last executing test programs: 51.678001907s ago: executing program 0 (id=71): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2000046, &(0x7f0000000cc0)={[{@nombcache}, {@oldalloc}, {@inlinecrypt}, {@delalloc}, {@noload}, {@delalloc}, {@noload}, {@resuid}, {@lazytime}]}, 0x3, 0x4ea, &(0x7f00000006c0)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 49.992866773s ago: executing program 0 (id=78): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@delchain={0x24, 0x64, 0xf31, 0xfffffff9, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xa, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 49.799637146s ago: executing program 0 (id=80): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x28002) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x100) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) readv(r0, &(0x7f0000000780)=[{&(0x7f0000000300)=""/209, 0xd1}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000240)=0x10000, 0x12) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x1c0, 0x178, 0xc, 0x0, 0x178, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @mcast2, [], [0x0, 0x0, 0xffffffff], 'team_slave_0\x00', 'netpci0\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "fc6b061134c5d5c8465af5f5caa5bd6c0dde77ff83daa984c0d76167e0608dcaa2caff7bd9c5923cccd5b483df8124249f91b8c3c2cea9bed64dc935a975401a68e34a04c1f15e50050729ba985e8c1576994e350d93a782668d4d51a1bc76bba1fde09794922ae65a804c56f092e430ebb8fa892d671c8c8035cae06810f8c6", 0x20}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0x8}}]}, @common=@inet=@SET2={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'wg2\x00', 'hsr0\x00'}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "08db"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) 49.58712936s ago: executing program 0 (id=81): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000056, &(0x7f0000000ac0)={[{@delalloc}, {@data_err_abort}, {@i_version}, {@dioread_lock}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@minixdf}, {@jqfmt_vfsv1}, {@errors_continue}]}, 0x1, 0x55d, &(0x7f0000000e00)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002100)='./file2\x00', 0x42, 0x0) read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x1dbc) sendfile(r1, r1, &(0x7f0000000080)=0xfb, 0xe0000000) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r2, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000440)={0xfec5, 0x2f0f7b076791a6f4, 0x0, {0x4, 0x0, 0x0, {0xffffffffff7ffffe, 0xfffffffffffffffe, 0x4, 0x0, 0xfffffffffffffffe, 0x8, 0x3ff, 0x0, 0x401, 0xc000}}}, 0x78) 49.079934807s ago: executing program 0 (id=87): r0 = socket(0x28, 0x801, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x28, 0x6, 0x0, 0x20000000) 48.403322118s ago: executing program 0 (id=91): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000000101040000000000000000020000802400028014000180080001"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 48.028133263s ago: executing program 32 (id=91): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000000101040000000000000000020000802400028014000180080001"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 37.293125138s ago: executing program 1 (id=178): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$inet6_tcp(0xa, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x100000000004, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_audit(0x10, 0x3, 0x9) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setns(r1, 0x24020000) syz_usb_connect$uac1(0x0, 0xcf, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902bd0003010000020905000000010100000a24010000000201021324060000060000000000000000020000000009240300000000030009240500070000000009240300ff0104040002240504"], 0x0) ptrace$setsig(0x4203, r3, 0x5, &(0x7f0000000000)={0x34, 0x88, 0x40}) syz_clone(0x1fa524000, 0x0, 0x0, 0x0, 0x0, 0x0) 35.494519066s ago: executing program 1 (id=189): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r0, &(0x7f0000004180)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_OPEN(r0, &(0x7f00000002c0)={0x20, 0x0, r1}, 0x20) 34.424711622s ago: executing program 1 (id=195): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_procs(r3, 0x0, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r4, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 34.236714135s ago: executing program 1 (id=199): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x44c, &(0x7f0000000340)="$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") chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x800, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x0, 0x2]}) creat(&(0x7f0000000000)='./file0\x00', 0x8a) 32.787221997s ago: executing program 1 (id=205): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) r2 = syz_open_procfs(r1, 0x0) preadv(r2, &(0x7f0000000100), 0x0, 0x3c, 0x200) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x23b, &(0x7f0000001480)="$eJzs3TFoM2UcBvDnLomf/b4gn7oIggoiooVSN8GlLgoFKUVEUKEi4qK0Qm1xa51cHHRW6eRSxM3qKF2KiyI4Ve1QF0GLg8VBh0hyrVSbajE199H7/eCSu8v73v89cs+bLJcEaKzrSWaStJJMJukkKU42uKdarh9tbkzsLCS93pM/F4N21XbluN+1JOtJHk6yXRZ5uZ2sbj27/+vu4/e/tdK574OtZybGepJHDvb3njh8f+7Nj2cfWv3y6x/nisyk+5fzunjFkH3tIrnt/yh2gyjadY+A85h//aNv+rm/Pcm9g/x3UqZ6895evmm7kwffO6vvOz99dec4xwpcvF6v0/8MXO8BjVMm6aYop5JU62U5NVV9h/+2dbV8ZWn5tcmXllYWX6x7pgIuSjfZe+zTK59c+1v+f2hV+Qcur37+n5rf/K6/ftiqezTAOPXzP/n82gORf2gc+Yfmkn9oLvmH5pJ/aC75h8uvc8Z++Yfmkn9oLvmH5pJ/aK6T+QcAmqV3pe47kIG61D3/AAAAAAAAAAAAAAAAAAAAp21M7CwcL+Oq+fm7ycGjSdrD6rcG/0ec3Dx4vPpL0W/2p6LqNpLn7h7xACP6sOa7r2/5vt76X9xVb/21xWT9jSTT7fbp6684uv7+u1v/5fXOCyMWGNEjT9db//fNeuvP7iaf9eef6WHzT5k7Bs/D55/uP/y2+nm9+tuIBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBs/ggAAP//xtBtLg==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0xffffffb9, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f0000000580)={@desc={0x1, 0x0, @desc4}, 0x10, 0x0, '\x00', @d}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f00000006c0)=@v1={0x0, @adiantum, 0x0, @desc4}) fstat(r0, 0x0) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') symlink(&(0x7f0000000700)='mnt\x00', 0x0) 31.98114343s ago: executing program 1 (id=209): fsopen(&(0x7f00000000c0)='bpf\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) r0 = socket$packet(0x11, 0x3, 0x300) unshare(0x400) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) 31.906028411s ago: executing program 33 (id=209): fsopen(&(0x7f00000000c0)='bpf\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) r0 = socket$packet(0x11, 0x3, 0x300) unshare(0x400) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) 22.269035308s ago: executing program 2 (id=267): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000000), 0x0}, 0x20) 21.845374765s ago: executing program 2 (id=269): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtaction={0x80, 0x1c, 0x1, 0x0, 0xfffffffd, {0x0, 0x0, 0x1300}, [{0x6c, 0x1, [@m_tunnel_key={0x38, 0x4, 0x0, 0x0, {{0xf}, {0x4}, {0x6, 0x6, 'vP'}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_simple={0x30, 0xd, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x9c}}, 0x0) 21.799864485s ago: executing program 2 (id=270): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) 20.545749615s ago: executing program 2 (id=278): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000340)='./bus\x00', 0x0) mount(&(0x7f0000000b40)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000003c0)='./bus\x00', 0x20400, 0x62) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x13, 0x4, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', 0x0, 0x0, 0x835, 0x0) 20.172831401s ago: executing program 2 (id=283): r0 = syz_open_dev$loop(&(0x7f0000001500), 0x5, 0x121400) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000001540)) 19.705568868s ago: executing program 2 (id=285): io_setup(0x8, &(0x7f00000002c0)=0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000800)={[{@bsdgroups}, {@nodiscard}, {@oldalloc}, {@grpjquota}, {@nobarrier}, {@mblk_io_submit}, {@abort}, {@nodiscard}, {@nodiscard}]}, 0x64, 0x50d, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZj06Y3ueqDXvB69V5Ji3Y3aWwbfKgVRJ8Kan2vMdmEkE02ZDdtE4qm+AEEERV80hdfBD+AIAVffBShoM+KiiLa6oMP2rns7iRN091k226zafb3g8mcc2Zm/+dsmNk5M4eZAAbWOxFxLSIep2l6PiLGsvJcNsV2a2qs9+jh3bnGlESa3vhnEklWtvNZSTY/k212KiK+9uWIbybPxq1tbi3PVirl9Sxfqq+slWqbWxeWVmYXy4vl1enpqcszV2YuzUz2pJ1nI+LqF//6g+/+7EtXf/WZ23+6+fdz32pUazRbvrcdzyl/0MJW0wvN72LvBusvGOw4yjdbmBlpt8bQMyX3XnGdAABor3GO/8GI+GREnI+xGDr4dBYAAAB4DaWfH43/JRFpe8MdygEAAIDXSK45BjbJFbOxAKORyxWLrTG8H47TuUq1Vv/0QnVjdb41VnY8CrmFpUp5MhsrPB6FpJGfaqaf5C/uy09HxJsR8f2xkWa+OFetzPf74gcAAAAMiDP7+v//GWv1/wEAAIATZrzfFQAAAABeOf1/AAAAOPn0/wEAAOBE+8r1640p3Xn/9fytzY3l6q0L8+XacnFlY644V11fKy5Wq4vNZ/atHPZ5lWp17bOxunGnVC/X6qXa5tbNlerGav3m0lOvwAYAAACO0Jsfv/+HJCK2PzfSnBqGu9u0y9WA4yq/m0qyeZvd+o9vtOZ/OaJKAUdiqN8VAPom3+8KAH1T6HcFgL5LDlnecfDOb7P5J3pbHwAAoPcmPtr5/n/uwC23D14MHHt2Yhhc7v/D4Gre/+92JK+TBThRCs4AYOC99P3/Q6Xpc1UIAADoudHmlOSK2eW90cjlisWIs83XAhSShaVKeTIi3oiI348VPtDITzW3TA7tMwAAAAAAAAAAAAAAAAAAAAAAAAAALWmaRAoAAACcaBG5vyW/bj3Lf2LsvdH91weGk/+ORfaK0Ns/vvHDO7P1+vpUo/xfu+X1H2XlF/txBQMAAAAGwnO9wH+nn77TjwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAXnr08O7cznSUcf/xhYgYbxc/H6ea81NRiIjT/04iv2e7JCKGehB/pPHnI+3iJ41q7YZsF3+kB/G37x0YP8azb2F//OGIONOD+DDI7jeOP9fa7X+5eKc5b7//5SOeyr+ozse/2D3+DXU4/pztMsZbD35R6hj/XsRb+fbHn534SYf473YZ/xtf39rqtCz9ScRE29+f5KlYpfrKWqm2uXVhaWV2sbxYXp2enro8c2Xm0sxkaWGpUs7+to3xvY/98vFB7T/dIf74Ie1/r8v2///BnYcfaiUL7eKfe7dN/N/8NFvj2fi57LfvU1m6sXxiJ73dSu/19s9/9/ZB7Z/v0P7D/v/numz/+a9+589drgoAHIHa5tbybKVSXj+xiUYv/RhUQ+IYJr7d0w9M0zRt7FMv8TlJHIevpZno95EJAADotScn/f2uCQAAAAAAAAAAAAAAAAAAAAyuo3ic2P6Y27uppBeP0AYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6In3AwAA///d8Nla") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x10012, r1, 0x1000) io_submit(r0, 0x1, &(0x7f0000000340)=[0x0]) syz_open_dev$evdev(0x0, 0x89, 0x8000) 19.623103339s ago: executing program 34 (id=285): io_setup(0x8, &(0x7f00000002c0)=0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000800)={[{@bsdgroups}, {@nodiscard}, {@oldalloc}, {@grpjquota}, {@nobarrier}, {@mblk_io_submit}, {@abort}, {@nodiscard}, {@nodiscard}]}, 0x64, 0x50d, &(0x7f0000000200)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x10012, r1, 0x1000) io_submit(r0, 0x1, &(0x7f0000000340)=[0x0]) syz_open_dev$evdev(0x0, 0x89, 0x8000) 14.590517477s ago: executing program 3 (id=305): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@empty, @in=@local, 0x0, 0x0, 0x8000, 0x0, 0x2}, {0x4, 0x100000000, 0x3ffffffff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xe086}, {0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x3c}, 0xa, @in=@empty, 0x0, 0x5, 0x2, 0x0, 0x2000000}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x10, &(0x7f00000008c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) lseek(0xffffffffffffffff, 0x164, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, {0x0, 0x4e22, [0x0, 0xffffffff], [], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x20004010) 13.433381054s ago: executing program 3 (id=311): socket$inet6(0xa, 0x3, 0x16) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000016c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="666c7573682c757466383d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c73686f72746e616d653d77696e6e742c71756965742c0094f8a04f0973c43c7bcea227ba87b349831c01bc3220ec43c16881ca5a7eb4c441b475069a19ed5992542160cfb3116e6b98cb32f0c11a1425599a6e9e6112e8ccec10c22c03ee6158bae8a13f6c3b4c6a28b970ccddefe85485144c95ae43328f492ad74f0d68df2d1fb7eed626acbfd66c627c439a6358168da3754739b94ec5550af56d20754c3be005251ae53ba42f"], 0x4, 0x2fd, &(0x7f0000001700)="$eJzs3c1rE0EYx/Fn89IkrTU9iIgoDBVEkS5NwJsHi7QgBpS2EVpB2NqthmyTkoRARGwPglfPHnrwKIIo3ryIeO3Fv8C3Wy+9WaG4stlNmjfXtBjb2u/n0Ez3md/uZHfSlyFs1i89WcwuRKUqJHVDEpCg116R8x9WP5+een/E/V6pibHpRFKpgIjcevBi+F1p4Oabo28jsjZ0e30j+W3t1LTIz+l7ElCZosrZtjLUXD5f0pzwfKaY1ZW6YZlG0VSZXNEslLy6MWeZasHKLy1VlJGbH+xfKpjFojJyFZU1K6qUV6VCRRl3jUxO6bquBvsF1YtVE2iraX7B9PNN25YN27btyIrYtu30/mG7RW82rNQ6h73HyF8aNfaBluvv27dtKgV7OTL8C5t2qOvrj/+P+/r/8pTrfzhNzcxeG0ulxieVioosPi6ny2n30a1/GpCMWGLK6uSF2S1x5ohHNOfrxNXU+KiqGpKzi8tefrmcdn85jC14+YTEnb9TGvJSyyfcvPLyTnC5nA5Lf2M+KXE51jmfrOUl0HD8Pjl3piGvS1w+3pG8WDIvTnY7/zCh1JXrKdU8/li1HwAAAAAAAAAAB5Gu6rbX7zWZee2WY7oeqb7jo16POZudfm6H+vr6qMRlq/P6/Gjz+r63vh6Sk6G9fOYAAAAAABwexcr9rGFZZqE3jeCzmM8hwiLiNEQeDTuD8d3hcW/E3R29T0TaS0GxtG6fcuyie7yXk97ApJcnqtaI+p8En0bTm/GzhvUq5JVi0ikV2NEEGOnreOajBU16On+aGtJNZ4nubmJHup5arQ1tq7blRMc+tvbn/diGFXa3NFxB39TlHb0cftuItp6oka/ufi2fHxrf60t8AAAAAA6Qhn+cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAHtnVzcNq9+1vLon3EfHtt2Rr/Zx47vsPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYB/6FQAA///unawr") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000e280)={0x2020}, 0x2020) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x2002, 0x0) 10.964924272s ago: executing program 3 (id=316): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) r0 = timerfd_create(0x0, 0x0) r1 = eventfd2(0x4, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4) flock(r1, 0x5) flock(r0, 0x1) r3 = eventfd2(0x0, 0x0) flock(r3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r4 = open(&(0x7f0000000000)='./file0\x00', 0x101000, 0x84) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, 0x0, &(0x7f00000003c0)) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20041054}, 0x2000cc00) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x1aca4b11, 0x12) mkdirat(r4, &(0x7f0000000180)='./file0\x00', 0x40) 10.964550161s ago: executing program 3 (id=318): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x1) 10.964386892s ago: executing program 3 (id=320): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000000000085000000aa000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 10.394796551s ago: executing program 3 (id=323): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000180)=0xffffffff, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 10.174856204s ago: executing program 35 (id=323): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000180)=0xffffffff, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 5.87316137s ago: executing program 4 (id=353): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x80, 0x0, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x5c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @empty}}}]}, @CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_ZONE={0x6}]}, 0x80}}, 0x0) 5.694469163s ago: executing program 4 (id=354): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes128, 0x0, '\x00', @a}) 5.540927435s ago: executing program 4 (id=357): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f000000a400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fspick(0xffffffffffffff9c, 0x0, 0x1) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(0x0, 0x80) add_key(&(0x7f0000000100)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="f9a2875bd5f483b9428898695c60b2ba847d1b134374dafc112946332f8ed2524c8018cbad", 0x25, r4) capset(&(0x7f0000000080)={0x20071026, r3}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x6d, 0x0, 0xffffffff}) setregid(0xee00, 0xee00) 4.383675613s ago: executing program 4 (id=362): socket$inet6(0xa, 0x1, 0x0) ioperm(0x0, 0x1, 0x1) r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1404400, &(0x7f0000000200)={[{@user_xattr}, {@resuid}]}, 0x1, 0x4eb, &(0x7f0000000540)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) unlinkat(r0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x18) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x410000002) socket$inet6(0xa, 0x800, 0xffffffff) chmod(0x0, 0x14f) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c0000000203010100000000000000000200000a08000100010000159525dac6807cd5831f04f954b3e33302979a81a19efc41cd19991914a632399c1de505cba202dbd1f4d187f3edc35f0a46f190a7060b55b353321b06ec"], 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x8001000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x230, 0x90, 0x11, 0x148, 0x90, 0x0, 0x198, 0x2a8, 0x2a8, 0x198, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@unspec=@connmark={{0x30}, {0x40, 0x0, 0x1}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x0, {0x6}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x0, 0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) 3.732488183s ago: executing program 4 (id=368): add_key$fscrypt_v1(&(0x7f0000000100), 0x0, &(0x7f00000002c0)={0x0, "f9fa6530de770fa5498fbd0d718a66253983d515aa17c12194cb772d6247afcfecde96f083a52841f0974065522852e959c256711827ef5d64bf44b57ccca4e8", 0x36}, 0x48, 0xfffffffffffffffc) add_key$user(&(0x7f0000000200), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000190c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000120001000100000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r3, &(0x7f0000000340), &(0x7f00000000c0)=""/109}, 0x20) 2.64406458s ago: executing program 7 (id=375): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x8, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r0, &(0x7f00000005c0), 0x0}, 0x20) 2.458933043s ago: executing program 5 (id=376): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x4000, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4, 0x9}, {0xb, 0x1}, {0x4, 0x3}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0xc, 0x8, 0xd, 0x0, 0x4, 0x2}}, {0x4}}, {{0x20, 0x1, {0x7, 0xfc, 0x200, 0xa, 0x0, 0x0, 0x7e}}, {0x4}}]}]}, 0x68}}, 0x0) 2.457539252s ago: executing program 4 (id=378): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0xc14, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c75746663686172736542358cd7a46c60af220f282c35743d757466382c73686f72746e616d653d6d697865642c757466383d312c00484516000000000095f57319fe49179d16a3e5dc12fbe6e9a5b7d09da9ea2a653323ddd2bb258ff21daac6788dcaf251484de7aabc02f9956349cf100597612023749bd0b0825563afcbd5413df7ba597c5c9eadab"], 0x3, 0x2a1, &(0x7f0000000f40)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xf) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x8000000001) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_bulk={0x3, {0x1}, 0x8, 0xa9, 0x0, 0x0, 0x0, 0x1, 0x3, 0xffff0000, 0x5, 0x0}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2008804, &(0x7f0000009d80)=ANY=[@ANYBLOB='flush,uni_xlate=1,nonumtail=0,rodir,iocharset=iso8859-14,nonumtail=0,utf8=1,umask=00000000000000000000013,uni_xlate=0,shortname=mixed,uni_xlate=0,t,uni_xlate=1,nonumtail=0,dos1xfloppy,nonumtail=0,utf8=1,\x00'], 0xdd, 0x2e5, &(0x7f0000000540)="$eJzs3U1rE0Ecx/F/kqZJWmt6EBFRGCqIIl2agDcPFmlBDChtI1hB2NqthmyTkg2FiNgeBK+ePfTgUQQRvHkR8dqLr8CnWy+9WbC4stndNE3WNa32yX4/h3a6M7+dyc6kD9N2s3Lp6WxxxtJ+2HVx8fRLVGJeeVHOf1j6fHr8/RH3Y6VGhycyWaWiInL74cuBd9Xem2+Ovk3Icv+dldXst+VTEyI/J+5LVBUsVbJtpaupcrkaccLTBauoKXXDNHTLUIWSZVSqXr0+ZRpqxizPzdWUXpru65mrGJal9FJNFY2aqpZVtVJT+j29UFKapqm+HkF9snzRtrpIWDD/Ys22ZdWZ+cSi2LYd0HrRL/hrI/F3g8V+0jL/oW3bFkdsJ0eG3bBmd3U8//j/uM//L8+Y/8Np/NbkteFcbmRMqaTI7JP5/Hzefe/Wf+qVgphiyNLYhcl1EbtBIs7b0au5kSFV1y9nZxe8/MJ83v3iMDzj5TOSdr5PacqLn8+4ebU5H5ee5nxW0nIsOJ/18xJtynfLuTNNeU3S8vGulMWUaXGyG/lHGaWuXM+19J+qtwMAAAAAAAAA4CDSVMPG/n2k8avelKYl6n/x0ahPOYeddm6Dxv76kKRlPXh/fihwf79LTnbt4QMHAAAAAOAQsWoPirppGpWdKcSep0K6iIuIUxB5POAMJvSEx70Rd9Z7t4i0V8XCu9hUSF10+3s15g1MdvJC/aOC/88aRd187VelJKhxdEsLYLA78Mond/UBSieNJbm9hZ3oeGm1FiLr/pETgW3syJ/PY+tm3D0iGzMYmrq8pafDbwvJ1gs1+NU9rxnySeN7Y4sPAAAAwAHS9IMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYI9u6eZh/3/7NVeK9RHz7LdlaXyee+/4DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2Id+BQAA//+FlLca") ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.457023923s ago: executing program 7 (id=379): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x5e, &(0x7f0000000340), 0x3, 0x482, &(0x7f0000001040)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) quotactl_fd$Q_SYNC(r0, 0xffffffff80000101, 0x0, 0x0) 2.382138464s ago: executing program 8 (id=380): socket$inet6(0xa, 0x3, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001200)={0x60000010}) r2 = epoll_create1(0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000300)={0x10000000}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000600)) 2.381866744s ago: executing program 5 (id=381): r0 = io_uring_setup(0x2cb4, &(0x7f00000002c0)={0x0, 0x656, 0x40, 0x1, 0x328}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x564a0000) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000400)=[@ioring_restriction_register_op={0x0, 0x10}], 0x1) 2.381753944s ago: executing program 6 (id=382): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.381665193s ago: executing program 5 (id=383): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x108, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x6332d720d0e95a34}, 0xe) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) 2.352317184s ago: executing program 5 (id=384): mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, 0x0, &(0x7f0000001c40)=r4}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7f83, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) 2.297475545s ago: executing program 6 (id=385): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7f83, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) 2.293903344s ago: executing program 8 (id=386): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x441, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x5, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000001100)=0x12) 2.269189666s ago: executing program 7 (id=387): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x76) 2.094029628s ago: executing program 6 (id=388): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001400)=""/275, 0x113}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/197, 0xc5}, {&(0x7f0000000880)=""/142, 0x8e}, {&(0x7f0000000c00)=""/120, 0x78}, {&(0x7f00000009c0)=""/239, 0xef}, {&(0x7f0000000d40)=""/173, 0xad}, {&(0x7f0000000c80)=""/162, 0xa2}, {&(0x7f0000000140)=""/57, 0x39}], 0x9}, 0x1005}], 0x1, 0x0, 0x0) 2.093814548s ago: executing program 7 (id=389): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x84515000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 1.734816303s ago: executing program 6 (id=390): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r2, 0x4b45, 0x5) quotactl$Q_GETFMT(0xffffffff80000401, 0x0, 0x0, &(0x7f0000000180)) socket(0x10, 0x2, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000001540)=[{0x0}], 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000340)={[{@sb={'sb', 0x3d, 0x6}}, {@resgid}, {@noquota}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@barrier_val={'barrier', 0x3d, 0x8001}}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@barrier}, {@noacl}, {@resuid}, {@user_xattr}]}, 0x1, 0x44a, &(0x7f0000000880)="$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") r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@bridge_delneigh={0x1c, 0x1d, 0x1, 0x70bd29, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, 0x8, 0x8e, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x200000d4}, 0x4) chdir(&(0x7f0000000140)='./file0\x00') 1.27267938s ago: executing program 5 (id=391): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200), 0x25, 0x4be, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0xfbb0) creat(&(0x7f00000000c0)='./file1\x00', 0x1) 1.239133661s ago: executing program 8 (id=392): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpgid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000) io_setup(0x5, 0x0) inotify_init() mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 696.028669ms ago: executing program 6 (id=393): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() getrlimit(0x1, &(0x7f00000003c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40) clock_gettime(0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x122) lseek(r4, 0x1, 0x0) getdents(r4, 0x0, 0x58) 98.797598ms ago: executing program 7 (id=394): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x108, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x6332d720d0e95a34}, 0xe) 98.538719ms ago: executing program 8 (id=395): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001a000100000000000000000002200001ec"], 0x1c}}, 0x0) 98.342279ms ago: executing program 7 (id=396): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x0, 0x34, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, 0x0, 0x20000000) r4 = socket(0xa, 0x6, 0x0) r5 = syz_io_uring_setup(0x126b, &(0x7f00000006c0), 0x0, &(0x7f0000000780)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff]}, 0x20) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0x4, 0x0, &(0x7f00000000c0)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000000100), 0x0, 0x40040, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "480ca6eda49ed6a6", "3a2cc8b276a753b0e23e2a8436b0e1d53d11b70c57abe2e932240e766d3aebfd", "a0eb068e", "e96e232f2004a832"}, 0x38) 97.103178ms ago: executing program 6 (id=397): r0 = syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_io_uring_setup(0xec1, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x235e, 0x6823, 0x3, &(0x7f0000000040)={[0xc24]}, 0x8) waitid(0x1, r0, 0x0, 0xc0000004, 0x0) 37.17185ms ago: executing program 5 (id=398): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x3, 0x453, &(0x7f0000000600)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000000, 0x3032, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{0x0, 0x0, 0x700}, {0xffffffff}]}) 431.2µs ago: executing program 8 (id=399): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7f83, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) 0s ago: executing program 8 (id=400): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000740)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000c80)=""/56, 0x38) lseek(r0, 0x400, 0x1) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x2000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.8' (ED25519) to the list of known hosts. [ 22.344197][ T28] audit: type=1400 audit(1743250605.802:66): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.345489][ T281] cgroup: Unknown subsys name 'net' [ 22.367200][ T28] audit: type=1400 audit(1743250605.802:67): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.394846][ T28] audit: type=1400 audit(1743250605.842:68): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.395039][ T281] cgroup: Unknown subsys name 'devices' [ 22.511854][ T281] cgroup: Unknown subsys name 'hugetlb' [ 22.517315][ T281] cgroup: Unknown subsys name 'rlimit' [ 22.623258][ T28] audit: type=1400 audit(1743250606.082:69): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.647036][ T28] audit: type=1400 audit(1743250606.082:70): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.671740][ T28] audit: type=1400 audit(1743250606.082:71): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.682167][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.704481][ T28] audit: type=1400 audit(1743250606.172:72): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.729837][ T28] audit: type=1400 audit(1743250606.172:73): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.766494][ T28] audit: type=1400 audit(1743250606.222:74): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.767667][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.792135][ T28] audit: type=1400 audit(1743250606.222:75): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.640641][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.647613][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.655070][ T292] device bridge_slave_0 entered promiscuous mode [ 23.663230][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.670317][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.677639][ T292] device bridge_slave_1 entered promiscuous mode [ 23.755175][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.762153][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.769395][ T294] device bridge_slave_0 entered promiscuous mode [ 23.778086][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.785080][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.792408][ T294] device bridge_slave_1 entered promiscuous mode [ 23.810951][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.817803][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.825161][ T291] device bridge_slave_0 entered promiscuous mode [ 23.848238][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.855135][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.862542][ T291] device bridge_slave_1 entered promiscuous mode [ 23.937037][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.944003][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.951358][ T293] device bridge_slave_0 entered promiscuous mode [ 23.966401][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.973344][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.980599][ T293] device bridge_slave_1 entered promiscuous mode [ 24.067316][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.074312][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.081639][ T295] device bridge_slave_0 entered promiscuous mode [ 24.088560][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.095693][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.103121][ T295] device bridge_slave_1 entered promiscuous mode [ 24.135753][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.142642][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.149813][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.156740][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.172318][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.179177][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.186451][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.193389][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.211061][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.218178][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.225410][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.232370][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.327500][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.334916][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.342537][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.350156][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.357291][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.364464][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.372790][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.380299][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.406718][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.414260][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.422435][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.429352][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.436819][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.445082][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.451975][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.474961][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.482862][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.491069][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.498024][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.505484][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.514893][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.521770][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.535848][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.555798][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.564177][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.571057][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.578527][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.586892][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.593905][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.601658][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.610372][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.617311][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.625090][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.639676][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.647768][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.655803][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.664020][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.672018][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.680212][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.687944][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.696316][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.726237][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.734962][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.743463][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.752854][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.761385][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.769124][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.777089][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.785285][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.793706][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.800689][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.807995][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.815982][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.824047][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.831366][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.838687][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.846154][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.856325][ T294] device veth0_vlan entered promiscuous mode [ 24.870096][ T292] device veth0_vlan entered promiscuous mode [ 24.879245][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.887366][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.895934][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.904257][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.912400][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.920370][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.928255][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.936497][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.957492][ T294] device veth1_macvtap entered promiscuous mode [ 24.966340][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.974392][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.982946][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.990626][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.998646][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.008049][ T292] device veth1_macvtap entered promiscuous mode [ 25.026451][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.034050][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.042660][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.051475][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.059892][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.068171][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.076402][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.086368][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.094207][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.108667][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.118328][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.126941][ T294] request_module fs-gadgetfs succeeded, but still no fs? [ 25.143795][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.153487][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.161787][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.171009][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.179036][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.185934][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.193336][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.201734][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.209833][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.216789][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.224113][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.232277][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.240656][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.257208][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.271323][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.279507][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.287691][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.295775][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.366541][ T291] device veth0_vlan entered promiscuous mode [ 25.377584][ T293] device veth0_vlan entered promiscuous mode [ 25.394118][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.403131][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.411131][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.419185][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.427057][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.491748][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.514481][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.523639][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.533039][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.544114][ T291] device veth1_macvtap entered promiscuous mode [ 25.557953][ T293] device veth1_macvtap entered promiscuous mode [ 25.607177][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.615720][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.624214][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.632255][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.653466][ T295] device veth0_vlan entered promiscuous mode [ 25.680418][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.689538][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.698834][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.709183][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.724356][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.738636][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.772026][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.781616][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.948673][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.960075][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.022348][ T295] device veth1_macvtap entered promiscuous mode [ 26.081776][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.096283][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.173240][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.300321][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.301540][ T341] loop4: detected capacity change from 0 to 8192 [ 26.320680][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.697107][ T39] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 27.700377][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 27.700399][ T28] audit: type=1400 audit(1743250611.152:126): avc: denied { mount } for pid=369 comm="syz.0.16" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 27.931121][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.958614][ T39] usb 4-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 27.994750][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.063188][ T39] usb 4-1: config 0 descriptor?? [ 28.090964][ T376] loop2: detected capacity change from 0 to 1024 [ 28.111951][ T376] ======================================================= [ 28.111951][ T376] WARNING: The mand mount option has been deprecated and [ 28.111951][ T376] and is ignored by this kernel. Remove the mand [ 28.111951][ T376] option from the mount to silence this warning. [ 28.111951][ T376] ======================================================= [ 28.113935][ T28] audit: type=1400 audit(1743250611.572:127): avc: denied { getopt } for pid=377 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 28.207739][ T380] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 28.236996][ T376] ext4: Unknown parameter 'nouser_xattr' [ 28.242682][ T28] audit: type=1400 audit(1743250611.662:128): avc: denied { read } for pid=379 comm="syz.0.19" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 28.284608][ T28] audit: type=1400 audit(1743250611.662:129): avc: denied { open } for pid=379 comm="syz.0.19" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 28.354527][ T28] audit: type=1400 audit(1743250611.662:130): avc: denied { ioctl } for pid=379 comm="syz.0.19" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 28.379329][ T368] af_packet: tpacket_rcv: packet too big, clamped from 96 to 4294967272. macoff=96 [ 28.408244][ T28] audit: type=1400 audit(1743250611.822:131): avc: denied { setopt } for pid=375 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.450043][ T28] audit: type=1400 audit(1743250611.842:132): avc: denied { ioctl } for pid=375 comm="syz.2.17" path="socket:[15776]" dev="sockfs" ino=15776 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.503586][ T28] audit: type=1400 audit(1743250611.852:133): avc: denied { write } for pid=375 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.558186][ T28] audit: type=1400 audit(1743250611.902:134): avc: denied { connect } for pid=383 comm="syz.2.21" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.618952][ T28] audit: type=1400 audit(1743250611.902:135): avc: denied { write } for pid=383 comm="syz.2.21" laddr=fe80::a lport=60 faddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.699896][ T394] loop0: detected capacity change from 0 to 128 [ 28.742946][ T394] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 28.802650][ T394] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 29.090708][ T294] EXT4-fs (loop0): unmounting filesystem. [ 29.618127][ T39] usbhid 4-1:0.0: can't add hid device: -71 [ 29.648874][ T39] usbhid: probe of 4-1:0.0 failed with error -71 [ 29.703532][ T39] usb 4-1: USB disconnect, device number 2 [ 30.505748][ T423] loop3: detected capacity change from 0 to 1024 [ 30.571797][ T423] EXT4-fs error (device loop3): ext4_map_blocks:744: inode #3: block 1: comm syz.3.33: lblock 1 mapped to illegal pblock 1 (length 1) [ 30.586054][ T423] EXT4-fs (loop3): Remounting filesystem read-only [ 30.598062][ T423] EXT4-fs error (device loop3): ext4_acquire_dquot:6782: comm syz.3.33: Failed to acquire dquot type 0 [ 31.090161][ T426] netlink: 'syz.4.32': attribute type 3 has an invalid length. [ 31.122965][ T423] EXT4-fs (loop3): Remounting filesystem read-only [ 31.139783][ T423] EXT4-fs error (device loop3): ext4_free_blocks:6210: comm syz.3.33: Freeing blocks not in datazone - block = 0, count = 4096 [ 31.158237][ T423] EXT4-fs (loop3): Remounting filesystem read-only [ 31.179764][ T423] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.33: Invalid inode bitmap blk 0 in block_group 0 [ 31.199924][ T8] EXT4-fs error (device loop3): ext4_map_blocks:634: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 31.226111][ T8] EXT4-fs (loop3): Remounting filesystem read-only [ 31.239647][ T423] EXT4-fs (loop3): Remounting filesystem read-only [ 31.249773][ T8] EXT4-fs error (device loop3): ext4_release_dquot:6805: comm kworker/u4:0: Failed to release dquot type 0 [ 31.269750][ T423] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 31.284207][ T8] EXT4-fs (loop3): Remounting filesystem read-only [ 31.293878][ T423] EXT4-fs (loop3): Remounting filesystem read-only [ 31.308539][ T423] EXT4-fs (loop3): 1 orphan inode deleted [ 31.327997][ T423] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 31.340476][ T438] loop1: detected capacity change from 0 to 128 [ 31.372639][ T436] loop4: detected capacity change from 0 to 1024 [ 31.379195][ T436] EXT4-fs: Ignoring removed oldalloc option [ 31.410539][ T291] EXT4-fs (loop3): unmounting filesystem. [ 31.433883][ T438] FAT-fs (loop1): bogus number of reserved sectors [ 31.459212][ T438] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 31.459669][ T436] EXT4-fs: Ignoring removed bh option [ 31.483514][ T446] SELinux: Context is not valid (left unmapped). [ 31.499959][ T438] FAT-fs (loop1): Can't find a valid FAT filesystem [ 31.507974][ T436] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 32.049722][ T436] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 32.392890][ T436] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3841: comm syz.4.35: Allocating blocks 481-513 which overlap fs metadata [ 32.417878][ T475] loop1: detected capacity change from 0 to 128 [ 32.902291][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 32.902309][ T28] audit: type=1400 audit(1743250615.942:159): avc: denied { mount } for pid=466 comm="syz.3.47" name="/" dev="ramfs" ino=16847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 32.979365][ T479] EXT4-fs (loop4): pa ffff888119453e70: logic 0, phys. 465, len 3 [ 32.987186][ T479] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 32.998534][ T475] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 33.033991][ T475] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 33.049955][ T28] audit: type=1400 audit(1743250615.982:160): avc: denied { create } for pid=466 comm="syz.3.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.050664][ T386] syz.0.20 (386) used greatest stack depth: 21968 bytes left [ 33.111556][ T28] audit: type=1400 audit(1743250616.002:161): avc: denied { ioctl } for pid=466 comm="syz.3.47" path="socket:[16850]" dev="sockfs" ino=16850 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.213708][ T293] EXT4-fs (loop4): unmounting filesystem. [ 33.329741][ T28] audit: type=1400 audit(1743250616.632:162): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 33.372144][ T486] loop2: detected capacity change from 0 to 128 [ 33.379788][ T486] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 33.485265][ T487] loop4: detected capacity change from 0 to 128 [ 33.490006][ T28] audit: type=1400 audit(1743250616.902:163): avc: denied { getopt } for pid=485 comm="syz.0.49" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.511581][ T487] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 33.520946][ T28] audit: type=1400 audit(1743250616.902:164): avc: denied { ioctl } for pid=485 comm="syz.0.49" path="socket:[16866]" dev="sockfs" ino=16866 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.530049][ T292] EXT4-fs (loop1): unmounting filesystem. [ 33.786700][ T28] audit: type=1400 audit(1743250617.062:165): avc: denied { connect } for pid=491 comm="syz.0.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 33.830707][ T499] loop0: detected capacity change from 0 to 512 [ 33.878611][ T499] ext4: Unknown parameter 'fowner<00000000000000060928' [ 34.125886][ T499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.56'. [ 34.277976][ T8] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 36.001705][ T8] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 36.191676][ T529] loop1: detected capacity change from 0 to 256 [ 36.284602][ T529] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 37.162083][ T28] audit: type=1400 audit(1743250620.622:166): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 37.260354][ T549] loop0: detected capacity change from 0 to 512 [ 37.266754][ T549] EXT4-fs: Ignoring removed oldalloc option [ 37.281529][ T552] loop4: detected capacity change from 0 to 128 [ 37.300232][ T549] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 37.309400][ T552] FAT-fs (loop4): bogus number of reserved sectors [ 37.339750][ T552] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 37.399667][ T552] FAT-fs (loop4): Can't find a valid FAT filesystem [ 37.461031][ T549] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.71: bg 0: block 64: padding at end of block bitmap is not set [ 37.479649][ T558] raw_sendmsg: syz.3.73 forgot to set AF_INET. Fix it! [ 37.534576][ T472] syz.0.45 (472) used greatest stack depth: 21856 bytes left [ 37.891246][ T549] Quota error (device loop0): write_blk: dquota write failed [ 37.903950][ T28] audit: type=1400 audit(1743250621.302:167): avc: denied { bind } for pid=551 comm="syz.4.72" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.990220][ T549] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 38.001546][ T28] audit: type=1400 audit(1743250621.302:168): avc: denied { node_bind } for pid=551 comm="syz.4.72" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 38.028966][ T564] Zero length message leads to an empty skb [ 38.399684][ T568] capability: warning: `syz.4.75' uses deprecated v2 capabilities in a way that may be insecure [ 38.749769][ T549] EXT4-fs error (device loop0): ext4_acquire_dquot:6782: comm syz.0.71: Failed to acquire dquot type 0 [ 38.773194][ T28] audit: type=1400 audit(1743250621.872:169): avc: denied { read } for pid=565 comm="syz.4.75" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 38.796501][ T549] EXT4-fs (loop0): 1 truncate cleaned up [ 38.806184][ T549] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 38.817170][ T28] audit: type=1400 audit(1743250621.872:170): avc: denied { open } for pid=565 comm="syz.4.75" path="/dev/rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 38.860396][ T549] Quota error (device loop0): do_check_range: Getting block 144 out of range 0-5 [ 38.879178][ T549] syz.0.71 (549) used greatest stack depth: 20008 bytes left [ 38.916622][ T294] EXT4-fs (loop0): unmounting filesystem. [ 38.938064][ T28] audit: type=1400 audit(1743250622.392:171): avc: denied { create } for pid=574 comm="syz.3.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.960894][ T577] netlink: 24 bytes leftover after parsing attributes in process `syz.0.78'. [ 39.278211][ T28] audit: type=1400 audit(1743250622.642:172): avc: denied { append } for pid=574 comm="syz.3.79" name="001" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 39.491013][ T583] loop0: detected capacity change from 0 to 1024 [ 39.500195][ T583] EXT4-fs: Ignoring removed i_version option [ 39.533999][ T583] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 39.570976][ T28] audit: type=1400 audit(1743250623.032:173): avc: denied { read write } for pid=582 comm="syz.0.81" name="file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.637317][ T28] audit: type=1400 audit(1743250623.062:174): avc: denied { open } for pid=582 comm="syz.0.81" path="/27/file1/file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.700521][ T28] audit: type=1400 audit(1743250623.132:175): avc: denied { mounton } for pid=582 comm="syz.0.81" path="/27/file1/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 39.808094][ T294] EXT4-fs error (device loop0): ext4_lookup:1858: inode #11: comm syz-executor: iget: checksum invalid [ 39.832286][ T294] EXT4-fs error (device loop0): ext4_lookup:1858: inode #11: comm syz-executor: iget: checksum invalid [ 40.412505][ T294] EXT4-fs (loop0): unmounting filesystem. [ 40.797884][ T333] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 40.934920][ T624] loop1: detected capacity change from 0 to 512 [ 40.956118][ T624] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.977282][ T628] loop2: detected capacity change from 0 to 512 [ 41.008975][ T628] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 41.017638][ T624] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 41.026438][ T333] usb 4-1: Using ep0 maxpacket: 16 [ 41.033062][ T628] EXT4-fs (loop2): 1 truncate cleaned up [ 41.039541][ T333] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 41.041286][ T624] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.055768][ T333] usb 4-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 41.063033][ T628] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 41.082738][ T333] usb 4-1: Product: syz [ 41.087992][ T333] usb 4-1: Manufacturer: syz [ 41.094984][ T333] usb 4-1: SerialNumber: syz [ 41.095178][ T628] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #2: comm syz.2.99: Directory hole found for htree leaf block 0 [ 41.101186][ T292] EXT4-fs (loop1): unmounting filesystem. [ 41.127732][ T333] usb 4-1: config 0 descriptor?? [ 41.136335][ T631] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.149743][ T631] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.157530][ T333] usb 4-1: selecting invalid altsetting 1 [ 41.165920][ T631] device bridge_slave_0 entered promiscuous mode [ 41.173216][ T333] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 41.173943][ T295] EXT4-fs (loop2): unmounting filesystem. [ 41.202696][ T639] loop1: detected capacity change from 0 to 512 [ 41.214625][ T631] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.227342][ T631] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.234899][ T631] device bridge_slave_1 entered promiscuous mode [ 41.247872][ T351] udevd[351]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.271130][ T639] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 41.349495][ T10] device bridge_slave_1 left promiscuous mode [ 41.362861][ T638] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.100: bg 0: block 264: padding at end of block bitmap is not set [ 41.377256][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.394112][ T10] device bridge_slave_0 left promiscuous mode [ 41.404182][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.412994][ T10] device veth1_macvtap left promiscuous mode [ 41.413292][ T649] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3758096384 > max in inode 15 [ 41.418959][ T10] device veth0_vlan left promiscuous mode [ 41.435850][ T649] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3758096385 > max in inode 15 [ 41.727188][ T292] EXT4-fs (loop1): unmounting filesystem. [ 41.785416][ T655] loop1: detected capacity change from 0 to 256 [ 42.120231][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.129183][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.153936][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.164353][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.174041][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.180930][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.190638][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.202171][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.211118][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.217990][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.242397][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 42.267303][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.277646][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.286884][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.328953][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.345932][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 42.354661][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.368476][ T631] device veth0_vlan entered promiscuous mode [ 42.374972][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.383048][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.417594][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.432323][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.439763][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.447846][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.468031][ T631] device veth1_macvtap entered promiscuous mode [ 42.480016][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.488059][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.496377][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.506499][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.514710][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.554015][ T668] loop5: detected capacity change from 0 to 512 [ 42.581567][ T668] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 42.590956][ T668] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.597531][ T674] loop4: detected capacity change from 0 to 512 [ 42.612179][ T674] EXT4-fs error (device loop4): __ext4_fill_super:5377: inode #2: comm syz.4.112: casefold flag without casefold feature [ 42.626310][ T674] EXT4-fs (loop4): get root inode failed [ 42.632535][ T674] EXT4-fs (loop4): mount failed [ 43.186604][ T674] loop4: detected capacity change from 0 to 512 [ 43.193027][ T674] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.193946][ T631] EXT4-fs (loop5): unmounting filesystem. [ 43.207291][ T333] usb 4-1: USB disconnect, device number 3 [ 43.214850][ T674] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.112: invalid block [ 43.226543][ T674] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.112: invalid indirect mapped block 10 (level 1) [ 43.243864][ T674] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.112: invalid indirect mapped block 8 (level 1) [ 43.254405][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 43.254423][ T28] audit: type=1400 audit(1743250626.712:197): avc: denied { connect } for pid=681 comm="syz.5.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.258866][ T674] EXT4-fs (loop4): 1 truncate cleaned up [ 43.270270][ T28] audit: type=1400 audit(1743250626.732:198): avc: denied { setopt } for pid=681 comm="syz.5.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.282358][ T674] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 43.419196][ T293] EXT4-fs (loop4): unmounting filesystem. [ 43.446338][ T28] audit: type=1400 audit(1743250626.902:199): avc: denied { ioctl } for pid=687 comm="syz.1.117" path="socket:[17325]" dev="sockfs" ino=17325 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.065120][ T695] loop3: detected capacity change from 0 to 1024 [ 44.345125][ T28] audit: type=1400 audit(1743250626.902:200): avc: denied { read } for pid=689 comm="syz.2.118" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.374740][ T28] audit: type=1400 audit(1743250626.902:201): avc: denied { open } for pid=689 comm="syz.2.118" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.410607][ T695] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #11: comm syz.3.113: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 44.415829][ T28] audit: type=1400 audit(1743250626.912:202): avc: denied { ioctl } for pid=689 comm="syz.2.118" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.453646][ T695] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.113: couldn't read orphan inode 11 (err -117) [ 44.473699][ T703] netlink: 96 bytes leftover after parsing attributes in process `syz.4.119'. [ 44.524571][ T695] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 44.534422][ T695] EXT4-fs (loop3): unmounting filesystem. [ 44.819682][ T39] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 44.849620][ T545] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 45.011430][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.030713][ T545] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.047412][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.188627][ T545] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.201450][ T39] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 45.217492][ T545] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 45.233403][ T39] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 45.258944][ T545] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 45.276287][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.688600][ T28] audit: type=1400 audit(1743250629.102:203): avc: denied { read write } for pid=722 comm="syz.3.128" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 45.723572][ T545] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.856062][ T729] loop4: detected capacity change from 0 to 512 [ 45.865516][ T545] usb 2-1: config 0 descriptor?? [ 45.872545][ T39] usb 6-1: config 0 descriptor?? [ 45.924511][ T729] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 45.935205][ T28] audit: type=1400 audit(1743250629.102:204): avc: denied { open } for pid=722 comm="syz.3.128" path="/dev/uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 45.989062][ T28] audit: type=1400 audit(1743250629.122:205): avc: denied { ioctl } for pid=722 comm="syz.3.128" path="/dev/uinput" dev="devtmpfs" ino=258 ioctlcmd=0x5567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 46.024648][ T729] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c119, mo2=0002] [ 46.052668][ T729] System zones: 1-12 [ 46.062959][ T729] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.129: corrupted in-inode xattr [ 46.085428][ T28] audit: type=1326 audit(1743250629.142:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=722 comm="syz.3.128" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f095898d169 code=0x0 [ 46.131931][ T729] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.129: couldn't read orphan inode 15 (err -117) [ 46.154228][ T729] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 46.194791][ T729] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.129: corrupted in-inode xattr [ 46.219669][ T503] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 46.247766][ T293] EXT4-fs (loop4): unmounting filesystem. [ 46.303184][ T736] loop4: detected capacity change from 0 to 2048 [ 46.318544][ T545] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 46.331281][ T39] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 46.339424][ T545] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 46.345723][ T736] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 46.352916][ T39] plantronics 0003:047F:FFFF.0002: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 46.360813][ T736] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.403585][ T293] EXT4-fs (loop4): unmounting filesystem. [ 46.419618][ T503] usb 4-1: Using ep0 maxpacket: 8 [ 46.425570][ T503] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.446030][ T744] loop2: detected capacity change from 0 to 512 [ 46.452465][ T503] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 46.462018][ T744] ext2: Unknown parameter 'smackfsfloor' [ 46.468620][ T503] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 46.478979][ T503] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 46.546537][ T503] usb 4-1: SerialNumber: syz [ 46.739650][ T756] netlink: 36 bytes leftover after parsing attributes in process `syz.2.134'. [ 47.307252][ T731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.318992][ T731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.330724][ T503] usb 4-1: USB disconnect, device number 4 [ 47.733943][ T332] usb 6-1: USB disconnect, device number 2 [ 47.797980][ T771] loop1: detected capacity change from 0 to 1024 [ 47.815884][ T773] loop5: detected capacity change from 0 to 1024 [ 47.832459][ T773] EXT4-fs: Ignoring removed orlov option [ 47.853393][ T771] EXT4-fs: Ignoring removed bh option [ 47.869359][ T773] EXT4-fs (loop5): Test dummy encryption mode enabled [ 47.887677][ T773] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 47.906565][ T771] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 49.089568][ C1] sched: RT throttling activated [ 49.133833][ T785] loop3: detected capacity change from 0 to 1024 [ 49.141302][ T631] EXT4-fs (loop5): unmounting filesystem. [ 49.178893][ T785] __quota_error: 8 callbacks suppressed [ 49.178913][ T785] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 49.202291][ T790] loop5: detected capacity change from 0 to 256 [ 49.277839][ T785] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 49.291685][ T790] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x606a960c, utbl_chksum : 0xe619d30d) [ 49.303788][ T785] EXT4-fs error (device loop3): ext4_acquire_dquot:6782: comm syz.3.149: Failed to acquire dquot type 0 [ 49.329675][ T28] audit: type=1400 audit(1743250632.782:215): avc: denied { write } for pid=789 comm="syz.5.146" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.360099][ T785] EXT4-fs (loop3): 1 truncate cleaned up [ 49.368557][ T785] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 49.377550][ T28] audit: type=1400 audit(1743250632.812:216): avc: denied { add_name } for pid=789 comm="syz.5.146" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.498046][ T793] xt_limit: Overflow, try lower: 687865856/40 [ 49.505862][ T333] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 49.794899][ T28] audit: type=1400 audit(1743250632.812:217): avc: denied { associate } for pid=789 comm="syz.5.146" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 49.831424][ T28] audit: type=1400 audit(1743250632.812:218): avc: denied { read write } for pid=789 comm="syz.5.146" name="file1" dev="loop5" ino=1048607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.840138][ T333] usb 2-1: device firmware changed [ 49.855127][ T28] audit: type=1400 audit(1743250632.812:219): avc: denied { open } for pid=789 comm="syz.5.146" path="/6/file1/file1" dev="loop5" ino=1048607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.860676][ T329] usb 2-1: USB disconnect, device number 2 [ 49.882421][ T28] audit: type=1400 audit(1743250632.812:220): avc: denied { map } for pid=789 comm="syz.5.146" path="/6/file1/file1" dev="loop5" ino=1048607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.911093][ T28] audit: type=1400 audit(1743250632.812:221): avc: denied { execute } for pid=789 comm="syz.5.146" path="/6/file1/file1" dev="loop5" ino=1048607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.934380][ T28] audit: type=1400 audit(1743250632.952:222): avc: denied { bind } for pid=786 comm="syz.2.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.995712][ T291] EXT4-fs (loop3): unmounting filesystem. [ 50.025322][ T801] loop3: detected capacity change from 0 to 512 [ 50.052461][ T801] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 50.061395][ T801] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.074827][ T329] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 50.109380][ T291] EXT4-fs (loop3): unmounting filesystem. [ 50.147337][ T810] loop3: detected capacity change from 0 to 512 [ 50.149703][ T19] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 50.169784][ T808] loop2: detected capacity change from 0 to 8192 [ 50.170106][ T810] FAT-fs (loop3): bogus sectors per cluster 69 [ 50.182312][ T810] FAT-fs (loop3): Can't find a valid FAT filesystem [ 50.202627][ T812] loop2: detected capacity change from 0 to 512 [ 50.211210][ T812] EXT4-fs (loop2): 1 truncate cleaned up [ 50.216791][ T812] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 50.230325][ T812] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.158: invalid indirect mapped block 234881024 (level 0) [ 50.250666][ T812] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.158: invalid indirect mapped block 16744704 (level 1) [ 50.281747][ T329] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.292423][ T329] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 50.303664][ T295] EXT4-fs (loop2): unmounting filesystem. [ 50.313084][ T329] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 50.331413][ T329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 50.340815][ T329] usb 2-1: SerialNumber: syz [ 50.340892][ T19] usb 6-1: config 1 has too many interfaces: 35, using maximum allowed: 32 [ 50.356268][ T19] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.367602][ T19] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 35 [ 50.378307][ T19] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 50.387365][ T19] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.395613][ T19] usb 6-1: Product: syz [ 50.399979][ T19] usb 6-1: Manufacturer: syz [ 50.404432][ T19] usb 6-1: SerialNumber: syz [ 50.514879][ T827] loop2: detected capacity change from 0 to 128 [ 50.827926][ T19] usb 6-1: cannot find UAC_HEADER [ 50.834815][ T329] usb 2-1: 0:2 : does not exist [ 50.854270][ T19] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 50.861778][ T329] usb 2-1: USB disconnect, device number 3 [ 50.881341][ T19] usb 6-1: USB disconnect, device number 3 [ 51.090888][ T351] udevd[351]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 51.164909][ T739] udevd[739]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 51.195272][ T292] EXT4-fs (loop1): unmounting filesystem. [ 51.377571][ T852] loop1: detected capacity change from 0 to 1024 [ 51.408783][ T852] EXT4-fs: Ignoring removed orlov option [ 51.429425][ T852] EXT4-fs: Ignoring removed bh option [ 51.443561][ T856] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 51.466301][ T856] FAT-fs (loop11): unable to read boot sector [ 51.468434][ T852] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 51.521015][ T852] EXT4-fs (loop1): Online resizing not supported with bigalloc [ 51.576774][ T292] EXT4-fs (loop1): unmounting filesystem. [ 52.310753][ T875] loop3: detected capacity change from 0 to 128 [ 52.359779][ T875] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 52.375970][ T877] device pim6reg1 entered promiscuous mode [ 52.382075][ T875] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 52.461261][ T291] EXT4-fs (loop3): unmounting filesystem. [ 53.467387][ T899] loop3: detected capacity change from 0 to 512 [ 53.500355][ T899] EXT4-fs warning (device loop3): ext4_multi_mount_protect:324: fsck is running on the filesystem [ 53.519642][ T899] EXT4-fs warning (device loop3): ext4_multi_mount_protect:324: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 53.554217][ T903] loop5: detected capacity change from 0 to 512 [ 53.869182][ T903] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 53.986322][ T909] tmpfs: Unknown parameter 'usrquota' [ 54.023919][ T909] loop3: detected capacity change from 0 to 512 [ 54.087303][ T909] EXT4-fs: Ignoring removed nobh option [ 54.092919][ T903] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 54.220800][ T909] EXT4-fs error (device loop3): ext4_do_update_inode:5226: inode #3: comm syz.3.193: corrupted inode contents [ 54.233499][ T903] EXT4-fs (loop5): 1 truncate cleaned up [ 54.238969][ T903] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 54.248175][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 54.248191][ T28] audit: type=1400 audit(1743250637.702:243): avc: denied { remove_name } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.292102][ T909] EXT4-fs (loop3): Remounting filesystem read-only [ 54.324932][ T909] EXT4-fs error (device loop3): ext4_dirty_inode:6091: inode #3: comm syz.3.193: mark_inode_dirty error [ 54.366698][ T909] EXT4-fs (loop3): Remounting filesystem read-only [ 54.380810][ T28] audit: type=1400 audit(1743250637.702:244): avc: denied { rename } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 54.410550][ T917] SELinux: failed to load policy [ 54.426054][ T909] EXT4-fs error (device loop3): ext4_do_update_inode:5226: inode #3: comm syz.3.193: corrupted inode contents [ 54.465503][ T28] audit: type=1400 audit(1743250637.702:245): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 54.486667][ T28] audit: type=1400 audit(1743250637.872:246): avc: denied { load_policy } for pid=916 comm="syz.2.194" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 54.507067][ T909] EXT4-fs (loop3): Remounting filesystem read-only [ 54.513668][ T909] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.193: mark_inode_dirty error [ 54.529403][ T909] EXT4-fs (loop3): Remounting filesystem read-only [ 54.550647][ T924] device lo entered promiscuous mode [ 54.561699][ T631] EXT4-fs (loop5): unmounting filesystem. [ 54.569890][ T924] device lo left promiscuous mode [ 54.575039][ T909] Quota error (device loop3): write_blk: dquota write failed [ 54.585130][ T922] device pim6reg1 entered promiscuous mode [ 54.609725][ T909] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 54.698152][ T909] EXT4-fs error (device loop3): ext4_acquire_dquot:6782: comm syz.3.193: Failed to acquire dquot type 0 [ 54.780257][ T909] EXT4-fs (loop3): Remounting filesystem read-only [ 54.794855][ T909] EXT4-fs error (device loop3): ext4_do_update_inode:5226: inode #16: comm syz.3.193: corrupted inode contents [ 54.882033][ T909] EXT4-fs (loop3): Remounting filesystem read-only [ 54.895974][ T909] EXT4-fs error (device loop3): ext4_dirty_inode:6091: inode #16: comm syz.3.193: mark_inode_dirty error [ 54.904600][ T935] loop1: detected capacity change from 0 to 512 [ 54.922856][ T909] EXT4-fs (loop3): Remounting filesystem read-only [ 54.932465][ T937] netlink: 36 bytes leftover after parsing attributes in process `syz.5.200'. [ 54.944610][ T935] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 54.952464][ T909] EXT4-fs error (device loop3): ext4_do_update_inode:5226: inode #16: comm syz.3.193: corrupted inode contents [ 54.978828][ T909] EXT4-fs (loop3): Remounting filesystem read-only [ 54.996869][ T937] netlink: 156 bytes leftover after parsing attributes in process `syz.5.200'. [ 55.006472][ T909] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.193: mark_inode_dirty error [ 55.020924][ T935] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.199: bad orphan inode 131083 [ 55.030260][ T937] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 55.047563][ T909] EXT4-fs (loop3): Remounting filesystem read-only [ 55.057590][ T909] EXT4-fs error (device loop3): ext4_do_update_inode:5226: inode #16: comm syz.3.193: corrupted inode contents [ 55.070161][ T909] EXT4-fs (loop3): Remounting filesystem read-only [ 55.076825][ T909] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 55.086160][ T909] EXT4-fs (loop3): Remounting filesystem read-only [ 55.094895][ T935] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 55.095341][ T909] EXT4-fs error (device loop3): ext4_do_update_inode:5226: inode #16: comm syz.3.193: corrupted inode contents [ 55.115474][ T909] EXT4-fs (loop3): Remounting filesystem read-only [ 55.121910][ T909] EXT4-fs error (device loop3): ext4_truncate:4313: inode #16: comm syz.3.193: mark_inode_dirty error [ 55.133453][ T909] EXT4-fs (loop3): Remounting filesystem read-only [ 55.140043][ T909] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 55.149473][ T909] EXT4-fs (loop3): Remounting filesystem read-only [ 55.156620][ T909] EXT4-fs (loop3): 1 truncate cleaned up [ 55.162250][ T909] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 55.171336][ T909] ext4 filesystem being mounted at /36/file1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.399624][ T935] loop1: detected capacity change from 512 to 64 [ 55.430904][ T291] EXT4-fs (loop3): unmounting filesystem. [ 55.457070][ T942] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #12: comm syz.1.199: corrupted in-inode xattr [ 55.897052][ T950] loop3: detected capacity change from 0 to 256 [ 56.100641][ T950] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 56.112774][ T292] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /33/bus: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33619980, rec_len=46, size=1024 fake=0 [ 56.170123][ T950] exFAT-fs (loop3): hint_cluster is invalid (17) [ 56.194309][ T953] kvm [952]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x80b [ 56.238405][ T953] kvm [952]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xc [ 56.276224][ T953] kvm [952]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x54 [ 56.356868][ T953] kvm [952]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xa2 [ 56.357515][ T925] EXT4-fs (loop1): unmounting filesystem. [ 56.375892][ T953] kvm [952]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x951 [ 56.438918][ T28] audit: type=1400 audit(1743250639.892:247): avc: denied { connect } for pid=958 comm="syz.3.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.664032][ T28] audit: type=1400 audit(1743250640.122:248): avc: denied { sqpoll } for pid=963 comm="syz.4.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 56.770460][ T953] kvm [952]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x234 [ 56.857532][ T953] kvm [952]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x246 [ 56.894555][ T953] kvm [952]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0xa47 [ 56.940240][ T953] kvm [952]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xa63, nop [ 57.071674][ T972] loop2: detected capacity change from 0 to 128 [ 57.096056][ T972] FAT-fs (loop2): bogus number of reserved sectors [ 57.111891][ T972] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 57.138959][ T975] loop3: detected capacity change from 0 to 512 [ 57.141354][ T972] FAT-fs (loop2): Can't find a valid FAT filesystem [ 57.179913][ T975] EXT4-fs: Ignoring removed oldalloc option [ 57.185836][ T975] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.480500][ T975] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.572382][ T28] audit: type=1400 audit(1743250640.972:249): avc: denied { create } for pid=970 comm="syz.2.211" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:fusefs_t tclass=chr_file permissive=1 [ 57.617331][ T989] loop4: detected capacity change from 0 to 16 [ 57.640184][ T975] EXT4-fs (loop3): orphan cleanup on readonly fs [ 57.667007][ T989] erofs: (device loop4): mounted with root inode @ nid 36. [ 57.690233][ T975] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 57.800107][ T978] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.806972][ T978] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.819685][ T975] EXT4-fs error (device loop3): ext4_acquire_dquot:6782: comm syz.3.214: Failed to acquire dquot type 1 [ 58.151992][ T978] device bridge_slave_0 entered promiscuous mode [ 58.168693][ T978] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.178706][ T978] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.189183][ T975] EXT4-fs (loop3): 1 truncate cleaned up [ 58.195936][ T999] loop4: detected capacity change from 0 to 256 [ 58.216946][ T978] device bridge_slave_1 entered promiscuous mode [ 58.232100][ T343] device bridge_slave_1 left promiscuous mode [ 58.239836][ T343] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.276942][ T343] device bridge_slave_0 left promiscuous mode [ 58.302489][ T343] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.379018][ T975] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 58.388591][ T343] device veth1_macvtap left promiscuous mode [ 58.396675][ T343] device veth0_vlan left promiscuous mode [ 58.422663][ T983] loop5: detected capacity change from 0 to 8192 [ 58.857991][ T291] EXT4-fs (loop3): unmounting filesystem. [ 59.499662][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 59.499681][ T28] audit: type=1400 audit(1743250642.942:250): avc: denied { read } for pid=1016 comm="syz.2.224" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.554060][ T1022] loop2: detected capacity change from 0 to 512 [ 59.633181][ T1025] loop4: detected capacity change from 0 to 512 [ 59.654856][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.671173][ T1025] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.681183][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.690636][ T1022] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 59.702728][ T1022] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.744924][ T1025] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.226: invalid block [ 59.761415][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.863874][ T1022] EXT4-fs (loop2): shut down requested (1) [ 59.870025][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.878264][ T1025] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.226: invalid indirect mapped block 10 (level 1) [ 59.901862][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.908725][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.233268][ T1025] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.226: invalid indirect mapped block 8 (level 1) [ 60.246879][ T1025] EXT4-fs (loop4): 1 truncate cleaned up [ 60.252788][ T1025] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 60.289263][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.301253][ T28] audit: type=1400 audit(1743250643.762:251): avc: denied { write } for pid=1023 comm="syz.4.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 60.322341][ T1025] netlink: 72 bytes leftover after parsing attributes in process `syz.4.226'. [ 60.330217][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.339014][ T28] audit: type=1400 audit(1743250643.782:252): avc: denied { nlmsg_write } for pid=1023 comm="syz.4.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 60.359496][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.366477][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.374016][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.382045][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.402405][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.420029][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.435361][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.448386][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.474400][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.478745][ T1034] xt_CT: You must specify a L4 protocol and not use inversions on it [ 60.490354][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.498533][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.510101][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.531529][ T978] device veth0_vlan entered promiscuous mode [ 60.538980][ T1037] ÿ: renamed from bond_slave_0 [ 60.559097][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.567357][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.576463][ T295] EXT4-fs (loop2): unmounting filesystem. [ 60.578050][ T978] device veth1_macvtap entered promiscuous mode [ 60.619112][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.627026][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.635680][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.644080][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.653517][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.719938][ T293] EXT4-fs (loop4): unmounting filesystem. [ 62.908132][ T1060] loop3: detected capacity change from 0 to 512 [ 62.931982][ T1060] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 62.940951][ T1060] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.009115][ T291] EXT4-fs (loop3): unmounting filesystem. [ 63.039662][ T203] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 63.059372][ T1072] netlink: 148 bytes leftover after parsing attributes in process `syz.3.236'. [ 63.074197][ T1070] loop2: detected capacity change from 0 to 2048 [ 63.133658][ T1070] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 63.230716][ T203] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 63.246041][ T28] audit: type=1400 audit(1743250646.702:253): avc: denied { map } for pid=1066 comm="syz.2.235" path="/54/file0/hugetlb.2MB.usage_in_bytes" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 63.277948][ T203] usb 6-1: config 1 has no interface number 1 [ 63.298351][ T1070] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.235: bg 0: block 234: padding at end of block bitmap is not set [ 63.315800][ T203] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 63.342542][ T203] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 63.353404][ T203] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.354398][ T1070] EXT4-fs (loop2): Remounting filesystem read-only [ 63.369239][ T203] usb 6-1: Product: syz [ 63.379615][ T203] usb 6-1: Manufacturer: syz [ 63.384052][ T203] usb 6-1: SerialNumber: syz [ 63.390449][ T1081] SELinux: failed to load policy [ 63.468455][ T295] EXT4-fs (loop2): unmounting filesystem. [ 63.527484][ T203] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 63.548799][ T203] usb 6-1: failed to enable PITCH for EP 0x82 [ 63.588789][ T203] usb 6-1: USB disconnect, device number 4 [ 63.755104][ T28] audit: type=1400 audit(1743250647.212:254): avc: denied { unmount } for pid=978 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 65.809457][ T1115] loop2: detected capacity change from 0 to 256 [ 65.817556][ T1112] loop6: detected capacity change from 0 to 128 [ 65.824346][ T1112] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 65.938452][ T1120] netlink: 'syz.3.253': attribute type 12 has an invalid length. [ 65.958757][ T1120] netlink: 'syz.3.253': attribute type 29 has an invalid length. [ 65.966838][ T1120] netlink: 148 bytes leftover after parsing attributes in process `syz.3.253'. [ 65.978506][ T1120] netlink: 51 bytes leftover after parsing attributes in process `syz.3.253'. [ 66.005748][ T1122] loop5: detected capacity change from 0 to 512 [ 66.064397][ T1115] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 66.104778][ T28] audit: type=1400 audit(1743250649.562:255): avc: denied { read write } for pid=1124 comm="syz.4.256" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 66.121969][ T1115] netlink: 44 bytes leftover after parsing attributes in process `syz.2.251'. [ 66.128463][ T28] audit: type=1400 audit(1743250649.562:256): avc: denied { getopt } for pid=1127 comm="syz.3.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.154850][ T1115] netlink: 'syz.2.251': attribute type 6 has an invalid length. [ 66.166434][ T1122] EXT4-fs error (device loop5): ext4_do_update_inode:5226: inode #3: comm syz.5.255: corrupted inode contents [ 66.181832][ T1115] netlink: 'syz.2.251': attribute type 5 has an invalid length. [ 66.184020][ T28] audit: type=1400 audit(1743250649.592:257): avc: denied { open } for pid=1124 comm="syz.4.256" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 66.189969][ T1122] EXT4-fs error (device loop5): ext4_dirty_inode:6091: inode #3: comm syz.5.255: mark_inode_dirty error [ 66.213054][ T1131] SELinux: failed to load policy [ 66.227728][ T1115] netlink: 'syz.2.251': attribute type 4 has an invalid length. [ 66.236270][ T1122] EXT4-fs error (device loop5): ext4_do_update_inode:5226: inode #3: comm syz.5.255: corrupted inode contents [ 66.250603][ T1122] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #3: comm syz.5.255: mark_inode_dirty error [ 66.271628][ T1137] loop2: detected capacity change from 0 to 512 [ 66.273509][ T1122] Quota error (device loop5): write_blk: dquota write failed [ 66.286218][ T1138] loop4: detected capacity change from 0 to 128 [ 66.295786][ T1138] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 66.301599][ T1122] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 66.317531][ T1122] EXT4-fs error (device loop5): ext4_acquire_dquot:6782: comm syz.5.255: Failed to acquire dquot type 0 [ 66.324811][ T1138] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 66.337231][ T1122] EXT4-fs (loop5): 1 orphan inode deleted [ 66.341153][ T1137] EXT4-fs (loop2): 1 orphan inode deleted [ 66.343761][ T1122] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 66.349960][ T343] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 66.358228][ T1122] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.367662][ T1137] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 66.386607][ T343] EXT4-fs error (device loop5): ext4_release_dquot:6805: comm kworker/u4:4: Failed to release dquot type 1 [ 66.398852][ T1137] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.409236][ T343] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 66.451742][ T343] EXT4-fs error (device loop2): ext4_release_dquot:6805: comm kworker/u4:4: Failed to release dquot type 1 [ 66.520966][ T631] EXT4-fs (loop5): unmounting filesystem. [ 66.628976][ T295] EXT4-fs (loop2): unmounting filesystem. [ 66.671357][ T1153] 9pnet_fd: Insufficient options for proto=fd [ 67.055917][ T1163] netlink: 'syz.2.269': attribute type 7 has an invalid length. [ 67.063781][ T1163] netlink: 'syz.2.269': attribute type 8 has an invalid length. [ 67.071562][ T1163] netlink: 'syz.2.269': attribute type 13 has an invalid length. [ 67.419619][ T503] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 67.468071][ T1177] loop4: detected capacity change from 0 to 4096 [ 67.502652][ T1181] netlink: 16 bytes leftover after parsing attributes in process `syz.3.275'. [ 67.522367][ T1177] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 67.605585][ T1177] SELinux: Context system_u:object_r:dhcpc_state_t:s0 is not valid (left unmapped). [ 67.625383][ T28] audit: type=1400 audit(1743250651.082:258): avc: denied { relabelto } for pid=1176 comm="syz.4.274" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:dhcpc_state_t:s0" [ 67.639375][ T1186] loop3: detected capacity change from 0 to 1024 [ 67.654334][ T503] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.895863][ T503] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.138718][ T1191] loop3: detected capacity change from 0 to 512 [ 68.148485][ T1193] loop2: detected capacity change from 0 to 512 [ 68.160997][ T293] EXT4-fs (loop4): unmounting filesystem. [ 68.169641][ T503] usb 7-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 68.202113][ T1193] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.229824][ T503] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.238977][ T1191] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 68.248641][ T1191] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.271764][ T1193] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 68.281303][ T1193] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.292254][ T503] usb 7-1: config 0 descriptor?? [ 68.379610][ T28] audit: type=1400 audit(1743250651.822:259): avc: denied { append } for pid=1192 comm="syz.2.278" name="loop2" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.442681][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 68.455738][ T28] audit: type=1400 audit(1743250651.912:260): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 68.477673][ T1202] device bridge_slave_0 left promiscuous mode [ 68.484066][ T1202] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.492755][ T1202] device bridge_slave_1 left promiscuous mode [ 68.501700][ T1202] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.665625][ T291] EXT4-fs (loop3): unmounting filesystem. [ 68.680276][ T1193] loop2: detected capacity change from 512 to 64 [ 68.700466][ T1207] loop3: detected capacity change from 0 to 256 [ 68.713197][ T503] logitech 0003:046D:C293.0003: unbalanced collection at end of report description [ 68.713372][ T295] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5887: Out of memory [ 68.733133][ T1207] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x1782a9fb, utbl_chksum : 0xe619d30d) [ 68.735586][ T503] logitech 0003:046D:C293.0003: parse failed [ 68.745280][ T295] EXT4-fs error (device loop2): ext4_dirty_inode:6091: inode #2: comm syz-executor: mark_inode_dirty error [ 68.756212][ T503] logitech: probe of 0003:046D:C293.0003 failed with error -22 [ 68.770605][ T295] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5887: Out of memory [ 68.782008][ T295] EXT4-fs error (device loop2): ext4_rmdir:3258: inode #2: comm syz-executor: mark_inode_dirty error [ 68.892714][ T295] EXT4-fs (loop2): unmounting filesystem. [ 68.982349][ T503] usb 7-1: USB disconnect, device number 2 [ 69.415469][ T1223] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.422477][ T1223] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.430190][ T1223] device bridge_slave_0 entered promiscuous mode [ 69.437352][ T1223] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.452616][ T1223] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.466684][ T1223] device bridge_slave_1 entered promiscuous mode [ 70.897926][ T1237] loop4: detected capacity change from 0 to 512 [ 70.993868][ T1239] loop5: detected capacity change from 0 to 512 [ 71.016145][ T1237] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.315674][ T1237] EXT4-fs (loop4): orphan cleanup on readonly fs [ 72.320529][ T1239] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 72.322092][ T1237] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 72.338837][ T1237] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 72.347787][ T1237] EXT4-fs (loop4): 1 truncate cleaned up [ 72.353533][ T1237] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 72.357235][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 72.357252][ T28] audit: type=1400 audit(1743250655.812:265): avc: denied { mount } for pid=1238 comm="syz.5.293" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 72.395153][ T1239] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.398682][ T1259] loop6: detected capacity change from 0 to 2048 [ 72.405883][ T637] device bridge_slave_1 left promiscuous mode [ 72.422403][ T293] EXT4-fs (loop4): unmounting filesystem. [ 72.429007][ T637] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.445682][ T637] device bridge_slave_0 left promiscuous mode [ 72.460502][ T1259] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 72.470562][ T637] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.507816][ T637] device veth1_macvtap left promiscuous mode [ 72.518232][ T631] EXT4-fs (loop5): unmounting filesystem. [ 72.527310][ T637] device veth0_vlan left promiscuous mode [ 72.670276][ T1259] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.295: bg 0: block 234: padding at end of block bitmap is not set [ 72.685410][ T1259] EXT4-fs (loop6): Remounting filesystem read-only [ 72.792022][ T1272] loop4: detected capacity change from 0 to 512 [ 72.798371][ T1272] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.823474][ T1272] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 72.832078][ T1272] EXT4-fs (loop4): orphan cleanup on readonly fs [ 72.838922][ T1272] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 72.849089][ T1272] EXT4-fs warning (device loop4): ext4_enable_quotas:7017: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 72.863618][ T1272] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 72.872962][ T1272] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.297: bg 0: block 40: padding at end of block bitmap is not set [ 72.887738][ T1272] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 72.897570][ T1272] EXT4-fs (loop4): 1 truncate cleaned up [ 72.903158][ T1272] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 72.918674][ T1272] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #16: comm syz.4.297: corrupted xattr block 31 [ 72.931475][ T1272] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 72.940334][ T1272] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #16: comm syz.4.297: corrupted xattr block 31 [ 72.952892][ T1272] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 72.962020][ T1272] EXT4-fs error (device loop4): ext4_get_link:104: inode #16: comm syz.4.297: bad symlink. [ 72.977914][ T28] audit: type=1400 audit(1743250656.432:266): avc: denied { read } for pid=1261 comm="syz.4.297" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 73.092108][ T28] audit: type=1400 audit(1743250656.442:267): avc: denied { write } for pid=1261 comm="syz.4.297" name="ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 73.162639][ T1281] loop5: detected capacity change from 0 to 512 [ 73.200886][ T1281] EXT4-fs warning (device loop5): ext4_multi_mount_protect:324: fsck is running on the filesystem [ 73.213294][ T1281] EXT4-fs warning (device loop5): ext4_multi_mount_protect:324: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 73.441145][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.448841][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.745065][ T978] EXT4-fs (loop6): unmounting filesystem. [ 73.769113][ T293] EXT4-fs (loop4): unmounting filesystem. [ 74.124916][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.141166][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.149294][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.156205][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.170248][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.178082][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.186503][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.195127][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.202023][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.235876][ T1223] device veth0_vlan entered promiscuous mode [ 74.249154][ T1223] device veth1_macvtap entered promiscuous mode [ 74.260842][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.269834][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.277916][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.288334][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.296724][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.305511][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.314107][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.322204][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.330561][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.338733][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.347483][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.361146][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.368564][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.397521][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.406748][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.416137][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.431598][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.373697][ T1309] loop5: detected capacity change from 0 to 512 [ 75.398849][ T1314] loop3: detected capacity change from 0 to 128 [ 75.411605][ T1301] loop4: detected capacity change from 0 to 8192 [ 75.420097][ T1309] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 75.428955][ T1309] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 75.564625][ T1314] FAT-fs (loop3): bogus number of reserved sectors [ 75.603179][ T1314] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 75.939435][ T1314] FAT-fs (loop3): Can't find a valid FAT filesystem [ 77.098455][ T28] audit: type=1400 audit(1743250659.722:268): avc: denied { write } for pid=1300 comm="syz.4.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 77.187949][ T28] audit: type=1400 audit(1743250660.612:269): avc: denied { bind } for pid=1318 comm="syz.7.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 77.329872][ T1326] loop7: detected capacity change from 0 to 512 [ 77.343258][ T1326] journal_path: Lookup failure for './file0' [ 77.349295][ T1326] EXT4-fs: error: could not find journal device path [ 77.744479][ T1335] loop6: detected capacity change from 0 to 128 [ 77.789636][ T28] audit: type=1400 audit(1743250661.122:270): avc: denied { ioctl } for pid=1331 comm="syz.3.316" path="socket:[19737]" dev="sockfs" ino=19737 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 77.891125][ T1335] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 77.909703][ T1335] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 78.076048][ T978] EXT4-fs (loop6): unmounting filesystem. [ 79.036438][ T1358] loop5: detected capacity change from 0 to 512 [ 79.051154][ T1358] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8806e01c, mo2=0002] [ 79.058209][ T1362] netlink: 'syz.7.325': attribute type 30 has an invalid length. [ 79.059705][ T1358] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.313: Directory hole found for htree index block 0 [ 79.079680][ T1358] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117 [ 79.109678][ T1358] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.313: Directory hole found for htree index block 0 [ 79.129644][ T1358] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 79.137748][ T1358] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 79.169355][ T1358] kvm: pic: level sensitive irq not supported [ 79.170486][ T1358] kvm: pic: level sensitive irq not supported [ 79.176503][ T1358] kvm: pic: single mode not supported [ 79.182429][ T1358] kvm: pic: single mode not supported [ 79.187626][ T1358] kvm: pic: level sensitive irq not supported [ 79.193355][ T1358] kvm: pic: single mode not supported [ 79.194726][ T1366] loop7: detected capacity change from 0 to 128 [ 79.199499][ T1358] kvm: pic: level sensitive irq not supported [ 79.199692][ T1358] kvm: pic: single mode not supported [ 79.216781][ T1358] kvm: pic: level sensitive irq not supported [ 79.222265][ T1358] kvm: pic: single mode not supported [ 79.228246][ T1358] kvm: pic: level sensitive irq not supported [ 79.233621][ T1358] kvm: pic: single mode not supported [ 79.239518][ T1358] kvm: pic: level sensitive irq not supported [ 79.244889][ T1358] kvm: pic: single mode not supported [ 79.250977][ T1358] kvm: pic: level sensitive irq not supported [ 79.256369][ T1358] kvm: pic: single mode not supported [ 79.262202][ T1358] kvm: pic: level sensitive irq not supported [ 79.267617][ T1358] kvm: pic: single mode not supported [ 79.273610][ T1358] kvm: pic: level sensitive irq not supported [ 79.278885][ T1358] kvm: pic: single mode not supported [ 79.287077][ T1366] FAT-fs (loop7): bogus number of reserved sectors [ 79.298834][ T1366] FAT-fs (loop7): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 79.308269][ T1366] FAT-fs (loop7): Can't find a valid FAT filesystem [ 79.331072][ T314] device bridge_slave_1 left promiscuous mode [ 79.338225][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.345955][ T314] device bridge_slave_0 left promiscuous mode [ 79.359754][ T314] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.371297][ T314] device veth1_macvtap left promiscuous mode [ 79.425242][ T351] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 79.435227][ T631] EXT4-fs (loop5): unmounting filesystem. [ 79.454651][ T314] device veth0_vlan left promiscuous mode [ 79.794831][ T1374] loop5: detected capacity change from 0 to 1024 [ 79.802761][ T1376] loop6: detected capacity change from 0 to 1024 [ 79.855229][ T1376] EXT4-fs: Ignoring removed i_version option [ 79.889246][ T1374] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 79.906651][ T1376] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 79.945414][ T28] audit: type=1400 audit(1743250663.402:271): avc: denied { append } for pid=1371 comm="syz.5.329" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.986171][ T1376] EXT4-fs (loop6): Test dummy encryption mode enabled [ 80.061165][ T631] EXT4-fs (loop5): unmounting filesystem. [ 80.069531][ T1376] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 80.145275][ T1385] loop5: detected capacity change from 0 to 128 [ 80.155711][ T978] EXT4-fs (loop6): unmounting filesystem. [ 80.447308][ T1400] loop5: detected capacity change from 0 to 128 [ 80.527963][ T1375] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.530036][ T1400] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 80.534940][ T1375] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.551552][ T1375] device bridge_slave_0 entered promiscuous mode [ 80.558468][ T1375] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.562859][ T1405] loop7: detected capacity change from 0 to 512 [ 80.565726][ T1375] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.617355][ T1375] device bridge_slave_1 entered promiscuous mode [ 80.727905][ T1405] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 80.900565][ T1405] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 80.916124][ T1405] System zones: 1-12 [ 80.945317][ T1405] EXT4-fs (loop7): orphan cleanup on readonly fs [ 80.960842][ T1405] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.340: invalid indirect mapped block 12 (level 1) [ 80.970402][ T332] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 80.974487][ T1405] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.340: invalid indirect mapped block 2 (level 2) [ 80.994506][ T1405] EXT4-fs (loop7): 1 truncate cleaned up [ 81.000011][ T1405] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 81.045476][ T1223] EXT4-fs (loop7): unmounting filesystem. [ 81.091595][ T1375] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.098653][ T1375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.105791][ T1375] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.112680][ T1375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.147484][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.156697][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.164339][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.173553][ T332] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.193328][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.201325][ T332] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.211469][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.218321][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.225799][ T332] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 81.239189][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.247052][ T332] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 81.251448][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.256304][ T332] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.262725][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.320897][ T332] usb 7-1: config 0 descriptor?? [ 81.332186][ T1375] device veth0_vlan entered promiscuous mode [ 81.350033][ T368] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 81.398159][ T28] audit: type=1326 audit(1743250664.852:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1422 comm="syz.5.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d06d8d169 code=0x7ffc0000 [ 81.410014][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.430380][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.438646][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.447036][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.450305][ T28] audit: type=1326 audit(1743250664.892:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1422 comm="syz.5.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2d06d8d169 code=0x7ffc0000 [ 81.455076][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.486415][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.496677][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.505532][ T28] audit: type=1326 audit(1743250664.892:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1422 comm="syz.5.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2d06d8d1a3 code=0x7ffc0000 [ 81.505844][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.547548][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.558112][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.560703][ T368] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.578424][ T368] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.581199][ T28] audit: type=1326 audit(1743250665.042:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1422 comm="syz.5.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2d06d8bc1f code=0x7ffc0000 [ 81.613290][ T368] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 81.639961][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.645837][ T368] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 81.661556][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.669436][ T368] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.677693][ T368] usb 8-1: Product: syz [ 81.686983][ T1375] device veth1_macvtap entered promiscuous mode [ 81.693433][ T368] usb 8-1: Manufacturer: syz [ 81.700588][ T368] usb 8-1: SerialNumber: syz [ 81.718206][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.732267][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.741259][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.751111][ T28] audit: type=1326 audit(1743250665.212:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1422 comm="syz.5.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f2d06d8d1f7 code=0x7ffc0000 [ 81.754349][ T1423] loop5: detected capacity change from 0 to 32768 [ 81.781351][ T28] audit: type=1326 audit(1743250665.212:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1422 comm="syz.5.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2d06d8bad0 code=0x7ffc0000 [ 81.783241][ T332] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 81.812654][ T28] audit: type=1326 audit(1743250665.212:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1422 comm="syz.5.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2d06d8cd6b code=0x7ffc0000 [ 81.820169][ T332] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 81.851864][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.862198][ T28] audit: type=1326 audit(1743250665.282:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1422 comm="syz.5.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2d06d8bdca code=0x7ffc0000 [ 81.875051][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.930267][ T1416] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 82.503474][ T1441] device pim6reg1 entered promiscuous mode [ 82.928046][ T1449] loop5: detected capacity change from 0 to 512 [ 82.941622][ T1446] usb 7-1: language id specifier not provided by device, defaulting to English [ 82.975858][ T1449] ext4: Unknown parameter 'noacl' [ 83.056702][ T1453] loop4: detected capacity change from 0 to 128 [ 83.094086][ T1453] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 83.107102][ T1453] ext4 filesystem being mounted at /71/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 83.118333][ T368] cdc_ncm 8-1:1.0: bind() failure [ 83.127939][ T368] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 83.142901][ T368] cdc_ncm 8-1:1.1: bind() failure [ 83.154641][ T1449] netlink: 88 bytes leftover after parsing attributes in process `syz.5.352'. [ 83.182899][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 83.182930][ T28] audit: type=1400 audit(1743250666.642:293): avc: denied { create } for pid=1452 comm="syz.4.354" name="encrypted_dir" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 83.195572][ T1449] netlink: 8 bytes leftover after parsing attributes in process `syz.5.352'. [ 83.216241][ T368] usb 8-1: USB disconnect, device number 2 [ 83.345507][ T293] EXT4-fs (loop4): unmounting filesystem. [ 83.353615][ T1459] loop5: detected capacity change from 0 to 512 [ 83.379904][ T1459] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 83.407129][ T1459] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802e128, mo2=0002] [ 83.417164][ T1459] System zones: 1-12 [ 83.421734][ T1459] EXT4-fs (loop5): orphan cleanup on readonly fs [ 83.833919][ T1459] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.356: bg 0: block 361: padding at end of block bitmap is not set [ 84.072857][ T1459] EXT4-fs (loop5): Remounting filesystem read-only [ 84.384041][ T1459] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 84.397190][ T28] audit: type=1400 audit(1743250667.852:294): avc: denied { audit_write } for pid=1468 comm="syz.7.358" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 84.436141][ T1459] EXT4-fs (loop5): Remounting filesystem read-only [ 84.465948][ T1459] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #11: comm syz.5.356: attempt to clear invalid blocks 33619980 len 1 [ 84.479306][ T28] audit: type=1400 audit(1743250667.922:295): avc: denied { connect } for pid=1472 comm="syz.6.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 84.509797][ T1459] EXT4-fs (loop5): Remounting filesystem read-only [ 84.523214][ T1480] loop4: detected capacity change from 0 to 512 [ 84.530623][ T1481] loop7: detected capacity change from 0 to 512 [ 84.545358][ T1459] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.356: invalid indirect mapped block 1811939328 (level 0) [ 84.549993][ T1483] loop6: detected capacity change from 0 to 512 [ 84.574019][ T1459] EXT4-fs (loop5): Remounting filesystem read-only [ 84.581848][ T1481] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8806e01c, mo2=0002] [ 84.589622][ T1459] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.356: invalid indirect mapped block 2 (level 2) [ 84.613582][ T1481] EXT4-fs error (device loop7): dx_probe:823: inode #2: comm syz.7.364: Directory hole found for htree index block 0 [ 84.626485][ T1459] EXT4-fs (loop5): Remounting filesystem read-only [ 84.627471][ T1480] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 84.641953][ T1459] EXT4-fs (loop5): 1 truncate cleaned up [ 84.647419][ T1459] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 84.656007][ T6] usb 7-1: USB disconnect, device number 3 [ 84.657183][ T1480] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.662588][ T1481] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -117 [ 84.671950][ T368] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 84.680230][ T1483] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 84.704402][ T1481] EXT4-fs error (device loop7): dx_probe:823: inode #2: comm syz.7.364: Directory hole found for htree index block 0 [ 84.716840][ T1483] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.767610][ T1481] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 84.777524][ T28] audit: type=1400 audit(1743250668.222:296): avc: denied { setattr } for pid=1482 comm="syz.6.365" path="/19/file0" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.778051][ T1481] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 84.813448][ T631] EXT4-fs (loop5): unmounting filesystem. [ 84.879754][ T368] usb 9-1: Using ep0 maxpacket: 32 [ 84.946734][ T978] EXT4-fs (loop6): unmounting filesystem. [ 84.954661][ T1491] loop5: detected capacity change from 0 to 512 [ 84.955872][ T28] audit: type=1400 audit(1743250668.412:297): avc: denied { read } for pid=1470 comm="syz.8.359" name="loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 84.995219][ T1491] EXT4-fs: Ignoring removed orlov option [ 85.044830][ T28] audit: type=1400 audit(1743250668.452:298): avc: denied { open } for pid=1470 comm="syz.8.359" path="/dev/loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 85.080312][ T368] usb 9-1: unable to get BOS descriptor or descriptor too short [ 85.084500][ T1491] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.366: casefold flag without casefold feature [ 85.093037][ T368] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 85.108180][ T368] usb 9-1: can't read configurations, error -71 [ 85.136579][ T1491] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.366: couldn't read orphan inode 15 (err -117) [ 85.152779][ T293] EXT4-fs (loop4): unmounting filesystem. [ 85.153408][ T1497] loop6: detected capacity change from 0 to 1024 [ 85.164590][ T1491] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 85.197339][ T1223] EXT4-fs (loop7): unmounting filesystem. [ 85.204453][ T1497] EXT4-fs error (device loop6): ext4_ext_check_inode:520: inode #11: comm syz.6.367: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 85.290644][ T1497] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.367: couldn't read orphan inode 11 (err -117) [ 85.303090][ T1497] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 85.327241][ T1497] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:477: comm syz.6.367: Invalid block bitmap block 0 in block_group 0 [ 85.332547][ T28] audit: type=1400 audit(1743250668.722:299): avc: denied { write } for pid=1499 comm="syz.4.368" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 85.368146][ T631] EXT4-fs (loop5): unmounting filesystem. [ 85.374783][ T1497] Quota error (device loop6): write_blk: dquota write failed [ 85.382274][ T1497] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 85.392231][ T1497] EXT4-fs error (device loop6): ext4_acquire_dquot:6782: comm syz.6.367: Failed to acquire dquot type 0 [ 85.531504][ T978] EXT4-fs (loop6): unmounting filesystem. [ 85.679348][ T1506] loop5: detected capacity change from 0 to 512 [ 85.753380][ T1506] EXT4-fs: Ignoring removed oldalloc option [ 85.758588][ T637] Quota error (device loop6): do_check_range: Getting block 0 out of range 1-8 [ 85.784471][ T1506] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 85.788359][ T637] EXT4-fs error (device loop6): ext4_release_dquot:6805: comm kworker/u4:5: Failed to release dquot type 0 [ 85.837585][ T1506] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2809: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 85.880926][ T1506] EXT4-fs (loop5): 1 truncate cleaned up [ 85.886578][ T1506] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 86.017343][ T1506] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.370: bg 0: block 255: padding at end of block bitmap is not set [ 86.066335][ T1506] EXT4-fs error (device loop5): ext4_ind_map_blocks:604: inode #15: comm syz.5.370: Can't allocate blocks for non-extent mapped inodes with bigalloc [ 86.415356][ T631] EXT4-fs (loop5): unmounting filesystem. [ 86.436017][ T1526] loop7: detected capacity change from 0 to 512 [ 86.471324][ T1528] loop4: detected capacity change from 0 to 128 [ 86.487164][ T1526] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 86.492352][ T1528] FAT-fs (loop4): Unrecognized mount option "utfcharseB5Œ×¤l`¯"(" or missing value [ 86.518244][ T1526] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.379: invalid indirect mapped block 1 (level 1) [ 86.545483][ T1526] EXT4-fs (loop7): 1 truncate cleaned up [ 86.551681][ T1526] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 86.607707][ T1223] EXT4-fs (loop7): unmounting filesystem. [ 86.629725][ T351] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 87.589655][ T1562] loop6: detected capacity change from 0 to 512 [ 87.596059][ T1562] journal_path: Lookup failure for './file0' [ 87.601919][ T1562] EXT4-fs: error: could not find journal device path [ 87.646491][ T1566] loop5: detected capacity change from 0 to 512 [ 87.653664][ T351] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 88.677920][ T1578] loop4: detected capacity change from 0 to 128 [ 88.774590][ T1566] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 88.788575][ T1566] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.805076][ T740] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 88.824861][ T1566] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 88.896802][ T631] EXT4-fs (loop5): unmounting filesystem. [ 88.897246][ T1427] ================================================================== [ 88.910350][ T1427] BUG: KASAN: use-after-free in kernfs_find_and_get_ns+0x3c/0x110 [ 88.918008][ T1427] Read of size 8 at addr ffff8881303e4580 by task kworker/0:6/1427 [ 88.925710][ T1427] [ 88.927894][ T1427] CPU: 0 PID: 1427 Comm: kworker/0:6 Not tainted 6.1.129-syzkaller-00051-gc1fd50266bd6 #0 [ 88.937703][ T1427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 88.947727][ T1427] Workqueue: events flush_stashed_error_work [ 88.953527][ T1427] Call Trace: [ 88.956649][ T1427] [ 88.959426][ T1427] dump_stack_lvl+0x151/0x1b7 [ 88.963943][ T1427] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 88.969239][ T1427] ? _printk+0xd1/0x111 [ 88.973227][ T1427] ? __virt_addr_valid+0x242/0x2f0 [ 88.978174][ T1427] print_report+0x158/0x4e0 [ 88.982514][ T1427] ? __virt_addr_valid+0x242/0x2f0 [ 88.987561][ T1427] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 88.993663][ T1427] ? kernfs_find_and_get_ns+0x3c/0x110 [ 88.998932][ T1427] kasan_report+0x13c/0x170 [ 89.003266][ T1427] ? kernfs_find_and_get_ns+0x3c/0x110 [ 89.008559][ T1427] __asan_report_load8_noabort+0x14/0x20 [ 89.014025][ T1427] kernfs_find_and_get_ns+0x3c/0x110 [ 89.019147][ T1427] sysfs_notify+0x73/0xd0 [ 89.023316][ T1427] ext4_notify_error_sysfs+0x25/0x30 [ 89.028436][ T1427] flush_stashed_error_work+0x2fe/0x320 [ 89.033815][ T1427] process_one_work+0x73d/0xcb0 [ 89.038589][ T1427] worker_thread+0xa60/0x1260 [ 89.043108][ T1427] kthread+0x26d/0x300 [ 89.047091][ T1427] ? worker_clr_flags+0x1a0/0x1a0 [ 89.051960][ T1427] ? kthread_blkcg+0xd0/0xd0 [ 89.056468][ T1427] ret_from_fork+0x1f/0x30 [ 89.060722][ T1427] [ 89.063580][ T1427] [ 89.065750][ T1427] Allocated by task 1566: [ 89.069922][ T1427] kasan_set_track+0x4b/0x70 [ 89.074343][ T1427] kasan_save_alloc_info+0x1f/0x30 [ 89.079293][ T1427] __kasan_slab_alloc+0x6c/0x80 [ 89.083996][ T1427] slab_post_alloc_hook+0x53/0x2c0 [ 89.088926][ T1427] kmem_cache_alloc+0x175/0x320 [ 89.093713][ T1427] __kernfs_new_node+0xdb/0x700 [ 89.098386][ T1427] kernfs_new_node+0x130/0x230 [ 89.102991][ T1427] kernfs_create_dir_ns+0x44/0x130 [ 89.107969][ T1427] sysfs_create_dir_ns+0x185/0x390 [ 89.112999][ T1427] kobject_add_internal+0x635/0xbf0 [ 89.118049][ T1427] kobject_init_and_add+0x120/0x190 [ 89.123071][ T1427] ext4_register_sysfs+0xbf/0x2c0 [ 89.127930][ T1427] ext4_fill_super+0x796e/0x8450 [ 89.132702][ T1427] get_tree_bdev+0x440/0x680 [ 89.137146][ T1427] ext4_get_tree+0x1c/0x20 [ 89.141377][ T1427] vfs_get_tree+0x88/0x290 [ 89.145631][ T1427] do_new_mount+0x2ba/0xb30 [ 89.150067][ T1427] path_mount+0x671/0x1070 [ 89.154321][ T1427] __se_sys_mount+0x2c4/0x3b0 [ 89.158831][ T1427] __x64_sys_mount+0xbf/0xd0 [ 89.163258][ T1427] x64_sys_call+0x49d/0x9a0 [ 89.167595][ T1427] do_syscall_64+0x3b/0xb0 [ 89.171850][ T1427] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.177580][ T1427] [ 89.179749][ T1427] Freed by task 631: [ 89.183484][ T1427] kasan_set_track+0x4b/0x70 [ 89.187932][ T1427] kasan_save_free_info+0x2b/0x40 [ 89.192770][ T1427] ____kasan_slab_free+0x131/0x180 [ 89.197732][ T1427] __kasan_slab_free+0x11/0x20 [ 89.202325][ T1427] kmem_cache_free+0x291/0x560 [ 89.206927][ T1427] kernfs_put+0x392/0x520 [ 89.211081][ T1427] __kobject_del+0x10f/0x300 [ 89.215505][ T1427] kobject_del+0x45/0x60 [ 89.219592][ T1427] ext4_unregister_sysfs+0x91/0xa0 [ 89.224539][ T1427] ext4_put_super+0x7d/0xd60 [ 89.228961][ T1427] generic_shutdown_super+0x14f/0x370 [ 89.234169][ T1427] kill_block_super+0x7e/0xe0 [ 89.238689][ T1427] deactivate_locked_super+0xad/0x110 [ 89.243891][ T1427] deactivate_super+0xbe/0xf0 [ 89.248442][ T1427] cleanup_mnt+0x485/0x510 [ 89.252656][ T1427] __cleanup_mnt+0x19/0x20 [ 89.256907][ T1427] task_work_run+0x24d/0x2e0 [ 89.261333][ T1427] exit_to_user_mode_loop+0x94/0xa0 [ 89.266374][ T1427] exit_to_user_mode_prepare+0x5a/0xa0 [ 89.271661][ T1427] syscall_exit_to_user_mode+0x26/0x130 [ 89.277041][ T1427] do_syscall_64+0x47/0xb0 [ 89.281301][ T1427] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.287032][ T1427] [ 89.289195][ T1427] The buggy address belongs to the object at ffff8881303e4578 [ 89.289195][ T1427] which belongs to the cache kernfs_node_cache of size 136 [ 89.303602][ T1427] The buggy address is located 8 bytes inside of [ 89.303602][ T1427] 136-byte region [ffff8881303e4578, ffff8881303e4600) [ 89.316536][ T1427] [ 89.318701][ T1427] The buggy address belongs to the physical page: [ 89.324967][ T1427] page:ffffea0004c0f900 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1303e4 [ 89.335024][ T1427] flags: 0x4000000000000200(slab|zone=1) [ 89.340506][ T1427] raw: 4000000000000200 ffffea0004c0a500 dead000000000002 ffff8881002ab500 [ 89.348913][ T1427] raw: 0000000000000000 0000000000140014 00000001ffffffff 0000000000000000 [ 89.357329][ T1427] page dumped because: kasan: bad access detected [ 89.363588][ T1427] page_owner tracks the page as allocated [ 89.369132][ T1427] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 294, tgid 294 (syz-executor), ts 23882127584, free_ts 0 [ 89.386231][ T1427] post_alloc_hook+0x213/0x220 [ 89.390831][ T1427] prep_new_page+0x1b/0x110 [ 89.395167][ T1427] get_page_from_freelist+0x3a98/0x3b10 [ 89.400550][ T1427] __alloc_pages+0x234/0x610 [ 89.405017][ T1427] alloc_slab_page+0x6c/0xf0 [ 89.409400][ T1427] new_slab+0x90/0x3e0 [ 89.413305][ T1427] ___slab_alloc+0x6f9/0xb80 [ 89.417733][ T1427] __slab_alloc+0x5d/0xa0 [ 89.421899][ T1427] kmem_cache_alloc+0x1be/0x320 [ 89.426586][ T1427] __kernfs_new_node+0xdb/0x700 [ 89.431274][ T1427] kernfs_new_node+0x130/0x230 [ 89.435872][ T1427] kernfs_create_dir_ns+0x44/0x130 [ 89.440824][ T1427] internal_create_group+0x2a1/0xed0 [ 89.446373][ T1427] sysfs_create_group+0x1f/0x30 [ 89.451066][ T1427] dpm_sysfs_add+0x72/0x2b0 [ 89.455408][ T1427] device_add+0x6df/0xf10 [ 89.459571][ T1427] page_owner free stack trace missing [ 89.464798][ T1427] [ 89.466945][ T1427] Memory state around the buggy address: [ 89.472508][ T1427] ffff8881303e4480: fc fc fc fc fc fc fa fb fb fb fb fb fb fb fb fb [ 89.480400][ T1427] ffff8881303e4500: fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc fa [ 89.488300][ T1427] >ffff8881303e4580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.496649][ T1427] ^ [ 89.500546][ T1427] ffff8881303e4600: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 89.508520][ T1427] ffff8881303e4680: fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc [ 89.516426][ T1427] ================================================================== [ 89.597380][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 89.597410][ T28] audit: type=1400 audit(1743250673.042:307): avc: denied { create } for pid=1584 comm="syz.7.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 89.832360][ T1598] loop8: detected capacity change from 0 to 512 [ 89.848250][ T1427] Disabling lock debugging due to kernel taint [ 89.854350][ T1427] general protection fault, probably for non-canonical address 0xe0de3c2bc0000058: 0000 [#1] PREEMPT SMP KASAN [ 89.865985][ T1427] KASAN: maybe wild-memory-access in range [0x06f2015e000002c0-0x06f2015e000002c7] [ 89.875100][ T1427] CPU: 0 PID: 1427 Comm: kworker/0:6 Tainted: G B 6.1.129-syzkaller-00051-gc1fd50266bd6 #0 [ 89.886468][ T1427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 89.896368][ T1427] Workqueue: events flush_stashed_error_work [ 89.902177][ T1427] RIP: 0010:kernfs_find_and_get_ns+0x52/0x110 [ 89.908088][ T1427] Code: 08 48 89 f8 48 c1 e8 03 42 80 3c 30 00 74 05 e8 c4 bb d3 ff 49 8b 5d 08 48 85 db 49 0f 44 dd 48 83 c3 50 48 89 d8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 df e8 9f bb d3 ff 4c 8b 33 49 83 c6 60 [ 89.927523][ T1427] RSP: 0018:ffffc90000c37c68 EFLAGS: 00010203 [ 89.933605][ T1427] RAX: 00de402bc0000058 RBX: 06f2015e000002c7 RCX: ffff88811be88000 [ 89.941408][ T1427] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.949305][ T1427] RBP: ffffc90000c37c90 R08: ffffffff8144b443 R09: fffffbfff0f6e8fd [ 89.957115][ T1427] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffff85d4da20 [ 89.964927][ T1427] R13: ffff8881303e4578 R14: dffffc0000000000 R15: 0000000000000000 [ 89.972750][ T1427] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 89.981504][ T1427] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.987923][ T1427] CR2: 000000110c2b08fe CR3: 000000000700f000 CR4: 00000000003506b0 [ 89.996175][ T1427] Call Trace: [ 89.999292][ T1427] [ 90.002073][ T1427] ? __die_body+0x62/0xb0 [ 90.006264][ T1427] ? die_addr+0x9f/0xd0 [ 90.010234][ T1427] ? exc_general_protection+0x317/0x4c0 [ 90.015616][ T1427] ? __kasan_check_write+0x14/0x20 [ 90.020561][ T1427] ? kernfs_find_and_get_ns+0x3c/0x110 [ 90.025856][ T1427] ? asm_exc_general_protection+0x27/0x30 [ 90.031406][ T1427] ? add_taint+0x93/0xe0 [ 90.035493][ T1427] ? kernfs_find_and_get_ns+0x52/0x110 [ 90.040777][ T1427] ? kernfs_find_and_get_ns+0x3c/0x110 [ 90.046074][ T1427] sysfs_notify+0x73/0xd0 [ 90.050238][ T1427] ext4_notify_error_sysfs+0x25/0x30 [ 90.055358][ T1427] flush_stashed_error_work+0x2fe/0x320 [ 90.060741][ T1427] process_one_work+0x73d/0xcb0 [ 90.065430][ T1427] worker_thread+0xa60/0x1260 [ 90.069966][ T1427] kthread+0x26d/0x300 [ 90.073847][ T1427] ? worker_clr_flags+0x1a0/0x1a0 [ 90.078714][ T1427] ? kthread_blkcg+0xd0/0xd0 [ 90.083133][ T1427] ret_from_fork+0x1f/0x30 [ 90.087409][ T1427] [ 90.090253][ T1427] Modules linked in: [ 90.098293][ T1427] ---[ end trace 0000000000000000 ]--- [ 90.103665][ T1427] RIP: 0010:kernfs_find_and_get_ns+0x52/0x110 [ 90.145485][ T1427] Code: 08 48 89 f8 48 c1 e8 03 42 80 3c 30 00 74 05 e8 c4 bb d3 ff 49 8b 5d 08 48 85 db 49 0f 44 dd 48 83 c3 50 48 89 d8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 df e8 9f bb d3 ff 4c 8b 33 49 83 c6 60 [ 90.208478][ T1427] RSP: 0018:ffffc90000c37c68 EFLAGS: 00010203 [ 90.222223][ T1427] RAX: 00de402bc0000058 RBX: 06f2015e000002c7 RCX: ffff88811be88000 [ 90.231428][ T1427] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 90.240972][ T1427] RBP: ffffc90000c37c90 R08: ffffffff8144b443 R09: fffffbfff0f6e8fd [ 90.248903][ T1427] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffff85d4da20 [ 90.256770][ T1427] R13: ffff8881303e4578 R14: dffffc0000000000 R15: 0000000000000000 [ 90.264740][ T1427] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 90.273830][ T1427] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 90.280344][ T1427] CR2: 000000110c2b08fe CR3: 000000010ff42000 CR4: 00000000003506b0 [ 90.288080][ T1427] Kernel panic - not syncing: Fatal exception [ 90.294188][ T1427] Kernel Offset: disabled [ 90.298322][ T1427] Rebooting in 86400 seconds..