detected capacity change from 0 to 40427 [ 160.666793][ T1436] F2FS-fs (loop2): Wrong SIT boundary, start(1536) end(16648704) blocks(1024) [ 160.695437][ T1436] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 160.744949][ T1436] F2FS-fs (loop2): fault_injection options not supported [ 160.755677][ T1436] F2FS-fs (loop2): Image doesn't support compression [ 161.804480][ T1436] F2FS-fs (loop2): Image doesn't support compression [ 161.812162][ T1436] F2FS-fs (loop2): invalid crc value [ 161.883089][ T1436] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-4) [ 161.911715][ T1470] futex_wake_op: syz.4.323 tries to shift op by -1; fix this program [ 163.376327][ T1475] loop4: detected capacity change from 0 to 128 [ 164.069635][ T1485] futex_wake_op: syz.0.327 tries to shift op by -1; fix this program [ 164.302808][ T1489] loop0: detected capacity change from 0 to 128 [ 165.419728][ T28] audit: type=1400 audit(1755603413.669:251): avc: denied { bind } for pid=1496 comm="syz.2.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 165.652796][ T28] audit: type=1400 audit(1755603413.669:252): avc: denied { setopt } for pid=1496 comm="syz.2.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 166.245427][ T60] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 166.274306][ T1492] loop4: detected capacity change from 0 to 40427 [ 166.281392][ T1492] F2FS-fs (loop4): Wrong SIT boundary, start(1536) end(16648704) blocks(1024) [ 166.290637][ T1492] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 166.299363][ T1492] F2FS-fs (loop4): fault_injection options not supported [ 166.307755][ T1492] F2FS-fs (loop4): Image doesn't support compression [ 166.315215][ T1492] F2FS-fs (loop4): Image doesn't support compression [ 166.398281][ T1492] F2FS-fs (loop4): invalid crc value [ 166.426329][ T1492] F2FS-fs (loop4): Found nat_bits in checkpoint [ 166.446159][ T60] usb 3-1: too many configurations: 164, using maximum allowed: 8 [ 166.467032][ T60] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 166.485560][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.547356][ T60] usb 3-1: config 0 descriptor?? [ 166.606203][ T1492] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 166.613667][ T1492] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 166.915518][ T60] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 166.918578][ T28] audit: type=1400 audit(1755603415.179:253): avc: denied { block_suspend } for pid=1496 comm="syz.2.332" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 167.127002][ T60] usb 1-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.157128][ T60] usb 1-1: config 1 interface 0 has no altsetting 0 [ 167.299548][ T60] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 167.315686][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.324074][ T60] usb 1-1: Product: 鐸咟ᗽỠ⧭ㄬ뀕输ꅑ癤儲곒覩ᚍㆳ⮇ꌒ⢫㟲座쿼褼Ⱗꋴ䳕ᗷ伾᥿琣擥ቪ隈䷁愍诠坎ㄎᘼ豞砶퉽뿕ꍌ㛟羭찅䠦峁㝭⾧鵢ᓗ喜렃䘖嬦嵭膧ﵠჷ唢૽줌ꂿ䶩閜堈ក睂鶾懂Ⲣଢ଼꽕㮗俓⩈鋫O觓菊䝬雷蝟鸧賷滤ꨒ [ 167.375956][ T1507] loop1: detected capacity change from 0 to 131072 [ 167.385408][ T60] usb 1-1: Manufacturer: 篮鴛둢轣ꉳทᦑ먊⌟⵪糢譔ﺳ뫔몔坠䢪䈄떯ڰ廄봚鼉吱倕巺㟿矌飸繷侯펲䑞㠁㨍텍혊ꄎ檤쓙⸙책࢑䳅飴䅚瑖쿝벪≙䖢궰刲쎍碁ꜫ [ 167.407632][ T1507] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 167.425423][ T60] usb 1-1: SerialNumber: ꀖﴌ䧙唲恰뼦搌弱❝Ᵽꇑ韽ⵔᕐኤ鏗璉砑ᄇ涪랾읫鈞⑫꯬ᵜ쀏ꆶឨ洏⣢둻ᡖƉ훈뽭ᦕ➣剑혬㥂軵Ⱗ磪薫അ閦㗇閁잻쌔䬷鬦㽕︛퇍ⓑ⚄阮燂䉺㡋膬院螩ށ⶝祅뜖귕狑貇愉쎘ꂕṚ칗淢铊譖㷬℺䛩␰摅䈏᳢뛀뙝 [ 167.430100][ T1507] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 167.475577][ T1507] F2FS-fs (loop1): invalid crc value [ 167.504478][ T1507] F2FS-fs (loop1): Found nat_bits in checkpoint [ 167.594056][ T1507] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 167.601764][ T1507] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 167.613368][ T1520] loop3: detected capacity change from 0 to 40427 [ 167.620883][ T1520] F2FS-fs (loop3): Wrong SIT boundary, start(1536) end(16648704) blocks(1024) [ 167.630151][ T1520] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 167.645828][ T1520] F2FS-fs (loop3): fault_injection options not supported [ 167.673256][ T1520] F2FS-fs (loop3): Image doesn't support compression [ 167.680098][ T1520] F2FS-fs (loop3): Image doesn't support compression [ 167.702834][ T1520] F2FS-fs (loop3): invalid crc value [ 167.708350][ T28] audit: type=1400 audit(1755603415.959:254): avc: denied { associate } for pid=1526 comm="syz.4.339" name="file1" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 167.712397][ T1520] F2FS-fs (loop3): Found nat_bits in checkpoint [ 167.762225][ T28] audit: type=1400 audit(1755603416.019:255): avc: denied { write } for pid=1517 comm="syz.0.337" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 167.794739][ T1520] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 167.802042][ T1520] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 167.835479][ T28] audit: type=1400 audit(1755603416.049:256): avc: denied { map } for pid=1506 comm="syz.1.334" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 168.137051][ T288] usb 3-1: USB disconnect, device number 9 [ 168.561810][ T1547] futex_wake_op: syz.2.345 tries to shift op by -1; fix this program [ 168.790770][ T1549] loop2: detected capacity change from 0 to 128 [ 172.579342][ T60] usbhid 1-1:1.0: can't add hid device: -22 [ 172.594189][ T60] usbhid: probe of 1-1:1.0 failed with error -22 [ 172.652405][ T60] usb 1-1: USB disconnect, device number 9 [ 173.609914][ T1434] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 175.095838][ T1434] usb 5-1: too many configurations: 164, using maximum allowed: 8 [ 175.131965][ T1434] usb 5-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 175.164916][ T1576] loop1: detected capacity change from 0 to 40427 [ 175.171481][ T1434] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.205123][ T1434] usb 5-1: config 0 descriptor?? [ 175.222110][ T1576] F2FS-fs (loop1): Unrecognized mount option "grpquota=/dev/uhid" or missing value [ 178.642057][ T1629] netlink: 40 bytes leftover after parsing attributes in process `syz.3.370'. [ 178.653607][ T1632] netlink: 40 bytes leftover after parsing attributes in process `syz.0.369'. [ 178.717847][ T1636] futex_wake_op: syz.3.372 tries to shift op by -1; fix this program [ 178.725531][ T24] usb 5-1: USB disconnect, device number 4 [ 180.874112][ T1650] loop3: detected capacity change from 0 to 128 [ 181.070739][ T1651] futex_wake_op: syz.0.376 tries to shift op by -1; fix this program [ 182.049510][ T1654] loop0: detected capacity change from 0 to 128 [ 182.197018][ T1655] futex_wake_op: syz.4.377 tries to shift op by -1; fix this program [ 182.880847][ T1661] loop4: detected capacity change from 0 to 128 [ 184.258348][ T1675] netlink: 40 bytes leftover after parsing attributes in process `syz.2.382'. [ 185.021508][ T1678] netlink: 40 bytes leftover after parsing attributes in process `syz.0.383'. [ 185.276201][ T288] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 185.547910][ T288] usb 2-1: Using ep0 maxpacket: 8 [ 185.554716][ T288] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 185.601046][ T288] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 185.690929][ T288] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 185.721563][ T288] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 185.751760][ T288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.779496][ T288] usb 2-1: Product: syz [ 185.800537][ T288] usb 2-1: Manufacturer: syz [ 185.817124][ T288] usb 2-1: SerialNumber: syz [ 185.840275][ T1669] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 186.045659][ T1434] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 186.106574][ T1669] loop1: detected capacity change from 0 to 1024 [ 186.157640][ T1669] EXT4-fs: Ignoring removed i_version option [ 186.159378][ T1683] loop2: detected capacity change from 0 to 40427 [ 186.203094][ T1683] F2FS-fs (loop2): Wrong SIT boundary, start(1536) end(16648704) blocks(1024) [ 186.216082][ T1669] EXT4-fs (loop1): Test dummy encryption mode enabled [ 186.234934][ T1683] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 186.246702][ T1434] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 186.262578][ T1434] usb 5-1: config 1 has an invalid descriptor of length 98, skipping remainder of the config [ 186.273288][ T1434] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 186.282788][ T1434] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 23624, setting to 64 [ 186.302579][ T1434] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 186.306033][ T1683] F2FS-fs (loop2): fault_injection options not supported [ 186.335460][ T1683] F2FS-fs (loop2): Image doesn't support compression [ 186.342210][ T1683] F2FS-fs (loop2): Image doesn't support compression [ 186.349947][ T1434] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 186.358157][ T1434] usb 5-1: Product: syz [ 186.359261][ T1669] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 186.362890][ T1434] usb 5-1: Manufacturer: syz [ 186.379726][ T1434] cdc_wdm 5-1:1.0: skipping garbage [ 186.384969][ T1434] cdc_wdm 5-1:1.0: skipping garbage [ 186.390464][ T1434] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 186.439906][ T1683] F2FS-fs (loop2): invalid crc value [ 186.467326][ T1669] fscrypt: AES-256-XTS using blk-crypto-fallback [ 186.489181][ T1683] F2FS-fs (loop2): Found nat_bits in checkpoint [ 186.524073][ T1683] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 186.531890][ T1683] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 187.006936][ T28] audit: type=1400 audit(1755603435.259:257): avc: denied { map } for pid=1668 comm="syz.1.381" path="/80/file0/cpuset.effective_mems" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 187.340580][ T1706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.381'. [ 187.399674][ T1686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.436547][ T1686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.480062][ T28] audit: type=1400 audit(1755603435.739:258): avc: denied { create } for pid=1668 comm="syz.1.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 187.483106][ T1669] cgroup: name respecified [ 187.567937][ T28] audit: type=1400 audit(1755603435.739:259): avc: denied { bind } for pid=1668 comm="syz.1.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 187.808767][ T288] usb 2-1: bad CDC descriptors [ 187.826792][ T288] usb 2-1: USB disconnect, device number 5 [ 187.861933][ T510] usb 5-1: USB disconnect, device number 5 [ 187.945450][ T1434] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 188.126398][ T1434] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 188.135099][ T1434] usb 1-1: config 1 has an invalid descriptor of length 98, skipping remainder of the config [ 188.146154][ T1434] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 188.155233][ T1434] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 23624, setting to 64 [ 188.167360][ T1434] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 188.176469][ T1434] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 188.184470][ T1434] usb 1-1: Product: syz [ 188.188678][ T1434] usb 1-1: Manufacturer: syz [ 188.194569][ T1434] cdc_wdm 1-1:1.0: skipping garbage [ 188.199922][ T1434] cdc_wdm 1-1:1.0: skipping garbage [ 188.205153][ T1434] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 188.318167][ T287] EXT4-fs (loop1): unmounting filesystem. [ 188.390147][ T1725] netlink: 40 bytes leftover after parsing attributes in process `syz.3.394'. [ 188.490364][ T1712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.655742][ T1712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.176688][ T1729] netlink: 40 bytes leftover after parsing attributes in process `syz.1.395'. [ 189.214345][ T288] usb 1-1: USB disconnect, device number 10 [ 189.251409][ T28] audit: type=1400 audit(1755603437.509:260): avc: denied { getopt } for pid=1734 comm="syz.4.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 189.251898][ T1735] : renamed from pim6reg1 [ 189.389927][ T1741] loop1: detected capacity change from 0 to 1024 [ 189.558331][ T1741] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 191.019635][ T1434] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 192.523960][ T287] EXT4-fs (loop1): unmounting filesystem. [ 192.610839][ T1769] loop0: detected capacity change from 0 to 1024 [ 192.669039][ T1434] usb 4-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 192.682560][ T1434] usb 4-1: config 1 interface 0 has no altsetting 0 [ 192.694258][ T1434] usb 4-1: string descriptor 0 read error: -22 [ 192.714377][ T1434] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.40 [ 193.987247][ T1434] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.092535][ T1434] usbhid 4-1:1.0: can't add hid device: -22 [ 194.098951][ T1434] usbhid: probe of 4-1:1.0 failed with error -22 [ 194.111444][ T1769] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 194.192337][ T1785] netlink: 40 bytes leftover after parsing attributes in process `syz.4.410'. [ 195.360899][ T1792] loop1: detected capacity change from 0 to 512 [ 195.379355][ T1792] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 195.396471][ T1792] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #17: comm syz.1.413: inline data xattr refers to an external xattr inode [ 195.403994][ T284] EXT4-fs (loop0): unmounting filesystem. [ 195.417830][ T1792] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.413: couldn't read orphan inode 17 (err -117) [ 195.431114][ T1792] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 195.431134][ T1434] usb 4-1: USB disconnect, device number 5 [ 196.074256][ T28] audit: type=1400 audit(1755603444.329:261): avc: denied { ioctl } for pid=1803 comm="syz.0.415" path="socket:[21240]" dev="sockfs" ino=21240 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 196.504637][ T1805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.413'. [ 196.680101][ T1804] xt_bpf: check failed: parse error [ 197.253498][ T1805] syz.1.413 (1805) used greatest stack depth: 19968 bytes left [ 197.865141][ T287] EXT4-fs (loop1): unmounting filesystem. [ 197.870910][ T1815] loop0: detected capacity change from 0 to 1024 [ 197.917959][ T1815] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 197.947090][ T1820] loop1: detected capacity change from 0 to 1024 [ 197.956288][ T1818] loop2: detected capacity change from 0 to 1024 [ 198.063718][ T1826] loop4: detected capacity change from 0 to 1024 [ 198.074413][ T1818] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 198.091950][ T1820] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 198.364239][ T1826] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 199.513240][ T284] EXT4-fs (loop0): unmounting filesystem. [ 199.579927][ T283] EXT4-fs (loop4): unmounting filesystem. [ 199.885602][ T285] EXT4-fs (loop2): unmounting filesystem. [ 199.908692][ T1841] loop4: detected capacity change from 0 to 1024 [ 199.919875][ T1842] loop3: detected capacity change from 0 to 1024 [ 199.949417][ T287] EXT4-fs (loop1): unmounting filesystem. [ 200.183860][ T1842] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 200.284507][ T1841] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 200.410887][ T1861] loop2: detected capacity change from 0 to 1024 [ 202.363891][ T286] EXT4-fs (loop3): unmounting filesystem. [ 202.371699][ T1861] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 202.798453][ T283] EXT4-fs (loop4): unmounting filesystem. [ 202.812014][ T1873] loop3: detected capacity change from 0 to 1024 [ 203.141999][ T1873] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 203.927889][ T285] EXT4-fs (loop2): unmounting filesystem. [ 203.948446][ T1895] loop2: detected capacity change from 0 to 1024 [ 204.407892][ T1895] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 206.196226][ T285] EXT4-fs (loop2): unmounting filesystem. [ 206.555634][ T286] EXT4-fs (loop3): unmounting filesystem. [ 206.617605][ T1913] loop0: detected capacity change from 0 to 1024 [ 206.654931][ T1913] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 206.772080][ T1927] loop4: detected capacity change from 0 to 1024 [ 206.796875][ T1927] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 209.521189][ T284] EXT4-fs (loop0): unmounting filesystem. [ 209.527162][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 209.761800][ T24] usb 3-1: device descriptor read/all, error -71 [ 211.043882][ T283] EXT4-fs (loop4): unmounting filesystem. [ 211.192869][ T1955] futex_wake_op: syz.0.450 tries to shift op by -1; fix this program [ 212.040578][ T1965] loop0: detected capacity change from 0 to 128 [ 215.525480][ T1984] futex_wake_op: syz.3.458 tries to shift op by -1; fix this program [ 215.641689][ T1987] loop0: detected capacity change from 0 to 512 [ 215.739147][ T1988] loop3: detected capacity change from 0 to 128 [ 217.690453][ T1987] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 217.699815][ T1987] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.702081][ T28] audit: type=1400 audit(1755603466.959:262): avc: denied { ioctl } for pid=1981 comm="syz.0.457" path="/96/file0/file1" dev="loop0" ino=15 ioctlcmd=0x5878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 220.238960][ T284] EXT4-fs (loop0): unmounting filesystem. [ 220.276045][ T2002] loop3: detected capacity change from 0 to 2048 [ 220.319543][ T2002] Alternate GPT is invalid, using primary GPT. [ 220.325929][ T2002] loop3: p2 p3 p7 [ 220.614700][ T2009] loop2: detected capacity change from 0 to 1024 [ 220.654861][ T2009] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 220.675506][ T1434] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 220.681997][ T2015] loop1: detected capacity change from 0 to 1024 [ 220.757382][ T2021] loop4: detected capacity change from 0 to 1024 [ 220.776814][ T2021] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 220.793253][ T2015] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 223.865547][ T1434] usb 1-1: device descriptor read/all, error -71 [ 223.875229][ T285] EXT4-fs (loop2): unmounting filesystem. [ 223.882407][ T283] EXT4-fs (loop4): unmounting filesystem. [ 223.896364][ T287] EXT4-fs (loop1): unmounting filesystem. [ 223.919088][ T2038] loop3: detected capacity change from 0 to 1024 [ 223.961774][ T2043] loop2: detected capacity change from 0 to 1024 [ 224.004732][ T2048] loop4: detected capacity change from 0 to 1024 [ 224.023866][ T2038] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 224.035214][ T2043] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 225.946794][ T2048] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 226.173094][ T286] EXT4-fs (loop3): unmounting filesystem. [ 226.199949][ T2065] Zero length message leads to an empty skb [ 227.378902][ T2069] loop1: detected capacity change from 0 to 1024 [ 227.406665][ T283] EXT4-fs (loop4): unmounting filesystem. [ 227.415171][ T2069] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 227.706364][ T285] EXT4-fs (loop2): unmounting filesystem. [ 228.264573][ T287] EXT4-fs (loop1): unmounting filesystem. [ 228.966454][ T2096] capability: warning: `syz.3.483' uses deprecated v2 capabilities in a way that may be insecure [ 228.980590][ T28] audit: type=1400 audit(1755603477.239:263): avc: denied { bind } for pid=2095 comm="syz.3.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 229.170539][ T2101] loop1: detected capacity change from 0 to 1024 [ 229.202335][ T2103] loop2: detected capacity change from 0 to 1024 [ 229.209478][ T2101] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 229.245272][ T2103] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 229.357555][ T1434] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 229.400505][ T2114] loop4: detected capacity change from 0 to 1024 [ 230.066831][ T2114] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 231.545650][ T2131] netlink: 40 bytes leftover after parsing attributes in process `syz.0.491'. [ 232.313378][ T287] EXT4-fs (loop1): unmounting filesystem. [ 232.321036][ T285] EXT4-fs (loop2): unmounting filesystem. [ 232.333637][ T1434] usb 4-1: unable to read config index 0 descriptor/all [ 232.342319][ T1434] usb 4-1: can't read configurations, error -71 [ 232.476670][ T283] EXT4-fs (loop4): unmounting filesystem. [ 233.726555][ T2152] loop4: detected capacity change from 0 to 1024 [ 233.789876][ T2152] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 233.815539][ T19] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 233.859923][ T2135] loop0: detected capacity change from 0 to 40427 [ 233.875964][ T2135] F2FS-fs (loop0): Unrecognized mount option "backgrc=syn_mode=strict" or missing value [ 234.538365][ T19] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 234.547835][ T19] usb 2-1: config 1 has an invalid descriptor of length 98, skipping remainder of the config [ 234.593400][ T19] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 234.616260][ T19] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 23624, setting to 64 [ 234.667677][ T283] EXT4-fs (loop4): unmounting filesystem. [ 234.687568][ T19] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 234.701243][ T19] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 234.714510][ T19] usb 2-1: Product: syz [ 234.720958][ T19] usb 2-1: Manufacturer: syz [ 234.790176][ T19] cdc_wdm 2-1:1.0: skipping garbage [ 234.797189][ T19] cdc_wdm 2-1:1.0: skipping garbage [ 234.806985][ T2176] loop4: detected capacity change from 0 to 1024 [ 234.813686][ T19] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 234.858628][ T2176] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 234.881727][ T2180] netlink: 40 bytes leftover after parsing attributes in process `syz.2.504'. [ 236.463674][ T2170] loop3: detected capacity change from 0 to 40427 [ 236.488066][ T19] usb 2-1: USB disconnect, device number 6 [ 236.509725][ T2170] F2FS-fs (loop3): Wrong SIT boundary, start(1536) end(16648704) blocks(1024) [ 236.529113][ T2170] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 236.529212][ T2170] F2FS-fs (loop3): fault_injection options not supported [ 236.529235][ T2170] F2FS-fs (loop3): Image doesn't support compression [ 236.529262][ T2170] F2FS-fs (loop3): Image doesn't support compression [ 236.530098][ T2170] F2FS-fs (loop3): invalid crc value [ 236.535086][ T2193] loop1: detected capacity change from 0 to 1024 [ 236.581000][ T2196] loop2: detected capacity change from 0 to 512 [ 236.588183][ T2196] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 236.603833][ T2196] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #17: comm syz.2.509: inline data xattr refers to an external xattr inode [ 236.619311][ T2196] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.509: couldn't read orphan inode 17 (err -117) [ 236.636153][ T2196] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 236.653302][ T2170] F2FS-fs (loop3): Found nat_bits in checkpoint [ 236.703103][ T283] EXT4-fs (loop4): unmounting filesystem. [ 236.711540][ T2170] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 236.719457][ T2170] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 236.804013][ T2193] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 237.435444][ T2204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.509'. [ 237.661021][ T24] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 237.678561][ T285] EXT4-fs (loop2): unmounting filesystem. [ 237.936956][ T24] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 237.993060][ T24] usb 1-1: config 1 has an invalid descriptor of length 98, skipping remainder of the config [ 238.073889][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 238.085442][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 23624, setting to 64 [ 238.144527][ T24] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 238.153666][ T24] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 238.161791][ T24] usb 1-1: Product: syz [ 238.166434][ T24] usb 1-1: Manufacturer: syz [ 238.172428][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 238.177721][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 238.182970][ T24] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 238.387248][ T2190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.396933][ T2190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.437923][ T287] EXT4-fs (loop1): unmounting filesystem. [ 238.441412][ T19] usb 1-1: USB disconnect, device number 13 [ 238.466449][ T2224] loop1: detected capacity change from 0 to 1024 [ 238.486994][ T2224] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 238.636119][ T2230] loop4: detected capacity change from 0 to 1024 [ 238.817068][ T2230] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 239.169034][ T2242] loop2: detected capacity change from 0 to 1024 [ 239.195776][ T2242] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 241.400125][ T287] EXT4-fs (loop1): unmounting filesystem. [ 241.427971][ T2252] loop0: detected capacity change from 0 to 1024 [ 241.460287][ T2256] loop1: detected capacity change from 0 to 1024 [ 241.473530][ T2252] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 241.587499][ T2256] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 241.840490][ T285] EXT4-fs (loop2): unmounting filesystem. [ 242.086017][ T28] audit: type=1400 audit(1755603490.269:264): avc: denied { wake_alarm } for pid=2255 comm="syz.1.523" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 242.126751][ T283] EXT4-fs (loop4): unmounting filesystem. [ 242.406733][ T2271] loop2: detected capacity change from 0 to 1024 [ 242.661240][ T284] EXT4-fs (loop0): unmounting filesystem. [ 242.766733][ T2271] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 242.935637][ T2267] loop3: detected capacity change from 0 to 40427 [ 242.946210][ T2267] F2FS-fs (loop3): Wrong SIT boundary, start(1536) end(16648704) blocks(1024) [ 242.955408][ T2267] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 243.014224][ T2267] F2FS-fs (loop3): fault_injection options not supported [ 243.030795][ T2267] F2FS-fs (loop3): Image doesn't support compression [ 243.041642][ T287] EXT4-fs (loop1): unmounting filesystem. [ 243.048715][ T2267] F2FS-fs (loop3): Image doesn't support compression [ 244.172334][ T2267] F2FS-fs (loop3): invalid crc value [ 244.260761][ T2267] F2FS-fs (loop3): Found nat_bits in checkpoint [ 244.287368][ T2267] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 244.294425][ T2267] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 244.551957][ T285] EXT4-fs (loop2): unmounting filesystem. [ 244.615403][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 244.622849][ T2295] loop0: detected capacity change from 0 to 1024 [ 244.681144][ T2295] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 244.884026][ T28] audit: type=1400 audit(1755603493.139:265): avc: denied { compute_member } for pid=2297 comm="syz.2.531" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 245.401991][ T24] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 245.663812][ T2303] loop4: detected capacity change from 0 to 512 [ 245.670892][ T2303] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 245.685527][ T24] usb 2-1: config 1 has an invalid descriptor of length 98, skipping remainder of the config [ 245.696003][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 245.705099][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 23624, setting to 64 [ 245.718167][ T24] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 245.727497][ T24] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 245.747756][ T2303] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #17: comm syz.4.533: inline data xattr refers to an external xattr inode [ 245.748234][ T284] EXT4-fs (loop0): unmounting filesystem. [ 245.766139][ T2303] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.533: couldn't read orphan inode 17 (err -117) [ 245.780756][ T2303] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 245.800005][ T24] usb 2-1: Product: syz [ 245.804271][ T24] usb 2-1: Manufacturer: syz [ 245.816141][ T19] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 245.904444][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 245.936867][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 245.942521][ T24] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 246.545447][ T2312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.533'. [ 247.095238][ T2291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.104516][ T2291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.112907][ T19] usb 3-1: Using ep0 maxpacket: 8 [ 247.119431][ T19] usb 3-1: config 0 interface 0 altsetting 42 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 247.136767][ T19] usb 3-1: config 0 interface 0 has no altsetting 0 [ 247.144170][ T19] usb 3-1: New USB device found, idVendor=056a, idProduct=00d6, bcdDevice= 0.00 [ 247.154014][ T283] EXT4-fs (loop4): unmounting filesystem. [ 247.160128][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.201677][ T19] usb 3-1: config 0 descriptor?? [ 247.346509][ T1434] usb 2-1: USB disconnect, device number 7 [ 247.880480][ T19] usbhid 3-1:0.0: can't add hid device: -71 [ 247.896349][ T19] usbhid: probe of 3-1:0.0 failed with error -71 [ 247.909268][ T19] usb 3-1: USB disconnect, device number 12 [ 248.160486][ T2330] loop4: detected capacity change from 0 to 1024 [ 248.217073][ T2330] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 248.816995][ T2343] loop1: detected capacity change from 0 to 1024 [ 248.882484][ T2325] loop3: detected capacity change from 0 to 131072 [ 248.896493][ T2325] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 248.905216][ T2343] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 248.922776][ T2325] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 248.952902][ T2325] F2FS-fs (loop3): invalid crc value [ 250.530977][ T2325] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-4) [ 250.618542][ T2355] loop2: detected capacity change from 0 to 1024 [ 250.776018][ T2355] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 250.828535][ T283] EXT4-fs (loop4): unmounting filesystem. [ 252.124210][ T2378] netlink: 40 bytes leftover after parsing attributes in process `syz.0.552'. [ 252.269150][ T287] EXT4-fs (loop1): unmounting filesystem. [ 252.275828][ T285] EXT4-fs (loop2): unmounting filesystem. [ 252.459785][ T2373] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 252.499464][ T28] audit: type=1400 audit(1755603500.759:266): avc: denied { read } for pid=2394 comm="syz.1.558" name="usbmon7" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 252.537895][ T28] audit: type=1400 audit(1755603500.759:267): avc: denied { open } for pid=2394 comm="syz.1.558" path="/dev/usbmon7" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 252.820828][ T2400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 252.830239][ T2400] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.035674][ T2400] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 253.199807][ T28] audit: type=1400 audit(1755603501.019:268): avc: denied { create } for pid=2394 comm="syz.1.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 253.563034][ T2414] loop1: detected capacity change from 0 to 1024 [ 253.568268][ T2391] loop3: detected capacity change from 0 to 40427 [ 253.583930][ T2391] F2FS-fs (loop3): Unrecognized mount option "backgrc=syn_mode=strict" or missing value [ 253.617690][ T2414] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 253.624071][ T2418] futex_wake_op: syz.3.565 tries to shift op by -1; fix this program [ 253.835461][ T1434] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 254.902155][ T2410] loop0: detected capacity change from 0 to 40427 [ 254.909446][ T2410] F2FS-fs (loop0): Unrecognized mount option "backgrc=syn_mode=strict" or missing value [ 254.921937][ T2419] loop3: detected capacity change from 0 to 128 [ 255.102110][ T1434] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 255.122379][ T287] EXT4-fs (loop1): unmounting filesystem. [ 255.141581][ T1434] usb 5-1: config 1 has an invalid descriptor of length 98, skipping remainder of the config [ 255.180465][ T2430] netlink: 40 bytes leftover after parsing attributes in process `syz.0.566'. [ 255.202653][ T1434] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 255.239992][ T1434] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 23624, setting to 64 [ 255.268945][ T2432] loop3: detected capacity change from 0 to 512 [ 255.277591][ T2432] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 255.298385][ T2432] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #17: comm syz.3.569: inline data xattr refers to an external xattr inode [ 255.314648][ T2432] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.569: couldn't read orphan inode 17 (err -117) [ 255.327077][ T2432] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 255.347968][ T1434] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 255.365398][ T1434] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 255.373846][ T1434] usb 5-1: Product: syz [ 255.378185][ T1434] usb 5-1: Manufacturer: syz [ 255.394346][ T1434] cdc_wdm 5-1:1.0: skipping garbage [ 255.400068][ T1434] cdc_wdm 5-1:1.0: skipping garbage [ 255.405521][ T1434] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 255.599567][ T2412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.628856][ T2412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.275408][ T2437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.569'. [ 256.825675][ T24] usb 5-1: USB disconnect, device number 6 [ 256.850613][ T286] EXT4-fs (loop3): unmounting filesystem. [ 257.160322][ T28] audit: type=1400 audit(1755603505.419:269): avc: denied { bind } for pid=2445 comm="syz.4.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 257.261332][ T28] audit: type=1326 audit(1755603505.459:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2442 comm="syz.3.572" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa7aff8ebe9 code=0x0 [ 257.331677][ T2457] loop3: detected capacity change from 0 to 1024 [ 257.384400][ T2457] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 258.064906][ T2454] loop4: detected capacity change from 0 to 40427 [ 258.096955][ T2458] loop0: detected capacity change from 0 to 40427 [ 258.152478][ T2454] F2FS-fs (loop4): Unrecognized mount option "backgrc=syn_mode=strict" or missing value [ 258.162749][ T2458] F2FS-fs (loop0): Unrecognized mount option "backgrc=syn_mode=strict" or missing value [ 258.185935][ T2463] loop2: detected capacity change from 0 to 40427 [ 258.231776][ T2463] F2FS-fs (loop2): Unrecognized mount option "backgrc=syn_mode=strict" or missing value [ 258.236840][ T286] EXT4-fs (loop3): unmounting filesystem. [ 258.294283][ T2477] futex_wake_op: syz.4.585 tries to shift op by -1; fix this program [ 258.427180][ T2483] futex_wake_op: syz.2.586 tries to shift op by -1; fix this program [ 258.578880][ T2484] netlink: 40 bytes leftover after parsing attributes in process `syz.3.582'. [ 259.199261][ T2485] loop4: detected capacity change from 0 to 128 [ 260.264422][ T2487] loop2: detected capacity change from 0 to 128 [ 261.169468][ T2495] futex_wake_op: syz.4.589 tries to shift op by -1; fix this program [ 261.388942][ T2500] loop4: detected capacity change from 0 to 128 [ 261.900923][ T28] audit: type=1400 audit(1755603510.159:271): avc: denied { name_bind } for pid=2496 comm="syz.1.591" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 262.713942][ T2511] loop2: detected capacity change from 0 to 128 [ 262.880160][ T2511] loop2: detected capacity change from 0 to 512 [ 262.887170][ T2511] EXT4-fs: Ignoring removed bh option [ 262.935646][ T2517] loop1: detected capacity change from 0 to 1024 [ 263.021395][ T2519] loop4: detected capacity change from 0 to 1024 [ 263.053625][ T2511] EXT4-fs error (device loop2): __ext4_iget:5079: inode #15: block 1803188595: comm syz.2.594: invalid block [ 263.066950][ T2511] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.594: couldn't read orphan inode 15 (err -117) [ 263.080154][ T2511] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 263.138755][ T2517] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 263.361558][ T2519] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 265.990525][ T287] EXT4-fs (loop1): unmounting filesystem. [ 266.080710][ T285] EXT4-fs (loop2): unmounting filesystem. [ 266.180094][ T283] EXT4-fs (loop4): unmounting filesystem. [ 266.199549][ T2536] futex_wake_op: syz.2.599 tries to shift op by -1; fix this program [ 266.695878][ T2539] loop2: detected capacity change from 0 to 128 [ 268.313537][ T2550] loop0: detected capacity change from 0 to 1024 [ 268.329774][ T2551] loop1: detected capacity change from 0 to 1024 [ 268.488135][ T2550] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 268.497375][ T2551] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 268.567561][ T2562] loop3: detected capacity change from 0 to 1024 [ 268.715661][ T2562] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 270.225792][ T28] audit: type=1400 audit(1755603517.489:272): avc: denied { write } for pid=2565 comm="syz.4.607" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 270.644376][ T2583] loop4: detected capacity change from 0 to 1024 [ 270.652643][ T287] EXT4-fs (loop1): unmounting filesystem. [ 270.654599][ T28] audit: type=1400 audit(1755603517.489:273): avc: denied { open } for pid=2565 comm="syz.4.607" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 270.737092][ T28] audit: type=1400 audit(1755603518.439:274): avc: denied { write } for pid=2565 comm="syz.4.607" name="001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 270.816621][ T2583] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 270.844101][ T284] EXT4-fs (loop0): unmounting filesystem. [ 270.852565][ T2564] loop2: detected capacity change from 0 to 40427 [ 270.875248][ T2588] loop1: detected capacity change from 0 to 512 [ 270.883562][ T2564] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 270.891462][ T2564] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 270.900925][ T2588] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 270.954951][ T2564] F2FS-fs (loop2): invalid crc value [ 271.187779][ T2588] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #17: comm syz.1.610: inline data xattr refers to an external xattr inode [ 271.203373][ T2588] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.610: couldn't read orphan inode 17 (err -117) [ 271.216980][ T2588] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 271.289272][ T2564] F2FS-fs (loop2): Found nat_bits in checkpoint [ 271.422759][ T2564] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 272.665626][ T2604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.610'. [ 273.035014][ T286] EXT4-fs (loop3): unmounting filesystem. [ 273.059823][ T2564] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 273.176463][ T2611] loop3: detected capacity change from 0 to 512 [ 273.185274][ T2611] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 273.203955][ T287] EXT4-fs (loop1): unmounting filesystem. [ 273.215555][ T2611] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #17: comm syz.3.616: inline data xattr refers to an external xattr inode [ 273.233736][ T283] EXT4-fs (loop4): unmounting filesystem. [ 273.239938][ T2611] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.616: couldn't read orphan inode 17 (err -117) [ 273.252303][ T2611] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 273.730153][ T2620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.616'. [ 274.002919][ T2623] loop4: detected capacity change from 0 to 256 [ 274.187268][ T286] EXT4-fs (loop3): unmounting filesystem. [ 274.200628][ T2623] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 274.288403][ T28] audit: type=1400 audit(1755603522.529:275): avc: denied { mounton } for pid=2615 comm="syz.4.617" path="/127/file0/file0" dev="loop4" ino=1048661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 274.475672][ T2631] loop3: detected capacity change from 0 to 1024 [ 274.514334][ T2633] loop4: detected capacity change from 0 to 1024 [ 274.551893][ T2631] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 274.560958][ T2633] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 275.645968][ T286] EXT4-fs (loop3): unmounting filesystem. [ 275.747587][ T283] EXT4-fs (loop4): unmounting filesystem. [ 275.783349][ T2653] loop4: detected capacity change from 0 to 1024 [ 277.046408][ T2653] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 277.160485][ T2668] loop1: detected capacity change from 0 to 1024 [ 279.311645][ T2668] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 279.352095][ T2683] loop0: detected capacity change from 0 to 512 [ 279.359224][ T2683] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 279.406544][ T2683] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #17: comm syz.0.631: inline data xattr refers to an external xattr inode [ 279.421901][ T2683] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.631: couldn't read orphan inode 17 (err -117) [ 279.434496][ T2683] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 279.473837][ T283] EXT4-fs (loop4): unmounting filesystem. [ 280.593306][ T2697] loop3: detected capacity change from 0 to 1024 [ 280.617369][ T2697] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 281.048925][ T284] EXT4-fs (loop0): unmounting filesystem. [ 281.177667][ T287] EXT4-fs (loop1): unmounting filesystem. [ 281.190502][ T2709] loop0: detected capacity change from 0 to 1024 [ 281.590049][ T2709] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 282.138428][ T2720] loop1: detected capacity change from 0 to 1024 [ 282.371583][ T286] EXT4-fs (loop3): unmounting filesystem. [ 282.413642][ T2720] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 282.707181][ T284] EXT4-fs (loop0): unmounting filesystem. [ 282.911323][ T2735] loop0: detected capacity change from 0 to 1024 [ 282.921118][ T287] EXT4-fs (loop1): unmounting filesystem. [ 283.001386][ T2738] loop1: detected capacity change from 0 to 1024 [ 283.057338][ T2735] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 283.092243][ T2738] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 283.131870][ T284] EXT4-fs (loop0): unmounting filesystem. [ 283.361273][ T2756] loop0: detected capacity change from 0 to 1024 [ 283.649750][ T2706] loop4: detected capacity change from 0 to 131072 [ 283.663363][ T2767] loop2: detected capacity change from 0 to 128 [ 283.665075][ T2756] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 283.670201][ T2767] EXT4-fs: Ignoring removed nomblk_io_submit option [ 283.685070][ T2767] EXT4-fs: Ignoring removed nomblk_io_submit option [ 283.692884][ T378] I/O error, dev loop4, sector 130944 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 283.707395][ T2767] EXT4-fs (loop2): Test dummy encryption mode enabled [ 283.746566][ T2767] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 283.826229][ T2767] ext4 filesystem being mounted at /132/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 283.837628][ T287] EXT4-fs (loop1): unmounting filesystem. [ 283.860834][ T2770] loop3: detected capacity change from 0 to 1024 [ 283.921378][ T2773] loop1: detected capacity change from 0 to 512 [ 283.935667][ T2773] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 283.937105][ T2770] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 284.377966][ T2773] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #17: comm syz.1.652: inline data xattr refers to an external xattr inode [ 284.414857][ T28] audit: type=1400 audit(1755603532.669:276): avc: denied { create } for pid=2766 comm="syz.2.651" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 284.544277][ T2773] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.652: couldn't read orphan inode 17 (err -117) [ 284.577985][ T284] EXT4-fs (loop0): unmounting filesystem. [ 284.792042][ T2767] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 284.821733][ T2794] netlink: 'syz.0.656': attribute type 11 has an invalid length. [ 284.831913][ T286] EXT4-fs (loop3): unmounting filesystem. [ 284.838054][ T2773] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 284.861435][ T28] audit: type=1400 audit(1755603533.119:277): avc: denied { mounton } for pid=2766 comm="syz.2.651" path="/132/mnt/file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 284.876653][ T2791] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 284.993349][ T28] audit: type=1400 audit(1755603533.139:278): avc: denied { write } for pid=2766 comm="syz.2.651" name="bus" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 285.013223][ T2799] loop3: detected capacity change from 0 to 1024 [ 285.020843][ T28] audit: type=1400 audit(1755603533.139:279): avc: denied { add_name } for pid=2766 comm="syz.2.651" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 285.026263][ T2801] loop4: detected capacity change from 0 to 1024 [ 285.042661][ T28] audit: type=1400 audit(1755603533.139:280): avc: denied { setattr } for pid=2766 comm="syz.2.651" name="work" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 285.214538][ T2799] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 285.398060][ T28] audit: type=1400 audit(1755603533.139:281): avc: denied { remove_name } for pid=2766 comm="syz.2.651" name="#1" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 285.426584][ T28] audit: type=1400 audit(1755603533.139:282): avc: denied { rename } for pid=2766 comm="syz.2.651" name="#1" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 285.458144][ T28] audit: type=1400 audit(1755603533.139:283): avc: denied { unlink } for pid=2766 comm="syz.2.651" name="#1" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 285.486427][ T2801] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 285.494338][ T285] EXT4-fs (loop2): unmounting filesystem. [ 285.495622][ T287] EXT4-fs (loop1): unmounting filesystem. [ 285.516331][ T286] EXT4-fs (loop3): unmounting filesystem. [ 285.574851][ T2815] loop2: detected capacity change from 0 to 1024 [ 285.608215][ T283] EXT4-fs (loop4): unmounting filesystem. [ 285.620453][ T2815] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 285.717395][ T2826] loop0: detected capacity change from 0 to 1024 [ 285.773191][ T2830] loop1: detected capacity change from 0 to 512 [ 285.780100][ T2830] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 286.880784][ T285] EXT4-fs (loop2): unmounting filesystem. [ 287.007609][ T2830] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #17: comm syz.1.667: inline data xattr refers to an external xattr inode [ 287.023308][ T2830] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.667: couldn't read orphan inode 17 (err -117) [ 287.036155][ T2830] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 287.072445][ T2826] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 287.171826][ T2845] loop3: detected capacity change from 0 to 1024 [ 287.965167][ T2851] loop2: detected capacity change from 0 to 1024 [ 288.015222][ T2851] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 288.226512][ T287] EXT4-fs (loop1): unmounting filesystem. [ 288.234373][ T284] EXT4-fs (loop0): unmounting filesystem. [ 288.270497][ T2845] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 288.345219][ T2861] loop1: detected capacity change from 0 to 1024 [ 288.457112][ T286] EXT4-fs (loop3): unmounting filesystem. [ 288.539183][ T2867] FAULT_INJECTION: forcing a failure. [ 288.539183][ T2867] name failslab, interval 1, probability 0, space 0, times 0 [ 288.684993][ T2867] CPU: 0 PID: 2867 Comm: syz.4.674 Not tainted 6.1.145-syzkaller-00015-g87b9d836c3d8 #0 [ 288.694168][ T2861] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 288.695448][ T2867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 288.695461][ T2867] Call Trace: [ 288.695467][ T2867] [ 288.695473][ T2867] __dump_stack+0x21/0x24 [ 288.725001][ T2867] dump_stack_lvl+0xee/0x150 [ 288.729719][ T2867] ? __cfi_dump_stack_lvl+0x8/0x8 [ 288.734748][ T2867] ? __kasan_check_read+0x11/0x20 [ 288.739777][ T2867] ? preempt_schedule_irq+0xbb/0x110 [ 288.745184][ T2867] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 288.750915][ T2867] dump_stack+0x15/0x24 [ 288.755073][ T2867] should_fail_ex+0x3d4/0x520 [ 288.759926][ T2867] ? copy_fs_struct+0x4c/0x220 [ 288.764777][ T2867] __should_failslab+0xac/0xf0 [ 288.769631][ T2867] should_failslab+0x9/0x20 [ 288.774395][ T2867] kmem_cache_alloc+0x3b/0x330 [ 288.779157][ T2867] copy_fs_struct+0x4c/0x220 [ 288.783747][ T2867] ksys_unshare+0x365/0x7b0 [ 288.788259][ T2867] ? ksys_write+0x1eb/0x240 [ 288.792848][ T2867] ? __cfi_ksys_unshare+0x10/0x10 [ 288.798063][ T2867] ? fpregs_restore_userregs+0x128/0x260 [ 288.803825][ T2867] __x64_sys_unshare+0x38/0x40 [ 288.808692][ T2867] x64_sys_call+0x767/0x9a0 [ 288.813199][ T2867] do_syscall_64+0x4c/0xa0 [ 288.817616][ T2867] ? clear_bhb_loop+0x30/0x80 [ 288.822292][ T2867] ? clear_bhb_loop+0x30/0x80 [ 288.826964][ T2867] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.832859][ T2867] RIP: 0033:0x7fa62fb8ebe9 [ 288.837272][ T2867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.856961][ T2867] RSP: 002b:00007fa630976038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 288.865586][ T2867] RAX: ffffffffffffffda RBX: 00007fa62fdb6090 RCX: 00007fa62fb8ebe9 [ 288.873745][ T2867] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000064000600 [ 288.881725][ T2867] RBP: 00007fa630976090 R08: 0000000000000000 R09: 0000000000000000 [ 288.889695][ T2867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.897668][ T2867] R13: 00007fa62fdb6128 R14: 00007fa62fdb6090 R15: 00007ffff7054768 [ 288.905751][ T2867] [ 288.960435][ T285] EXT4-fs (loop2): unmounting filesystem. [ 288.978447][ T287] EXT4-fs (loop1): unmounting filesystem. [ 289.025534][ T2879] loop3: detected capacity change from 0 to 1024 [ 289.053083][ T2879] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 289.709481][ T2859] loop0: detected capacity change from 0 to 40427 [ 289.741396][ T2859] F2FS-fs (loop0): invalid crc value [ 289.756421][ T2859] F2FS-fs (loop0): Found nat_bits in checkpoint [ 289.799084][ T2859] F2FS-fs (loop0): Start checkpoint disabled! [ 289.831432][ T2859] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 290.001157][ T2885] loop1: detected capacity change from 0 to 40427 [ 290.011694][ T286] EXT4-fs (loop3): unmounting filesystem. [ 290.063407][ T2885] F2FS-fs (loop1): Unrecognized mount option "backgrc=syn_mode=strict" or missing value [ 290.185438][ T19] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 290.198871][ T2898] loop1: detected capacity change from 0 to 512 [ 290.208996][ T2898] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 290.224702][ T2898] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #17: comm syz.1.682: inline data xattr refers to an external xattr inode [ 290.231709][ T2875] loop2: detected capacity change from 0 to 131072 [ 290.247526][ T2898] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.682: couldn't read orphan inode 17 (err -117) [ 290.259754][ T2898] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 290.275798][ T2875] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 290.292551][ T2875] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 290.337276][ T2875] F2FS-fs (loop2): invalid crc value [ 290.373452][ T2875] F2FS-fs (loop2): Found nat_bits in checkpoint [ 290.377355][ T19] usb 1-1: unable to get BOS descriptor or descriptor too short [ 290.442752][ T2904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.682'. [ 290.637683][ T2875] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 290.670753][ T2875] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 290.715380][ T19] usb 1-1: not running at top speed; connect to a high speed hub [ 290.725766][ T19] usb 1-1: config 1 interface 0 has no altsetting 0 [ 290.753549][ T2907] loop4: detected capacity change from 0 to 1024 [ 290.755214][ T2896] loop3: detected capacity change from 0 to 40427 [ 290.762050][ T19] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 290.768368][ T2896] F2FS-fs (loop3): Unrecognized mount option "backgrc=syn_mode=strict" or missing value [ 290.779928][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.805829][ T19] usb 1-1: Product: syz [ 290.810601][ T19] usb 1-1: Manufacturer: syz [ 290.815776][ T19] usb 1-1: SerialNumber: syz [ 290.843505][ T2907] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 291.033986][ T19] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 5 proto 2 vid 0x0525 pid 0xA4A8 [ 291.047170][ T19] usb 1-1: USB disconnect, device number 14 [ 291.054939][ T19] usblp0: removed [ 291.060108][ T287] EXT4-fs (loop1): unmounting filesystem. [ 292.425713][ T2916] loop3: detected capacity change from 0 to 512 [ 292.592168][ T2920] loop1: detected capacity change from 0 to 1024 [ 292.658940][ T2916] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 292.668524][ T2916] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.684180][ T2916] FAULT_INJECTION: forcing a failure. [ 292.684180][ T2916] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 292.697409][ T2916] CPU: 0 PID: 2916 Comm: syz.3.685 Not tainted 6.1.145-syzkaller-00015-g87b9d836c3d8 #0 [ 292.707236][ T2916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 292.717394][ T2916] Call Trace: [ 292.719143][ T2402] kworker/u4:15: attempt to access beyond end of device [ 292.719143][ T2402] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 292.720684][ T2916] [ 292.720693][ T2916] __dump_stack+0x21/0x24 [ 292.742113][ T2916] dump_stack_lvl+0xee/0x150 [ 292.742679][ T2920] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 292.746817][ T2916] ? __cfi_dump_stack_lvl+0x8/0x8 [ 292.746846][ T2916] ? vfs_write+0x9d6/0xca0 [ 292.746871][ T2916] dump_stack+0x15/0x24 [ 292.769466][ T2916] should_fail_ex+0x3d4/0x520 [ 292.774191][ T2916] should_fail+0xb/0x10 [ 292.778466][ T2916] should_fail_usercopy+0x1a/0x20 [ 292.783609][ T2916] _copy_from_user+0x1e/0xc0 [ 292.788311][ T2916] __se_sys_copy_file_range+0x1bf/0x470 [ 292.793982][ T2916] ? __x64_sys_copy_file_range+0x100/0x100 [ 292.799817][ T2916] ? ksys_write+0x1eb/0x240 [ 292.804353][ T2916] ? __cfi_ksys_write+0x10/0x10 [ 292.809306][ T2916] __x64_sys_copy_file_range+0xe5/0x100 [ 292.814860][ T2916] x64_sys_call+0x66b/0x9a0 [ 292.819545][ T2916] do_syscall_64+0x4c/0xa0 [ 292.823961][ T2916] ? clear_bhb_loop+0x30/0x80 [ 292.828633][ T2916] ? clear_bhb_loop+0x30/0x80 [ 292.833314][ T2916] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 292.839293][ T2916] RIP: 0033:0x7fa7aff8ebe9 [ 292.843882][ T2916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.863919][ T2916] RSP: 002b:00007fa7b0eac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 292.872507][ T2916] RAX: ffffffffffffffda RBX: 00007fa7b01b6090 RCX: 00007fa7aff8ebe9 [ 292.880669][ T2916] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000006 [ 292.888638][ T2916] RBP: 00007fa7b0eac090 R08: 0000000000000b51 R09: 0000000000000000 [ 292.896626][ T2916] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 292.904712][ T2916] R13: 00007fa7b01b6128 R14: 00007fa7b01b6090 R15: 00007ffc35f79ce8 [ 292.912692][ T2916] [ 292.971235][ T283] EXT4-fs (loop4): unmounting filesystem. [ 292.979918][ T286] EXT4-fs (loop3): unmounting filesystem. [ 293.065283][ T2932] loop4: detected capacity change from 0 to 1024 [ 293.753667][ T287] EXT4-fs (loop1): unmounting filesystem. [ 293.836280][ T2932] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 293.993480][ T2942] loop1: detected capacity change from 0 to 1024 [ 294.046466][ T2942] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 294.078999][ T2946] loop3: detected capacity change from 0 to 1024 [ 294.115728][ T2949] futex_wake_op: syz.0.692 tries to shift op by -1; fix this program [ 294.126212][ T2946] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 295.673369][ T283] EXT4-fs (loop4): unmounting filesystem. [ 295.743243][ T2962] loop0: detected capacity change from 0 to 128 [ 295.850303][ T286] EXT4-fs (loop3): unmounting filesystem. [ 296.507500][ T287] EXT4-fs (loop1): unmounting filesystem. [ 296.555253][ T2970] loop3: detected capacity change from 0 to 1024 [ 296.569642][ T2970] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 298.134525][ T2983] loop4: detected capacity change from 0 to 1024 [ 298.176569][ T2983] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 299.153658][ T286] EXT4-fs (loop3): unmounting filesystem. [ 299.396489][ T283] EXT4-fs (loop4): unmounting filesystem. [ 299.448810][ T2998] loop3: detected capacity change from 0 to 512 [ 299.456887][ T2996] loop0: detected capacity change from 0 to 1024 [ 299.467652][ T2998] EXT4-fs: Ignoring removed orlov option [ 299.485454][ T2998] EXT4-fs: Mount option(s) incompatible with ext2 [ 299.523460][ T2996] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 299.524160][ T3003] loop4: detected capacity change from 0 to 1024 [ 299.532711][ T2974] loop1: detected capacity change from 0 to 40427 [ 299.610141][ T3003] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 300.935724][ T378] I/O error, dev loop1, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 301.325030][ T283] EXT4-fs (loop4): unmounting filesystem. [ 301.407719][ T3020] loop1: detected capacity change from 0 to 1024 [ 301.419467][ T2994] loop2: detected capacity change from 0 to 40427 [ 301.459568][ T2994] F2FS-fs (loop2): Unrecognized mount option "backgrc=syn_mode=strict" or missing value [ 301.934846][ T284] EXT4-fs (loop0): unmounting filesystem. [ 301.951640][ T3020] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 302.581526][ T3041] loop4: detected capacity change from 0 to 512 [ 302.619064][ T3041] EXT4-fs: Ignoring removed orlov option [ 302.675040][ T3041] ext4 filesystem being mounted at /148/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 302.948182][ T3046] loop1: detected capacity change from 0 to 1024 [ 303.107529][ T3041] capability: warning: `syz.4.712' uses 32-bit capabilities (legacy support in use) [ 303.241699][ T28] audit: type=1400 audit(1755603551.499:284): avc: denied { mounton } for pid=3040 comm="syz.4.712" path="/proc/513/task" dev="proc" ino=26100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 304.529316][ T3067] loop1: detected capacity change from 0 to 1024 [ 304.578369][ T3069] futex_wake_op: syz.0.718 tries to shift op by -1; fix this program [ 304.803303][ T3075] loop0: detected capacity change from 0 to 128 [ 305.579758][ T3080] futex_wake_op: syz.3.720 tries to shift op by -1; fix this program [ 305.614222][ T3062] loop2: detected capacity change from 0 to 40427 [ 305.754242][ T3062] F2FS-fs (loop2): Unrecognized mount option "backgrc=syn_mode=strict" or missing value [ 305.943594][ T3082] loop3: detected capacity change from 0 to 128 [ 306.279379][ T3085] loop0: detected capacity change from 0 to 512 [ 306.286796][ T3085] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 306.767536][ T3086] loop1: detected capacity change from 0 to 256 [ 306.807524][ T3086] exfat: Unknown parameter '0xffffffffffffffff' [ 306.937366][ T3092] loop4: detected capacity change from 0 to 1024 [ 307.140292][ T28] audit: type=1400 audit(1755603555.219:285): avc: denied { sqpoll } for pid=3084 comm="syz.1.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 307.167919][ T3085] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #17: comm syz.0.721: inline data xattr refers to an external xattr inode [ 307.183967][ T3085] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.721: couldn't read orphan inode 17 (err -117) [ 308.784015][ T3109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.721'. [ 309.356044][ T3114] loop1: detected capacity change from 0 to 1024 [ 309.380016][ T284] EXT4-fs unmount: 9 callbacks suppressed [ 309.380034][ T284] EXT4-fs (loop0): unmounting filesystem. [ 309.446663][ T3122] loop2: detected capacity change from 0 to 1024 [ 309.458739][ T3120] loop0: detected capacity change from 0 to 1024 [ 309.473395][ T3114] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 309.482527][ T283] EXT4-fs (loop4): unmounting filesystem. [ 309.489799][ T3122] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 309.526728][ T3120] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 310.241395][ T287] EXT4-fs (loop1): unmounting filesystem. [ 310.322033][ T285] EXT4-fs (loop2): unmounting filesystem. [ 310.432389][ T3148] loop2: detected capacity change from 0 to 1024 [ 310.437423][ T3130] loop4: detected capacity change from 0 to 40427 [ 310.475635][ T3130] F2FS-fs (loop4): invalid crc value [ 310.488566][ T3148] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 310.510191][ T3130] F2FS-fs (loop4): Found nat_bits in checkpoint [ 310.659856][ T3142] loop1: detected capacity change from 0 to 40427 [ 310.667624][ T3130] F2FS-fs (loop4): Start checkpoint disabled! [ 310.678000][ T3142] F2FS-fs (loop1): Unrecognized mount option "backgrc=syn_mode=strict" or missing value [ 310.688071][ T3130] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 311.006055][ T428] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 311.152874][ T3158] loop1: detected capacity change from 0 to 1024 [ 311.189049][ T3158] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 311.346964][ T285] EXT4-fs (loop2): unmounting filesystem. [ 313.108414][ T428] usb 5-1: device descriptor read/all, error -71 [ 313.154520][ T3172] loop2: detected capacity change from 0 to 1024 [ 313.179511][ T284] EXT4-fs (loop0): unmounting filesystem. [ 313.271999][ T287] EXT4-fs (loop1): unmounting filesystem. [ 313.274765][ T3172] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 313.283252][ T3178] loop0: detected capacity change from 0 to 1024 [ 313.316159][ T3180] loop3: detected capacity change from 0 to 1024 [ 313.325120][ T3178] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 313.347943][ T3186] loop1: detected capacity change from 0 to 256 [ 313.357653][ T3186] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 313.436778][ T28] audit: type=1400 audit(1755603561.689:286): avc: denied { write } for pid=3185 comm="syz.1.742" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 313.483526][ T28] audit: type=1400 audit(1755603561.689:287): avc: denied { add_name } for pid=3185 comm="syz.1.742" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 314.356874][ T3180] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 314.380475][ T285] EXT4-fs (loop2): unmounting filesystem. [ 314.422423][ T3196] syz.1.742[3196] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 314.422770][ T3196] syz.1.742[3196] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 314.446993][ T3196] netlink: 'syz.1.742': attribute type 13 has an invalid length. [ 314.466339][ T3196] netlink: 'syz.1.742': attribute type 17 has an invalid length. [ 315.883436][ T286] EXT4-fs (loop3): unmounting filesystem. [ 315.961865][ T28] audit: type=1400 audit(1755603561.689:288): avc: denied { associate } for pid=3185 comm="syz.1.742" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 316.276665][ T28] audit: type=1400 audit(1755603561.689:289): avc: denied { read write open } for pid=3185 comm="syz.1.742" path="/150/bus/file1" dev="loop1" ino=1048665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 316.482628][ T28] audit: type=1400 audit(1755603561.689:290): avc: denied { watch watch_reads } for pid=3185 comm="syz.1.742" path="/150/bus" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 316.538369][ T28] audit: type=1400 audit(1755603561.689:291): avc: denied { watch } for pid=3185 comm="syz.1.742" path="/150/bus/file1" dev="loop1" ino=1048665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 316.603977][ T3204] loop3: detected capacity change from 0 to 512 [ 316.612915][ T3204] EXT4-fs: Ignoring removed orlov option [ 316.618836][ T28] audit: type=1400 audit(1755603561.689:292): avc: denied { setattr } for pid=3185 comm="syz.1.742" name="file1" dev="loop1" ino=1048665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 316.628634][ T284] EXT4-fs (loop0): unmounting filesystem. [ 316.681683][ T3204] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 316.691199][ T3204] ext4 filesystem being mounted at /143/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 316.775957][ T3217] loop0: detected capacity change from 0 to 1024 [ 317.998908][ T286] EXT4-fs (loop3): unmounting filesystem. [ 318.001619][ T3217] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 318.014081][ T3228] loop2: detected capacity change from 0 to 1024 [ 318.133872][ T3228] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 319.591781][ T284] EXT4-fs (loop0): unmounting filesystem. [ 319.650508][ T3248] loop4: detected capacity change from 0 to 512 [ 319.719744][ T285] EXT4-fs (loop2): unmounting filesystem. [ 319.745695][ T3248] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 319.803519][ T283] EXT4-fs (loop4): unmounting filesystem. [ 319.897237][ T3265] loop4: detected capacity change from 0 to 512 [ 319.906157][ T3265] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 319.927992][ T3265] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #17: comm syz.4.761: inline data xattr refers to an external xattr inode [ 319.943184][ T3265] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.761: couldn't read orphan inode 17 (err -117) [ 319.956572][ T3265] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 320.044348][ T428] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 320.145616][ T3267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.761'. [ 320.150453][ T3254] loop2: detected capacity change from 0 to 40427 [ 320.187213][ T3254] F2FS-fs (loop2): Unrecognized mount option "backgrc=syn_mode=strict" or missing value [ 320.491834][ T3272] loop3: detected capacity change from 0 to 512 [ 320.500128][ T3272] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 320.530227][ T3272] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #17: comm syz.3.763: inline data xattr refers to an external xattr inode [ 320.546214][ T3272] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.763: couldn't read orphan inode 17 (err -117) [ 320.558458][ T3272] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 320.829728][ T3282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.763'. [ 321.052586][ T283] EXT4-fs (loop4): unmounting filesystem. [ 321.063479][ T28] audit: type=1326 audit(1755603569.319:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3283 comm="syz.2.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512758ebe9 code=0x7ffc0000 [ 321.104198][ T28] audit: type=1326 audit(1755603569.349:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3283 comm="syz.2.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f512758ebe9 code=0x7ffc0000 [ 321.140966][ T3286] FAULT_INJECTION: forcing a failure. [ 321.140966][ T3286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.154863][ T3286] CPU: 0 PID: 3286 Comm: syz.2.766 Not tainted 6.1.145-syzkaller-00015-g87b9d836c3d8 #0 [ 321.164619][ T3286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 321.174796][ T3286] Call Trace: [ 321.178091][ T3286] [ 321.181041][ T3286] __dump_stack+0x21/0x24 [ 321.185390][ T3286] dump_stack_lvl+0xee/0x150 [ 321.190069][ T3286] ? __cfi_dump_stack_lvl+0x8/0x8 [ 321.195091][ T3286] ? ioctl_has_perm+0x391/0x4c0 [ 321.200037][ T3286] dump_stack+0x15/0x24 [ 321.204202][ T3286] should_fail_ex+0x3d4/0x520 [ 321.208883][ T3286] should_fail+0xb/0x10 [ 321.213138][ T3286] should_fail_usercopy+0x1a/0x20 [ 321.218163][ T3286] _copy_from_user+0x1e/0xc0 [ 321.222837][ T3286] proc_ioctl_default+0x8b/0xf0 [ 321.227718][ T3286] ? proc_releaseinterface+0x1b0/0x1b0 [ 321.233179][ T3286] ? selinux_file_ioctl+0x377/0x480 [ 321.238467][ T3286] usbdev_ioctl+0x158a/0x1e40 [ 321.243148][ T3286] ? __cfi_usbdev_ioctl+0x10/0x10 [ 321.248365][ T3286] ? security_file_ioctl+0x95/0xc0 [ 321.253591][ T3286] ? __cfi_usbdev_ioctl+0x10/0x10 [ 321.258634][ T3286] __se_sys_ioctl+0x12f/0x1b0 [ 321.263337][ T3286] __x64_sys_ioctl+0x7b/0x90 [ 321.267994][ T3286] x64_sys_call+0x58b/0x9a0 [ 321.272498][ T3286] do_syscall_64+0x4c/0xa0 [ 321.276918][ T3286] ? clear_bhb_loop+0x30/0x80 [ 321.281706][ T3286] ? clear_bhb_loop+0x30/0x80 [ 321.286384][ T3286] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.292277][ T3286] RIP: 0033:0x7f512758ebe9 [ 321.296775][ T3286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.316384][ T3286] RSP: 002b:00007f512836d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 321.325149][ T3286] RAX: ffffffffffffffda RBX: 00007f51277b6090 RCX: 00007f512758ebe9 [ 321.333211][ T3286] RDX: 0000200000000280 RSI: 00000000c0105512 RDI: 0000000000000007 [ 321.341184][ T3286] RBP: 00007f512836d090 R08: 0000000000000000 R09: 0000000000000000 [ 321.349240][ T3286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.357387][ T3286] R13: 00007f51277b6128 R14: 00007f51277b6090 R15: 00007ffd63fcac88 [ 321.365451][ T3286] [ 321.465690][ T3286] netlink: 'syz.2.766': attribute type 3 has an invalid length. [ 321.550157][ T286] EXT4-fs (loop3): unmounting filesystem. [ 321.595167][ T3291] loop3: detected capacity change from 0 to 1024 [ 321.668651][ T3291] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 321.734733][ T3297] loop1: detected capacity change from 0 to 1024 [ 321.777606][ T3297] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 323.126104][ T286] EXT4-fs (loop3): unmounting filesystem. [ 323.238586][ T3314] loop3: detected capacity change from 0 to 1024 [ 323.371293][ T287] EXT4-fs (loop1): unmounting filesystem. [ 323.388178][ T3314] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 323.429431][ T3308] loop2: detected capacity change from 0 to 40427 [ 323.467573][ T28] audit: type=1326 audit(1755603571.729:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3319 comm="syz.1.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c03d8ebe9 code=0x7ffc0000 [ 323.499526][ T3308] F2FS-fs (loop2): Unrecognized mount option "backgrc=syn_mode=strict" or missing value [ 323.529444][ T28] audit: type=1326 audit(1755603571.749:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3319 comm="syz.1.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c03d8ebe9 code=0x7ffc0000 [ 323.573311][ T3322] loop1: detected capacity change from 0 to 1024 [ 323.606651][ T28] audit: type=1326 audit(1755603571.749:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3319 comm="syz.1.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c03d8ebe9 code=0x7ffc0000 [ 323.632897][ T3322] EXT4-fs: Ignoring removed nobh option [ 323.697579][ T3322] EXT4-fs: Ignoring removed bh option [ 323.705242][ T3322] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 324.414264][ T28] audit: type=1326 audit(1755603571.749:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3319 comm="syz.1.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c03d8ebe9 code=0x7ffc0000 [ 324.455575][ T28] audit: type=1326 audit(1755603571.749:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3319 comm="syz.1.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c03d8ebe9 code=0x7ffc0000 [ 324.489351][ T28] audit: type=1326 audit(1755603571.749:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3319 comm="syz.1.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c03d8ebe9 code=0x7ffc0000 [ 324.518647][ T286] EXT4-fs (loop3): unmounting filesystem. [ 324.529013][ T3322] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 324.556209][ T3334] loop3: detected capacity change from 0 to 512 [ 324.568308][ T28] audit: type=1326 audit(1755603571.749:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3319 comm="syz.1.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c03d8ebe9 code=0x7ffc0000 [ 324.591956][ T28] audit: type=1326 audit(1755603571.749:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3319 comm="syz.1.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c03d8ebe9 code=0x7ffc0000 [ 324.662213][ T3336] loop3: detected capacity change from 0 to 1024 [ 324.932825][ T3340] loop2: detected capacity change from 0 to 1024 [ 324.977649][ T3336] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 325.019248][ T3340] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 325.079490][ T287] EXT4-fs (loop1): unmounting filesystem. [ 325.120630][ T3346] futex_wake_op: syz.4.784 tries to shift op by -1; fix this program [ 327.808441][ T286] EXT4-fs (loop3): unmounting filesystem. [ 327.826599][ T285] EXT4-fs (loop2): unmounting filesystem. [ 327.903670][ T3360] loop4: detected capacity change from 0 to 128 [ 328.463039][ T3366] loop3: detected capacity change from 0 to 1024 [ 328.490190][ T3366] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 329.501953][ T3376] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 329.658648][ T3364] loop1: detected capacity change from 0 to 40427 [ 329.671934][ T286] EXT4-fs (loop3): unmounting filesystem. [ 329.720258][ T3364] F2FS-fs (loop1): Unrecognized mount option "backgrc=syn_mode=strict" or missing value [ 329.784056][ T3359] loop0: detected capacity change from 0 to 40427 [ 329.796641][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 329.796658][ T28] audit: type=1400 audit(1755603578.059:305): avc: denied { watch watch_reads } for pid=3381 comm="syz.1.792" path="/159/file0" dev="tmpfs" ino=901 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 329.841494][ T3359] F2FS-fs (loop0): Unrecognized mount option "backgrc=syn_mode=strict" or missing value [ 329.878478][ T3382] loop1: detected capacity change from 0 to 1024 [ 329.892517][ T3382] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 329.893676][ T3387] loop0: detected capacity change from 0 to 512 [ 329.901245][ T3382] EXT4-fs (loop1): orphan cleanup on readonly fs [ 329.909536][ T28] audit: type=1400 audit(1755603578.149:306): avc: denied { mounton } for pid=3381 comm="syz.1.792" path="/159/file1" dev="tmpfs" ino=902 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 329.913579][ T3382] EXT4-fs error (device loop1): ext4_free_blocks:6210: comm syz.1.792: Freeing blocks not in datazone - block = 0, count = 4096 [ 329.980697][ T3382] EXT4-fs (loop1): 1 orphan inode deleted [ 329.994672][ T3387] EXT4-fs: Ignoring removed orlov option [ 330.008071][ T3382] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 330.025884][ T3382] EXT4-fs (loop1): unmounting filesystem. [ 330.057422][ T3394] loop2: detected capacity change from 0 to 1024 [ 330.074762][ T3387] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 330.084167][ T3387] ext4 filesystem being mounted at /155/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 330.095529][ T28] audit: type=1400 audit(1755603578.349:307): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 330.100525][ T3387] EXT4-fs error (device loop0): ext4_lookup:1858: inode #12: comm syz.0.794: iget: bad i_size value: 2533274857506816 [ 330.121653][ T3384] can0: slcan on ttyS3. [ 330.149068][ T3387] EXT4-fs error (device loop0): ext4_lookup:1858: inode #12: comm syz.0.794: iget: bad i_size value: 2533274857506816 [ 330.155701][ T3394] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 330.173202][ T28] audit: type=1400 audit(1755603578.429:308): avc: denied { search } for pid=142 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 330.200612][ T3387] EXT4-fs error (device loop0): ext4_lookup:1858: inode #12: comm syz.0.794: iget: bad i_size value: 2533274857506816 [ 330.226860][ T3387] EXT4-fs error (device loop0): ext4_lookup:1858: inode #12: comm syz.0.794: iget: bad i_size value: 2533274857506816 [ 330.239638][ T28] audit: type=1400 audit(1755603578.429:309): avc: denied { read } for pid=142 comm="dhcpcd" name="n15" dev="tmpfs" ino=7998 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 330.285539][ T28] audit: type=1400 audit(1755603578.429:310): avc: denied { open } for pid=142 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=7998 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 330.287591][ T3402] loop1: detected capacity change from 0 to 1024 [ 330.309104][ T28] audit: type=1400 audit(1755603578.429:311): avc: denied { getattr } for pid=142 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=7998 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 331.404113][ T28] audit: type=1400 audit(1755603578.609:312): avc: denied { read } for pid=3405 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 331.432287][ T3383] can0 (unregistered): slcan off ttyS3. [ 331.464309][ T3402] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 331.468019][ T28] audit: type=1400 audit(1755603578.609:313): avc: denied { open } for pid=3405 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 331.498281][ T28] audit: type=1400 audit(1755603578.609:314): avc: denied { getattr } for pid=3405 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 331.627423][ T284] EXT4-fs (loop0): unmounting filesystem. [ 331.764888][ T285] EXT4-fs (loop2): unmounting filesystem. [ 332.092966][ T3429] loop3: detected capacity change from 0 to 1024 [ 332.138448][ T3429] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 332.260562][ T287] EXT4-fs (loop1): unmounting filesystem. [ 332.854071][ T3454] loop2: detected capacity change from 0 to 1024 [ 332.993825][ T286] EXT4-fs (loop3): unmounting filesystem. [ 333.003320][ T3454] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 333.050648][ T3460] loop3: detected capacity change from 0 to 1024 [ 333.088392][ T3422] loop0: detected capacity change from 0 to 40427 [ 333.136314][ T3422] F2FS-fs (loop0): invalid crc value [ 333.169613][ T3422] F2FS-fs (loop0): Found nat_bits in checkpoint [ 333.177163][ T3460] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 333.619215][ T3422] F2FS-fs (loop0): Start checkpoint disabled! [ 333.640918][ T3422] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 333.772116][ T285] EXT4-fs (loop2): unmounting filesystem. [ 333.916795][ T286] EXT4-fs (loop3): unmounting filesystem. [ 333.970275][ T3415] loop4: detected capacity change from 0 to 131072 [ 334.005414][ T3415] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 334.030197][ T3415] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 334.061808][ T3415] F2FS-fs (loop4): invalid crc value [ 334.106387][ T3415] F2FS-fs (loop4): Found nat_bits in checkpoint [ 334.135355][ T19] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 334.201848][ T3438] loop1: detected capacity change from 0 to 131072 [ 334.208795][ T3415] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 334.215915][ T3415] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 334.235365][ T3438] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 334.243489][ T3438] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 334.273672][ T3438] F2FS-fs (loop1): invalid crc value [ 334.313785][ T3438] F2FS-fs (loop1): Found nat_bits in checkpoint [ 334.319380][ T3472] loop2: detected capacity change from 0 to 40427 [ 334.326861][ T19] usb 1-1: unable to get BOS descriptor or descriptor too short [ 334.345117][ T19] usb 1-1: not running at top speed; connect to a high speed hub [ 334.356654][ T3472] F2FS-fs (loop2): Unrecognized mount option "backgrc=syn_mode=strict" or missing value [ 334.359468][ T3482] binder: 3414:3482 ioctl 4018620d 0 returned -22 [ 334.368414][ T3474] loop3: detected capacity change from 0 to 40427 [ 334.374343][ T19] usb 1-1: config 1 interface 0 has no altsetting 0 [ 334.387824][ T3474] F2FS-fs (loop3): Unrecognized mount option "backgrc=syn_mode=strict" or missing value [ 334.416815][ T3438] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 334.416859][ T19] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 334.425070][ T3438] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 334.433457][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.484191][ T19] usb 1-1: Product: syz [ 334.515401][ T19] usb 1-1: Manufacturer: syz [ 334.520072][ T19] usb 1-1: SerialNumber: syz [ 334.775670][ T3422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.799'. [ 334.784654][ T3422] device bridge_slave_1 left promiscuous mode [ 334.790905][ T3422] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.800360][ T3422] device bridge_slave_0 left promiscuous mode [ 334.806636][ T3422] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.010370][ T19] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 5 proto 2 vid 0x0525 pid 0xA4A8 [ 335.030650][ T19] usb 1-1: USB disconnect, device number 16 [ 335.363014][ T19] usblp0: removed [ 335.598593][ T3497] loop4: detected capacity change from 0 to 1024 [ 335.621047][ T3497] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 335.654758][ T3497] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3841: comm syz.4.809: Allocating blocks 385-513 which overlap fs metadata [ 335.673411][ T3496] EXT4-fs (loop4): pa ffff888135050e70: logic 16, phys. 129, len 24 [ 335.681481][ T3496] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 8 [ 335.704899][ T283] EXT4-fs (loop4): unmounting filesystem. [ 335.780787][ T3511] loop3: detected capacity change from 0 to 512 [ 335.792055][ T3513] loop4: detected capacity change from 0 to 1024 [ 335.812452][ T3511] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 335.839652][ T3511] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 335.853821][ T3511] EXT4-fs (loop3): 1 truncate cleaned up [ 335.861171][ T3513] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 335.877572][ T3511] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 335.939594][ T1418] kworker/u4:11: attempt to access beyond end of device [ 335.939594][ T1418] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 335.989574][ T3510] loop1: detected capacity change from 0 to 40427 [ 336.011051][ T3510] F2FS-fs (loop1): Unrecognized mount option "backgrc=syn_mode=strict" or missing value [ 336.033615][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 336.033630][ T28] audit: type=1400 audit(1755603584.289:324): avc: denied { read append } for pid=3509 comm="syz.3.815" path="/160/bus/blkio.bfq.avg_queue_size" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 336.107377][ T28] audit: type=1400 audit(1755603584.369:325): avc: denied { map } for pid=3509 comm="syz.3.815" path="/160/bus/blkio.bfq.avg_queue_size" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 336.176175][ T3521] loop0: detected capacity change from 0 to 1024 [ 336.196972][ T3521] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 336.763442][ T283] EXT4-fs (loop4): unmounting filesystem. [ 336.901435][ T3537] loop2: detected capacity change from 0 to 1024 [ 338.606971][ T3528] loop1: detected capacity change from 0 to 40427 [ 338.614461][ T3528] F2FS-fs (loop1): Unrecognized mount option "backgrc=syn_mode=strict" or missing value [ 338.630776][ T3548] loop3: detected capacity change from 0 to 512 [ 338.645938][ T3548] EXT4-fs: Ignoring removed orlov option [ 338.759791][ T3548] ext4 filesystem being mounted at /163/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 338.793046][ T3559] loop4: detected capacity change from 0 to 1024 [ 339.360609][ T3569] loop2: detected capacity change from 0 to 1024 [ 339.677027][ T3569] EXT4-fs mount: 6 callbacks suppressed [ 339.677048][ T3569] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 339.705640][ T283] EXT4-fs (loop4): unmounting filesystem. [ 339.745832][ T3576] loop4: detected capacity change from 0 to 1024 [ 339.784058][ T3576] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 340.544212][ T285] EXT4-fs (loop2): unmounting filesystem. [ 340.610586][ T283] EXT4-fs (loop4): unmounting filesystem. [ 340.613626][ T3594] loop2: detected capacity change from 0 to 1024 [ 340.692381][ T3594] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 342.262735][ T286] EXT4-fs (loop3): unmounting filesystem. [ 342.309748][ T3613] loop4: detected capacity change from 0 to 512 [ 342.311726][ T3617] loop0: detected capacity change from 0 to 1024 [ 342.336469][ T3613] EXT4-fs: Ignoring removed orlov option [ 342.370283][ T3621] loop1: detected capacity change from 0 to 1024 [ 342.395921][ T3613] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 342.406071][ T3613] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 342.407338][ T3621] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 342.487480][ T3617] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 342.504277][ T285] EXT4-fs (loop2): unmounting filesystem. [ 342.521739][ T283] EXT4-fs (loop4): unmounting filesystem. [ 344.163237][ T3633] loop2: detected capacity change from 0 to 512 [ 344.483101][ T284] EXT4-fs (loop0): unmounting filesystem. [ 344.499180][ T3622] ------------[ cut here ]------------ [ 344.503216][ T3633] journal_path: Lookup failure for './bus' [ 344.505046][ T3622] kernel BUG at fs/buffer.c:2714! [ 344.513493][ T3644] loop4: detected capacity change from 0 to 1024 [ 344.518379][ T3622] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 344.528821][ T3622] CPU: 0 PID: 3622 Comm: kmmpd-loop0 Not tainted 6.1.145-syzkaller-00015-g87b9d836c3d8 #0 [ 344.537707][ T3633] EXT4-fs: error: could not find journal device path [ 344.538824][ T3622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 344.538838][ T3622] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 344.561220][ T3622] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 88 36 e8 ff e9 b0 fe ff ff e8 be d9 a3 ff 0f 0b e8 b7 d9 a3 ff <0f> 0b e8 b0 d9 a3 ff 0f 0b e8 a9 d9 a3 ff 0f 0b e8 a2 d9 a3 ff 0f [ 344.581203][ T3622] RSP: 0018:ffffc90000fefca0 EFLAGS: 00010293 [ 344.584779][ T3644] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 344.587298][ T3622] RAX: ffffffff81cc2d79 RBX: 0000000000000000 RCX: ffff888116ce0000 [ 344.587318][ T3622] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 344.587328][ T3622] RBP: ffffc90000fefcf0 R08: dffffc0000000000 R09: ffffed102186d951 [ 344.587341][ T3622] R10: ffffed102186d951 R11: 1ffff1102186d950 R12: 0000000000000000 [ 344.628862][ T3622] R13: 1ffff1102186d950 R14: ffff88810c36ca80 R15: 0000000000003801 [ 344.637565][ T3622] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 344.646606][ T3622] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 344.653477][ T3622] CR2: 0000001b2e90dff8 CR3: 0000000006e0f000 CR4: 00000000003506b0 [ 344.661627][ T3622] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 344.669606][ T3622] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 344.677598][ T3622] Call Trace: [ 344.681063][ T3622] [ 344.684010][ T3622] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 344.690269][ T3622] submit_bh+0x1f/0x30 [ 344.694359][ T3622] write_mmp_block_thawed+0x34a/0x4c0 [ 344.699816][ T3622] ? read_mmp_block+0x6d0/0x6d0 [ 344.704665][ T3622] ? __cfi_process_timeout+0x10/0x10 [ 344.710041][ T3622] write_mmp_block+0x138/0x2b0 [ 344.714803][ T3622] kmmpd+0x215/0x950 [ 344.718711][ T3622] kthread+0x281/0x320 [ 344.722777][ T3622] ? __cfi_kmmpd+0x10/0x10 [ 344.727286][ T3622] ? __cfi_kthread+0x10/0x10 [ 344.731965][ T3622] ret_from_fork+0x1f/0x30 [ 344.736411][ T3622] [ 344.739602][ T3622] Modules linked in: [ 344.744663][ T3622] ---[ end trace 0000000000000000 ]--- [ 344.750183][ T3622] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 344.755809][ T3622] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 88 36 e8 ff e9 b0 fe ff ff e8 be d9 a3 ff 0f 0b e8 b7 d9 a3 ff <0f> 0b e8 b0 d9 a3 ff 0f 0b e8 a9 d9 a3 ff 0f 0b e8 a2 d9 a3 ff 0f [ 344.778014][ T287] EXT4-fs (loop1): unmounting filesystem. [ 344.783969][ T3622] RSP: 0018:ffffc90000fefca0 EFLAGS: 00010293 [ 344.793676][ T3622] RAX: ffffffff81cc2d79 RBX: 0000000000000000 RCX: ffff888116ce0000 [ 344.810765][ T3622] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 344.824943][ T3622] RBP: ffffc90000fefcf0 R08: dffffc0000000000 R09: ffffed102186d951 [ 344.840458][ T3622] R10: ffffed102186d951 R11: 1ffff1102186d950 R12: 0000000000000000 [ 344.849290][ T3622] R13: 1ffff1102186d950 R14: ffff88810c36ca80 R15: 0000000000003801 [ 344.857490][ T3622] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 344.858264][ T283] EXT4-fs (loop4): unmounting filesystem. [ 344.867203][ T3622] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 344.881942][ T28] audit: type=1400 audit(1755603593.139:326): avc: denied { setattr } for pid=3630 comm="syz.2.843" name="NETLINK" dev="sockfs" ino=27212 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 344.924747][ T3622] CR2: 00002000000bd038 CR3: 0000000136d60000 CR4: 00000000003506a0 [ 344.927897][ T3650] loop1: detected capacity change from 0 to 1024 [ 344.933508][ T3622] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 344.941254][ T3650] EXT4-fs: Ignoring removed orlov option [ 344.947813][ T3622] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 344.959763][ T3650] EXT4-fs: Ignoring removed nomblk_io_submit option [ 344.962167][ T3622] Kernel panic - not syncing: Fatal exception [ 344.968841][ T3622] Kernel Offset: disabled [ 344.980024][ T3622] Rebooting in 86400 seconds..