last executing test programs: 56.895271218s ago: executing program 1 (id=132): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x1001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000c2, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x2, 0x1}, &(0x7f00000001c0), &(0x7f00000003c0), &(0x7f0000000000)) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x20, 0x27, 0x2, 0x0, 0x0, r4}, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) keyctl$session_to_parent(0x12) 56.061321587s ago: executing program 1 (id=137): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x29, 0x2000000, @void}, 0x10) 55.311945954s ago: executing program 1 (id=139): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x40001, 0x0) fdatasync(0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000000002, 0x180, 0x400000004, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 55.041730261s ago: executing program 1 (id=146): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x100010e, &(0x7f0000000180)={[{@jqfmt_vfsold}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4a}}, {@resgid={'resgid', 0x3d, 0xee01}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@test_dummy_encryption}, {@stripe={'stripe', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@orlov}]}, 0x2, 0x45c, &(0x7f0000000b40)="$eJzs28tvG8UfAPDvrpu++0t+pTz6AAIFEfFImrRAD3AAgcQBJCQu5WiStCp1G9QEiVYRBITKEVXijjhW4i/gBBcEnJC4wh1VqlAuFE5Ga+86tmOnSfNwwJ+PtMnM7mxmvp4de3YnDqBvDWc/koj9EfFrRAzWs60Fhuu/bi/OT/61OD+ZRLX61h9Jrdyfi/OTRdHivH15ZiSNSD9N4miHemevXL1QrlSmL+f5sbmL743NXrn6zPmL5XPT56YvTZw+ferk+PPPTTybHa6uN87/Z2098uHMscOvvX39jckz19/58eukiL8tjg0yvNLBx6vrDmlbOdCUTnb0sCGsSSkisu4aqI3/wSjFUucNxqufdD0x3aIGApummutyeKEK/HftHoxeNwHojeKDPrv/rW83tm7ysQ3ceql+A5TFfjvfYiFqO4tbnIG2+9uNNBwRZxb+/jLbYnOeQwAAtPg2m/883Tz/K+YfadzXVO5/+drQUL6WcjAi7qnuikMRcW9Erez9EfHAGutvXyRZPv9Jb95VYKuUzf9eyNe2GvO/er1FkaFSnjtQi38gOXu+Mn0if01GYmBXlh9foY7vXvnl827Hmud/2ZbVX8wF83bc3LGr9Zyp8lx5PTE3u/VxxJEdneJPGisBSUQcjogjd1nH+SdvHOt27M7xN+xctmcD1pmqX0U8Ue//hWiLv5CsvD45tjsq0yfGiqtiuZ9+vvZmt/rXEP+myPp/b8frvxH/UNKyXruw5pXLa7991vWeZnR11/+LzeNrqrw0IIqL4oPy3Nzl8Yidyev1Rjfvn1g6t8gX5bP4R453Hv8HY+mVOBoR2UX8YEQ8FBEP5333SEQ8GhHHV4j/h5cfe7fbse3Q/1Nt/T/UWqS1/5sSO6N9T+dE6cL337T+xaXk6t7/TtVSI/me1bz/raZdWWJdLx4AAAD8S6QRsT+SdLSRTtPR0fr/8B+KvWllZnbuqbMz71+aqn9HYCgG0uJJ12DT89Dx/La+yE+05U/mz42/KO2p5UcnZypTvQ4e+ty+LuM/83up160DNp3va0H/Mv6hfxn/0L+Mf+hfHcb/nl60A9h6nT7/P+pBO4Ct1zb+LftBH2mM/6S37QC2nud/0L+ax78pAPSN2T1x5y/JS0gsS0S6LZqxMYlkk0fB/l4HuPZEr9+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANsY/AQAA//9couxY") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x2859052, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020) 53.76464571s ago: executing program 1 (id=152): fstat(0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$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") lchown(&(0x7f0000000040)='./file0\x00', r1, 0x0) 53.483085886s ago: executing program 1 (id=154): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r1, 0x0) stat(&(0x7f0000000b40)='./file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_TARGET_NETNSID={0x8}]}, 0x20}}, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 53.460450317s ago: executing program 32 (id=154): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r1, 0x0) stat(&(0x7f0000000b40)='./file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_TARGET_NETNSID={0x8}]}, 0x20}}, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 42.209766394s ago: executing program 0 (id=239): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000440)={[{@user_xattr}, {@grpjquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@oldalloc}, {@user_xattr}, {@journal_dev}], [{@fsmagic={'fsmagic', 0x3d, 0x9}}, {@uid_gt}]}, 0x3, 0x589, &(0x7f00000083c0)="$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") ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000002cc0)={0xb000000}) 41.781471754s ago: executing program 0 (id=241): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) dup2(r1, r0) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, 0x0) 41.710531696s ago: executing program 0 (id=242): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xffffffff}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) 41.631091098s ago: executing program 0 (id=244): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x201899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) unshare(0x22020600) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 41.625503238s ago: executing program 0 (id=245): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0xc}) 41.53174329s ago: executing program 0 (id=248): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031411e4ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 41.53161161s ago: executing program 33 (id=248): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031411e4ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 39.595246154s ago: executing program 2 (id=268): r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000003940), 0x2, 0x0) write$selinux_user(r0, &(0x7f0000003d00)={'system_u:object_r:systemd_passwd_var_run_t:s0', 0x20, 'sysadm_u\x00'}, 0x37) 39.528661015s ago: executing program 2 (id=270): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x44000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bind$netlink(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sigaltstack(&(0x7f0000000180)={&(0x7f0000002880)=""/4118, 0x3, 0x1016}, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) r4 = dup3(r2, r3, 0x80000) ioctl$MON_IOCG_STATS(r4, 0xc0109207, &(0x7f0000000180)) 39.415091388s ago: executing program 2 (id=271): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000180)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x801) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000800) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002200)={'geneve0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net\x00') getdents64(r1, &(0x7f0000002540)=""/4096, 0x1000) 39.383594889s ago: executing program 2 (id=272): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) r4 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000640), 0x0, 0x47c, &(0x7f00000001c0)="$eJzs3M9vFFUcAPDvzLZF+VVEROWHVNHY+KOlBZWDF43eNDHRA15MalsIslBDSyKEaDUGj4bEu/FkjP4FnvRi1JOJV70bEqLEBPSga2Z2prSlu9Cyyy7u55PM9r2dt/ved2fezJt53Q2gZw1lD0nExoj4JSIG69mlBYbqf65cOjv516Wzk0nUaq/+nuTlLl86O1kWLV+3ocgMpxHph0lRyVKzp88cm6hWp08W+dG542+Pzp4+8+TR4xNHpo9Mnxg/ePDA/rFnnh5/qiVxZnFd3vHuzK6k7/XzL08eOv/mD1/1RcT23fX1i+O4KemGheRQFvgftdzyYo+0pLLusWlROunrYENYlUpEZJurP+//g1GJqxtvMF78oKONA9oqOzeta7x6vgb8jyXR6RYAnVGe6LPr33K5RUOPrnDxufoFUBb3lWKpr+mLtCjT38b674uIQ/N/f5otUWyHfza2sUIAoOd9k41/nlhp/JfG9kXlNhdzKFsi4q6I2BoRd0fEtoi4JyIve28xnlmN+tRQZSF/7fgzvbDm4G5ANv57tpjbWjr+q4/+arXav5UitymPvz85fLQ6va/4TIajf12WH2tSx7cv/Pxxo3VDi8Z/2ZLVX44Fi3Zc6Ft2g25qYm6iVYPSi+9H7OhbKf5kYSYgiYj7I2LH6t56c5k4+tgXuxoVun78TbRgnqn2WcSj9e0/H8viLyXN5ydH74jq9L7Rcq+41o8/nXulUf03FX8LZNt//dL9f1mJwT+TxfO1s6uv49yvHzW8plzr/j+QvJbPWQ8Uz70zMTd3cixiIHkpzy95fvzqa8t8WT6Lf3jvyv1/a/GaLP6dEZHtxLsj4oGI2FO0/cGIeCgi9jaJ//vnH35r7fG3Vxb/1IrHv4X9f8vS7b/6ROXYd183qv/Gtv+BPDVcPJMf/66jcXOiOp0d1te8NwMAAMDtJ42IjZGkIwvpNB0Zqf8P/7ZYn1ZnZucePzxz6sRU/TsCW6I/Le90DRb3Q7Or7bFkvnjH+v3R8eJecXm/dH9x3/iTyp15fmRypjrV4dih121o0P8zv1U63Tqg7XxfC3rX8v6fdqgdwK3n/A+9S/+H3qX/Q+9a1P+/PHVuZ554L3/cs7BixbmAJr8cAtwenP+hd+n/0Lv0f+hd+j/0pJv5Xn93Jwa6oxmrT3ze3xXNuF4i0mZl3ohb3rDoio+l1Ymk6Y9ZtDHR6SMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAa/wXAAD//ys68O0=") ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000040)={0x8, 0xffffe1ac, 0x8, 0x1, 0x7}) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8, 0x4, 0x3a30, 0x1, 0x7f}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, 0x0, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYBLOB="00411ffffffffffc14002b80080001", @ANYRES32=r8, @ANYBLOB], 0x50}}, 0x4008000) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x0, 0x12, 0x60d, 0x0, 0x202, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x74, 0x2}}, @common=@icmp6={{0x28}, {0xd, "ea9c", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6}, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x2, 0x0, 0x6}}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) accept$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) 38.259162415s ago: executing program 2 (id=275): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f00000000c0), 0x8) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x2, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 37.098936421s ago: executing program 2 (id=284): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50) 37.044590283s ago: executing program 34 (id=284): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50) 3.717651585s ago: executing program 4 (id=565): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x1, 0x1bc, &(0x7f00000006c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r4, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.734761077s ago: executing program 5 (id=573): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) dup2(r2, r2) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) 2.700992848s ago: executing program 3 (id=574): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071180a000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r0, r3, 0xb, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) 2.406196835s ago: executing program 3 (id=577): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x3, 0x4003, 0xff, "0062ba92600000f73809630400"}) r1 = syz_open_pts(r0, 0x900) dup3(r1, r0, 0x80000) io_setup(0x6, &(0x7f00000000c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000680)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0xf, r0, 0x0, 0x0, 0x9}]) 2.405462685s ago: executing program 4 (id=578): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1d00d000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000080)=ANY=[]) 2.050402973s ago: executing program 4 (id=581): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x42a}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40400d0}, 0x0) 1.984775735s ago: executing program 4 (id=582): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x208008de, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRESDEC], 0x1, 0x1500, &(0x7f0000000580)="$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") r0 = open(&(0x7f0000000280)='./file0\x00', 0x121000, 0x47) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getdents64(r0, &(0x7f0000000fc0)=""/220, 0xdc) 1.962075945s ago: executing program 4 (id=583): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0}, &(0x7f0000000180)=0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x100000001002089}, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000180)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) quotactl_fd$Q_GETQUOTA(r2, 0xffffffff80000701, r1, 0x0) 1.887779167s ago: executing program 3 (id=584): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000002000010300000002000000000200000000000000030000000c000c40000000000000ef0a08000100e000000208000100ac1414aa140003006e72300000000000000000000000000005001500000000000c000c4000000000000000010c", @ANYRES64], 0x6c}, 0x1, 0x0, 0x0, 0x90}, 0x40014) 1.823429438s ago: executing program 5 (id=585): openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) readv(r4, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/117, 0x75}], 0x1) write$FUSE_NOTIFY_INVAL_INODE(r4, &(0x7f0000001100)={0x28, 0x2, 0x0, {0x6, 0x2}}, 0x28) 1.798751629s ago: executing program 3 (id=586): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000180)={[{@nodelalloc}]}, 0xfe, 0x278, &(0x7f0000000840)="$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") r0 = creat(&(0x7f0000000000)='./file0\x00', 0x40) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x8, 0xb, 0x2, 0x100, 0x2, 0x6, 0x7ffffffd, 0x19f, 0x38, 0x2c5, 0x400, 0xd, 0x20, 0x2, 0x3, 0xc, 0xf6d}, [{0x6474e551, 0x5, 0x8, 0x1, 0x0, 0x0, 0x100, 0xc}, {0x6474e551, 0x5450, 0xfff, 0x3, 0x3, 0x9, 0x1000}]}, 0x78) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 1.782163529s ago: executing program 3 (id=587): openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x0) r0 = syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80f811, 0x0, 0x0, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mmap(&(0x7f0000911000/0x2000)=nil, 0x2000, 0x0, 0x2010, r0, 0xed448000) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f00003aa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000563000/0x1000)=nil, &(0x7f0000691000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00008d3000/0x4000)=nil, &(0x7f000090f000/0x4000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f00003e3000/0x2000)=nil, &(0x7f00002cd000/0x3000)=nil, 0x0}, 0x68) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x0) write$uinput_user_dev(r5, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc}, 0x0, [0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3, 0x0, 0x40000000, 0xfeffffff, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x40000000, 0x0, 0xfffffffc, 0x0, 0xffffffff, 0x0, 0xa, 0x0, 0x2d52c0], [0x0, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0xaaf, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1002, 0x0, 0xf, 0x1, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfefffffd, 0x0, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x9, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0x1, 0x0, 0x0, 0x3c63, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x800, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) write$uinput_user_dev(r5, &(0x7f0000000500)={'syz1\x00', {0xa, 0x0, 0x0, 0x2}, 0x18, [0x6, 0x9, 0xfffffffe, 0x0, 0xac7a, 0x0, 0x9, 0x85, 0x6, 0x1, 0x8, 0x4c02, 0x6, 0x0, 0x8, 0xa, 0x400, 0x4, 0x2, 0x80000000, 0x4, 0x40, 0x2, 0x7f, 0x3, 0x2, 0x7, 0x4d, 0x4, 0xfffffdbd, 0xfffffffa, 0x6, 0x6, 0x902, 0x1, 0xe, 0xd, 0x6, 0x7f, 0x4, 0x10001, 0x40, 0x3ff, 0x0, 0x8000, 0xa8a, 0x56, 0x2, 0xfff, 0x2, 0x3, 0xfff, 0x2ec, 0x2fe2049a, 0xa, 0x400, 0x81, 0x7, 0x7, 0xa6df, 0x75e, 0x8, 0xfffffff7, 0x97], [0x7fffffff, 0x9, 0xb608, 0x1, 0x9, 0x5, 0x1, 0x8, 0x0, 0x8, 0x4df, 0x5, 0x40, 0xe, 0x6, 0xdfa4, 0x81, 0xe, 0x2, 0x1, 0x4, 0x81, 0x4, 0x200, 0x4, 0x0, 0x4, 0xffff, 0x8001, 0x7fffffff, 0x8, 0x8864, 0x9, 0x2, 0x2, 0xfffffffa, 0xfffffffb, 0x655c, 0x7, 0x5d, 0x40, 0xf48, 0x5, 0x126, 0x800, 0xe, 0x9, 0x5, 0x5, 0x1, 0x1c00, 0x6, 0xa5, 0x8e4, 0x81, 0x10, 0x4, 0xa, 0x2, 0x0, 0x6, 0x7, 0x800, 0x40], [0x4, 0x9, 0x7, 0x302, 0x401, 0x3, 0xfffffffd, 0x4, 0x8, 0x3, 0x3, 0xa, 0xffff5c7f, 0x7, 0x8, 0x8000006, 0x2, 0xfea1, 0x81, 0x8, 0xe9, 0x8000, 0x6, 0x0, 0x2, 0x0, 0x8, 0xb, 0x1c144cb7, 0x81, 0x5, 0x401, 0xd22e0000, 0x98, 0x1, 0x15, 0x4, 0x1, 0x10, 0x0, 0xdf, 0x7, 0x3, 0xd, 0x6, 0x6, 0x6, 0x2, 0x6, 0x92, 0xffffffff, 0x9, 0x1, 0x80000001, 0x4, 0x1, 0xec79, 0x5, 0x9, 0xb68, 0x4031, 0x4, 0xff, 0xd5], [0x8, 0xfff, 0x20000000, 0x3, 0x9, 0x4, 0x81, 0x1, 0xd, 0x5, 0x6, 0xe, 0xf, 0xd, 0xec, 0x1, 0x5, 0xd4b, 0x4, 0x8000, 0x7, 0x9, 0x9, 0xffff, 0x1, 0x5, 0x2, 0x7fff, 0x40, 0x7f, 0x6, 0x300000, 0x1, 0x9a, 0x31, 0x8, 0x4, 0x9, 0xe6ee, 0x5, 0x400, 0x8, 0x3, 0x6, 0x4, 0x7fff, 0xe, 0x7, 0xa, 0xffff, 0x7, 0x5, 0x401, 0x8, 0x550, 0x7, 0xfffffffe, 0x7fffffff, 0x5, 0x4, 0x3, 0x10001, 0x18, 0xfffffffe]}, 0x45c) r6 = getpid() syz_pidfd_open(r6, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000480), 0x20000c4, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX, @ANYBLOB=',wfdno=']) read$FUSE(0xffffffffffffffff, &(0x7f0000001340)={0x2020}, 0x2020) ioctl$UI_DEV_CREATE(r5, 0x5501) write$uinput_user_dev(r5, &(0x7f0000000a40)={'syz0\x00', {0x0, 0x0, 0x0, 0x1f}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4001, 0x0, 0x2, 0xfffffe00, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0xffffffff, 0x3, 0x10000002, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x800, 0x9262, 0x4, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x400000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1000, 0x401c, 0x0, 0x0, 0x0, 0x4, 0xfffffffb, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0xfd5], [0x0, 0xfffffff9, 0x0, 0x20000002, 0x0, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffe, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x80000, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x80, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100, 0x0, 0x6, 0x6, 0x0, 0x4], [0x81, 0x5, 0x5d30, 0x1, 0x0, 0x100000, 0xdbc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0xfffffff9, 0x0, 0x3, 0x0, 0x4, 0x1ff]}, 0x45c) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYRES8=r3], 0x1, 0x1b4, &(0x7f00000001c0)="$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") 1.663095062s ago: executing program 7 (id=590): socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1.662950682s ago: executing program 7 (id=591): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1d00d000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000080)=ANY=[]) 1.116052365s ago: executing program 6 (id=592): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000800)={0xcbf0, 0xc, 0x40, 0x0, 0x2000000000006}) 1.115856565s ago: executing program 7 (id=593): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000dc0)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x8}, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x40, 0xb, 0x2, "f690"}, 0x0, &(0x7f0000000780)={0x40, 0x13, 0x6, @local}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000800)={0x40, 0x19, 0x2, "15af"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0xbe0d}, 0x0, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x6f}, 0x0}) 965.558428ms ago: executing program 6 (id=594): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x3, 0x4003, 0xff, "0062ba92600000f73809630400"}) r1 = syz_open_pts(r0, 0x900) dup3(r1, r0, 0x80000) io_setup(0x6, &(0x7f00000000c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000680)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0xf, r0, 0x0, 0x0, 0x9}]) 830.540961ms ago: executing program 6 (id=595): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x2422, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x2043, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000280)) 759.043992ms ago: executing program 6 (id=596): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) r1 = io_uring_setup(0x4166, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0x14, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8410, &(0x7f0000000280)={[{@noquota}, {@lazytime}, {@mblk_io_submit}, {@resuid}, {@block_validity}, {@abort}]}, 0xfd, 0xbd1, &(0x7f0000001340)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0xffffffffffffffc8, 0xefd, 0x9, 0x200000000000008, 0x6, 0x6, 0xe5, 0xf64, 0x1ff}) 613.745406ms ago: executing program 6 (id=597): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@init_itable}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x181242, 0x2) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000080)=ANY=[], 0x5, 0x150d, &(0x7f0000001540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x40042, 0x144) 538.028867ms ago: executing program 5 (id=598): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20080091}, 0x8800) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0xd, 0x99, 0x0, 0x0, 0x10000, 0x1, '\x00', 0xc94}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 455.4278ms ago: executing program 3 (id=599): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\a\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x12, 0xc, &(0x7f0000001d00)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x400000, &(0x7f0000000180)=ANY=[], 0x1, 0x2ee, &(0x7f0000000700)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143841, 0x114) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000003c0)={0x0, 0x2, 0x7fff, 0xffff}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) socket$nl_route(0x10, 0x3, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x80, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 452.24508ms ago: executing program 4 (id=600): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) modify_ldt$write(0x1, &(0x7f0000000a40)={0x476, 0x20000000, 0x1000, 0x0, 0x1, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000040)={0x5, 0x0, 0x400, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) socket$netlink(0x10, 0x3, 0x6) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 325.829632ms ago: executing program 7 (id=601): prctl$PR_SET_UNALIGN(0x6, 0x3) prctl$PR_SET_UNALIGN(0x6, 0x2) prctl$PR_SET_UNALIGN(0x6, 0x3) sendmsg$unix(0xffffffffffffffff, 0x0, 0x10044080) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)=@in6={0xa, 0x4e23, 0x40, @mcast2, 0xfff}, 0x80, 0x0}, 0x4000c010) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000003, 0x5, 0x41, 0x2000000, 0x0, 0x2004ca, 0x0, 0xa1d, 0x68ff, 0x6, 0x0, 0x2f89, 0x2, 0x0, 0x4], 0x10000, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 267.803604ms ago: executing program 5 (id=602): io_uring_setup(0x62e2, 0x0) getpid() openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) 203.434845ms ago: executing program 5 (id=603): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1d00d000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000080)=ANY=[]) 160.962106ms ago: executing program 6 (id=604): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) socket$nl_generic(0x10, 0x3, 0x10) r4 = io_uring_setup(0x37f6, &(0x7f00000000c0)={0x0, 0x6cd5, 0x1, 0x2, 0x14d}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r4, 0x12, 0x0, 0x0) 112.291737ms ago: executing program 5 (id=605): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x3, 0x4003, 0xff, "0062ba92600000f73809630400"}) r1 = syz_open_pts(r0, 0x900) dup3(r1, r0, 0x80000) io_setup(0x6, &(0x7f00000000c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000680)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0xf, r0, 0x0, 0x0, 0x9}]) 59.398278ms ago: executing program 7 (id=606): socket$inet6(0xa, 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@jqfmt_vfsold}]}, 0x6, 0x623, &(0x7f0000000e00)="$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") ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 0s ago: executing program 7 (id=607): socket$inet(0x2, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@rand_addr=0x64010101, @in=@broadcast, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@local}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@multicast1, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.12' (ED25519) to the list of known hosts. [ 19.879132][ T30] audit: type=1400 audit(1783814807.023:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.882700][ T277] cgroup: Unknown subsys name 'net' [ 19.901941][ T30] audit: type=1400 audit(1783814807.023:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.929230][ T30] audit: type=1400 audit(1783814807.063:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.929579][ T277] cgroup: Unknown subsys name 'devices' [ 20.075277][ T277] cgroup: Unknown subsys name 'hugetlb' [ 20.080939][ T277] cgroup: Unknown subsys name 'rlimit' [ 20.251994][ T30] audit: type=1400 audit(1783814807.393:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.275189][ T30] audit: type=1400 audit(1783814807.393:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.299950][ T30] audit: type=1400 audit(1783814807.393:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.328087][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 20.337006][ T30] audit: type=1400 audit(1783814807.483:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.362452][ T30] audit: type=1400 audit(1783814807.483:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.405840][ T30] audit: type=1400 audit(1783814807.553:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.406967][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.431470][ T30] audit: type=1400 audit(1783814807.553:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.246432][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.253577][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.260974][ T286] device bridge_slave_0 entered promiscuous mode [ 21.278566][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.285665][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.293432][ T286] device bridge_slave_1 entered promiscuous mode [ 21.327091][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.334212][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.341580][ T285] device bridge_slave_0 entered promiscuous mode [ 21.348577][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.355700][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.363253][ T285] device bridge_slave_1 entered promiscuous mode [ 21.416729][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.423858][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.431217][ T288] device bridge_slave_0 entered promiscuous mode [ 21.463952][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.471037][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.478658][ T288] device bridge_slave_1 entered promiscuous mode [ 21.505670][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.512759][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.520425][ T289] device bridge_slave_0 entered promiscuous mode [ 21.527466][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.534575][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.541934][ T289] device bridge_slave_1 entered promiscuous mode [ 21.563546][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.570621][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.578275][ T287] device bridge_slave_0 entered promiscuous mode [ 21.587889][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.595013][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.602489][ T287] device bridge_slave_1 entered promiscuous mode [ 21.692381][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.699576][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.706915][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.713990][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.722237][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.729408][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.785241][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.792301][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.799717][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.806815][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.848860][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.856758][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.864336][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.871999][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.880023][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.887429][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.897157][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.904735][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.935598][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.943471][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.951635][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.958708][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.966290][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.974667][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.981727][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.989445][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.997841][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.004906][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.013907][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.021636][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.029846][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.036911][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.059098][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.067132][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.085148][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.094022][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.102460][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.110957][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.118146][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.125787][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.134074][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.141108][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.148590][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.156890][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.163973][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.171378][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.179710][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.186824][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.216116][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.224235][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.232474][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.241101][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.261539][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.269610][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.291313][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.299872][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.308790][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.317468][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.326206][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.334389][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.342456][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.350166][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.367562][ T287] device veth0_vlan entered promiscuous mode [ 22.375253][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.383833][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.392109][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.399799][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.407448][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.416058][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.424332][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.431385][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.438863][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.446841][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.454931][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.463427][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.471609][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.478684][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.486347][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.494306][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.501801][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.510481][ T289] device veth0_vlan entered promiscuous mode [ 22.524628][ T285] device veth0_vlan entered promiscuous mode [ 22.531630][ T286] device veth0_vlan entered promiscuous mode [ 22.542252][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.550818][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.559443][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.567743][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.576077][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.584275][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.592325][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.600456][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.617147][ T285] device veth1_macvtap entered promiscuous mode [ 22.624296][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.631894][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.639447][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.647094][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.654737][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.662876][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.671381][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.679681][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.687749][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.696045][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.704490][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.713959][ T287] device veth1_macvtap entered promiscuous mode [ 22.726844][ T286] device veth1_macvtap entered promiscuous mode [ 22.735669][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.743488][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.751632][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.760027][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.768536][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.776875][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.785386][ T289] device veth1_macvtap entered promiscuous mode [ 22.800837][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.808796][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.817589][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.826544][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.835000][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.853894][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.862236][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.870739][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.880004][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.888502][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.896937][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.905427][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.913835][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.934303][ T289] request_module fs-gadgetfs succeeded, but still no fs? [ 22.937554][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.949808][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.958386][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.966900][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.975504][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.983955][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.992269][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.000393][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.008657][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.016413][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.028531][ T288] device veth0_vlan entered promiscuous mode [ 23.078622][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.089668][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.109496][ T316] loop3: detected capacity change from 0 to 512 [ 23.138594][ T318] loop4: detected capacity change from 0 to 4096 [ 23.161990][ T288] device veth1_macvtap entered promiscuous mode [ 23.173816][ T316] ======================================================= [ 23.173816][ T316] WARNING: The mand mount option has been deprecated and [ 23.173816][ T316] and is ignored by this kernel. Remove the mand [ 23.173816][ T316] option from the mount to silence this warning. [ 23.173816][ T316] ======================================================= [ 23.230708][ T320] loop0: detected capacity change from 0 to 128 [ 23.238307][ T318] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 23.246499][ T318] EXT4-fs (loop4): Test dummy encryption mode enabled [ 23.257057][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.266018][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.274763][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.283834][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.298053][ T318] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,mblk_io_submit,usrquota,test_dummy_encryption,inode_readahead_blks=0x0000000001000000,minixdf,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 23.328547][ T316] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.4: bad orphan inode 15 [ 23.343591][ T320] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000005,,errors=continue. Quota mode: none. [ 23.357654][ T316] ext4_test_bit(bit=14, block=5) = 0 [ 23.357841][ T320] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 23.363946][ T316] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 23.442865][ T320] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 23.469922][ T320] fscrypt: loop0: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 25.263144][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 25.263164][ T30] audit: type=1400 audit(1783814812.003:118): avc: denied { prog_load } for pid=324 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 25.349802][ T318] EXT4-fs (loop4): Test dummy encryption mode enabled [ 25.416196][ T30] audit: type=1400 audit(1783814812.003:119): avc: denied { bpf } for pid=324 comm="syz.2.3" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 25.436487][ T318] EXT4-fs (loop4): Remounting file system with no journal so ignoring journalled data option [ 25.455464][ T318] EXT4-fs (loop4): changing journal_checksum during remount not supported; ignoring [ 25.496220][ T318] EXT4-fs (loop4): re-mounted. Opts: max_dir_size_kb=0x0000000000000019,test_dummy_encryption,user_xattr,grpjquota=,data=writeback,nodelalloc,minixdf,journal_checksum,. Quota mode: writeback. [ 25.544890][ T344] loop3: detected capacity change from 0 to 256 [ 25.572931][ T30] audit: type=1400 audit(1783814812.363:120): avc: denied { perfmon } for pid=324 comm="syz.2.3" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 25.622909][ T30] audit: type=1400 audit(1783814812.483:121): avc: denied { create } for pid=317 comm="syz.4.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 25.649174][ T344] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a3b, chksum : 0xd53fbf7b, utbl_chksum : 0xe619d30d) [ 25.706347][ T344] exFAT-fs (loop3): error, invalid size(size(17) > aligned(9223372036854777344) [ 25.706347][ T344] [ 25.713380][ T30] audit: type=1400 audit(1783814812.493:122): avc: denied { remount } for pid=317 comm="syz.4.6" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 25.729467][ T351] loop4: detected capacity change from 0 to 512 [ 25.749470][ T344] exFAT-fs (loop3): Filesystem has been set read-only [ 25.773408][ T30] audit: type=1400 audit(1783814812.693:123): avc: denied { read write } for pid=345 comm="syz.0.7" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 25.823214][ T30] audit: type=1400 audit(1783814812.693:124): avc: denied { open } for pid=345 comm="syz.0.7" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 25.873802][ T351] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 25.903262][ T30] audit: type=1400 audit(1783814812.703:125): avc: denied { mounton } for pid=345 comm="syz.0.7" path="/1/file0" dev="tmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 25.929684][ T351] ext4 filesystem being mounted at /3/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 25.929691][ T30] audit: type=1400 audit(1783814812.753:126): avc: denied { create } for pid=345 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 25.959981][ T30] audit: type=1400 audit(1783814812.753:127): avc: denied { mounton } for pid=345 comm="syz.0.7" path="/1/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 26.015386][ T353] loop3: detected capacity change from 0 to 4096 [ 26.059632][ T353] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 26.111108][ T353] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,lazytime,mblk_io_submit,resuid=0x0000000000000000,block_validity,abort,,errors=continue. Quota mode: writeback. [ 26.165106][ T353] fs-verity: sha512 using implementation "sha512-avx2" [ 26.219139][ T353] syz.3.13 (353) used greatest stack depth: 21192 bytes left [ 26.238003][ T366] loop2: detected capacity change from 0 to 1024 [ 26.285133][ T366] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,. Quota mode: none. [ 26.310214][ T366] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.413757][ T371] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.16: bg 0: block 112: padding at end of block bitmap is not set [ 26.443490][ T371] EXT4-fs (loop2): Remounting filesystem read-only [ 26.504473][ T371] syz.2.16 (371) used greatest stack depth: 20480 bytes left [ 26.513240][ T336] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 26.583122][ T26] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.843191][ T26] usb 4-1: Using ep0 maxpacket: 16 [ 26.893559][ T336] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.904704][ T336] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.914967][ T336] usb 5-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 26.924353][ T336] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.936916][ T336] usb 5-1: config 0 descriptor?? [ 27.003210][ T26] usb 4-1: unable to get BOS descriptor or descriptor too short [ 27.093478][ T26] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 53, changing to 7 [ 27.104883][ T61] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 27.263451][ T26] usb 4-1: New USB device found, idVendor=17cc, idProduct=0839, bcdDevice= 0.40 [ 27.273557][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.281679][ T26] usb 4-1: Product: syz [ 27.288401][ T26] usb 4-1: Manufacturer: syz [ 27.294476][ T26] usb 4-1: SerialNumber: syz [ 27.343150][ T61] usb 2-1: Using ep0 maxpacket: 32 [ 27.416525][ T336] wacom 0003:056A:030C.0001: hidraw0: USB HID v0.06 Device [HID 056a:030c] on usb-dummy_hcd.4-1/input0 [ 27.503189][ T61] usb 2-1: unable to get BOS descriptor or descriptor too short [ 27.561610][ T383] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.626884][ T308] usb 5-1: USB disconnect, device number 2 [ 27.673258][ T26] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 27.693381][ T26] usb 4-1: unit 5 not found! [ 27.701772][ T26] usb 4-1: USB disconnect, device number 2 [ 27.753214][ T61] usb 2-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 27.762270][ T61] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.770514][ T61] usb 2-1: Product: syz [ 27.775107][ T61] usb 2-1: Manufacturer: syz [ 27.779719][ T61] usb 2-1: SerialNumber: syz [ 27.874751][ T394] loop2: detected capacity change from 0 to 16 [ 27.895040][ T394] erofs: (device loop2): mounted with root inode @ nid 36. [ 27.905039][ T394] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -19 in[52, 4044] out[2639] [ 27.920746][ T394] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 27.991929][ T396] loop2: detected capacity change from 0 to 1024 [ 28.037521][ T396] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 28.047147][ T396] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 28.061109][ T396] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,grpjquota=,nodiscard,discard,dioread_nolock,discard,bsddf,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 28.103016][ T400] device syzkaller0 entered promiscuous mode [ 28.117567][ T61] usb 2-1: USB disconnect, device number 2 [ 28.171333][ T402] loop2: detected capacity change from 0 to 8192 [ 28.221646][ T406] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.228952][ T406] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.285277][ T402] attempt to access beyond end of device [ 28.285277][ T402] loop2: rw=0, want=57848, limit=8192 [ 28.431797][ T413] loop3: detected capacity change from 0 to 1024 [ 28.474419][ T413] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 29.529176][ T441] loop3: detected capacity change from 0 to 2048 [ 29.555812][ T441] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 29.773534][ T61] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 30.133161][ T61] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 30.144394][ T61] usb 3-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 30.157856][ T61] usb 3-1: config 0 interface 0 has no altsetting 0 [ 30.164886][ T61] usb 3-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00 [ 30.174211][ T61] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.190149][ T61] usb 3-1: config 0 descriptor?? [ 30.213219][ T437] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 30.373159][ T308] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 30.573153][ T39] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 30.674598][ T61] wacom 0003:056A:002A.0002: unknown main item tag 0x4 [ 30.681502][ T61] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 30.688454][ T61] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 30.695425][ T61] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 30.702281][ T61] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 30.709209][ T61] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 30.716180][ T61] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 30.723031][ T61] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 30.729940][ T61] wacom 0003:056A:002A.0002: unknown main item tag 0x0 [ 30.737020][ T61] wacom 0003:056A:002A.0002: Unknown device_type for 'HID 056a:002a'. Assuming pen. [ 30.746976][ T61] wacom 0003:056A:002A.0002: hidraw0: USB HID v0.05 Device [HID 056a:002a] on usb-dummy_hcd.2-1/input0 [ 30.758626][ T61] input: Wacom Intuos5 M Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:002A.0002/input/input7 [ 30.771302][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 30.771315][ T30] audit: type=1400 audit(1783814817.913:179): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=619 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.800091][ T308] usb 5-1: unable to get BOS descriptor or descriptor too short [ 30.807903][ T30] audit: type=1400 audit(1783814817.913:180): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=619 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.833148][ T39] usb 1-1: Using ep0 maxpacket: 32 [ 30.833705][ T30] audit: type=1400 audit(1783814817.983:181): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=619 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.863985][ T308] usb 5-1: not running at top speed; connect to a high speed hub [ 30.899310][ T30] audit: type=1400 audit(1783814818.043:182): avc: denied { setopt } for pid=461 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 30.913231][ T26] usb 3-1: USB disconnect, device number 2 [ 30.927473][ T30] audit: type=1400 audit(1783814818.073:183): avc: denied { name_bind } for pid=461 comm="syz.1.49" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 30.954501][ T308] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 30.965289][ T308] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 30.983209][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.993195][ T308] usb 5-1: config 4 has no interface number 0 [ 30.998078][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.133189][ T39] usb 1-1: New USB device found, idVendor=25dd, idProduct=f3d2, bcdDevice=d2.37 [ 31.142439][ T39] usb 1-1: New USB device strings: Mfr=84, Product=45, SerialNumber=0 [ 31.150697][ T39] usb 1-1: Product: syz [ 31.153408][ T308] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 31.154998][ T39] usb 1-1: Manufacturer: syz [ 31.164741][ T308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.170785][ T39] usb 1-1: config 0 descriptor?? [ 31.181661][ T61] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 31.181685][ T308] usb 5-1: Product: syz [ 31.193775][ T308] usb 5-1: Manufacturer: syz [ 31.198389][ T308] usb 5-1: SerialNumber: syz [ 31.343140][ T26] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 31.440144][ T30] audit: type=1400 audit(1783814818.583:184): avc: denied { connect } for pid=466 comm="syz.2.51" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.461722][ T30] audit: type=1400 audit(1783814818.583:185): avc: denied { write } for pid=466 comm="syz.2.51" laddr=172.20.20.10 lport=256 faddr=172.20.20.187 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.491453][ T30] audit: type=1400 audit(1783814818.643:186): avc: denied { setopt } for pid=466 comm="syz.2.51" laddr=172.20.20.10 lport=256 faddr=172.20.20.187 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.613176][ T61] usb 4-1: unable to get BOS descriptor or descriptor too short [ 31.676286][ T39] hid-generic 0003:25DD:F3D2.0003: hiddev96,hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.0-1/input0 [ 31.693201][ T61] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.703606][ T61] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 31.723206][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 31.734653][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 162, setting to 64 [ 31.745739][ T26] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 31.753361][ T308] uvcvideo 5-1:4.147: Found multiple Units with ID 6 [ 31.755025][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.761516][ T308] usb 5-1: Found UVC 0.02 device syz (04f2:b746) [ 31.761594][ T308] usb 5-1: No valid video chain found. [ 31.780535][ T26] usb 2-1: config 0 descriptor?? [ 31.786586][ T308] usb 5-1: USB disconnect, device number 3 [ 31.802061][ T470] sch_tbf: peakrate 2147483647 is lower than or equals to rate 2831036522994172386 ! [ 31.823213][ T465] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 31.842990][ T30] audit: type=1400 audit(1783814818.983:187): avc: denied { wake_alarm } for pid=472 comm="syz.2.53" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 31.943978][ T20] usb 1-1: USB disconnect, device number 2 [ 31.970695][ T61] usb 4-1: string descriptor 0 read error: -22 [ 31.977171][ T61] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 31.986492][ T61] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.034027][ T61] usb 4-1: selecting invalid altsetting 1 [ 32.041522][ T61] usb 4-1: unit 3 not found! [ 32.059223][ T483] loop4: detected capacity change from 0 to 8192 [ 32.257598][ T61] usb 4-1: unit 0 not found! [ 32.283203][ T30] audit: type=1400 audit(1783814819.413:188): avc: denied { create } for pid=464 comm="syz.1.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 32.343347][ T26] usbhid 2-1:0.0: can't add hid device: -71 [ 32.350175][ T26] usbhid: probe of 2-1:0.0 failed with error -71 [ 32.417309][ T26] usb 2-1: USB disconnect, device number 3 [ 32.545813][ T485] usb 4-1: USB disconnect, device number 3 [ 32.841020][ T491] loop2: detected capacity change from 0 to 512 [ 32.872245][ T493] binder: 492:493 ioctl c0306201 200000000080 returned -14 [ 32.880786][ T493] binder: 492:493 ioctl c0306201 2000000003c0 returned -14 [ 32.888808][ T493] binder: 492:493 ioctl 80045430 7f216d644f8c returned -22 [ 32.914314][ T491] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 32.926785][ T491] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.945299][ T500] loop1: detected capacity change from 0 to 128 [ 32.973150][ T296] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 32.988153][ T500] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none. [ 32.999837][ T500] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 33.037483][ T500] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 33.089028][ T508] netlink: 'syz.3.66': attribute type 3 has an invalid length. [ 33.127174][ T514] loop3: detected capacity change from 0 to 2048 [ 33.215749][ T520] loop1: detected capacity change from 0 to 512 [ 33.250001][ T296] usb 5-1: Using ep0 maxpacket: 32 [ 33.275191][ T520] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,errors=remount-ro,mb_optimize_scan=0x0000000000000001,delalloc,data_err=ignore,. Quota mode: writeback. [ 33.292664][ T520] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.321595][ T520] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #2: comm syz.1.70: corrupted inode contents [ 33.333907][ T520] EXT4-fs (loop1): Remounting filesystem read-only [ 33.340502][ T520] EXT4-fs error (device loop1): ext4_dirty_inode:6108: inode #2: comm syz.1.70: mark_inode_dirty error [ 33.352135][ T520] EXT4-fs (loop1): Remounting filesystem read-only [ 33.394679][ T520] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #2: comm syz.1.70: corrupted inode contents [ 33.407120][ T520] EXT4-fs (loop1): Remounting filesystem read-only [ 33.414882][ T526] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #2: comm syz.1.70: corrupted inode contents [ 33.430287][ T526] EXT4-fs (loop1): Remounting filesystem read-only [ 33.437098][ T526] EXT4-fs error (device loop1): ext4_dirty_inode:6108: inode #2: comm syz.1.70: mark_inode_dirty error [ 33.451245][ T526] EXT4-fs (loop1): Remounting filesystem read-only [ 33.458208][ T296] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 110, changing to 7 [ 33.476659][ T526] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #2: comm syz.1.70: corrupted inode contents [ 33.522736][ T526] EXT4-fs (loop1): Remounting filesystem read-only [ 33.529431][ T526] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.70: mark_inode_dirty error [ 33.541038][ T526] EXT4-fs (loop1): Remounting filesystem read-only [ 33.547773][ T526] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #2: comm syz.1.70: corrupted inode contents [ 33.559683][ T526] EXT4-fs (loop1): Remounting filesystem read-only [ 33.566412][ T526] EXT4-fs error (device loop1): ext4_dirty_inode:6108: inode #2: comm syz.1.70: mark_inode_dirty error [ 33.577907][ T526] EXT4-fs (loop1): Remounting filesystem read-only [ 33.585266][ T520] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #2: comm syz.1.70: corrupted inode contents [ 33.597104][ T520] EXT4-fs (loop1): Remounting filesystem read-only [ 33.672077][ T530] loop1: detected capacity change from 0 to 256 [ 33.683306][ T296] usb 5-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 33.692444][ T296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.700519][ T296] usb 5-1: Product: syz [ 33.704770][ T296] usb 5-1: Manufacturer: syz [ 33.709392][ T296] usb 5-1: SerialNumber: syz [ 33.823845][ T534] Illegal XDP return value 4294967274, expect packet loss! [ 33.999918][ T489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.58'. [ 34.012763][ T540] loop1: detected capacity change from 0 to 512 [ 34.057039][ T540] EXT4-fs (loop1): Ignoring removed bh option [ 34.065273][ T540] EXT4-fs error (device loop1): ext4_iget_extra_inode:4604: inode #15: comm syz.1.77: corrupted in-inode xattr [ 34.077362][ T540] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.77: couldn't read orphan inode 15 (err -117) [ 34.089449][ T540] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000005,init_itable=0x0000000000000009,init_itable,usrjquota=,nogrpid,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 34.143215][ T296] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 34.183733][ T547] loop1: detected capacity change from 0 to 2048 [ 34.202386][ T296] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 34.215290][ T296] usb 5-1: USB disconnect, device number 4 [ 34.243045][ T547] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 34.270360][ T547] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 16: comm syz.1.80: bad entry in directory: directory entry overrun - offset=128, inode=18, rec_len=1920, size=2036 fake=0 [ 34.293153][ T6] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 34.350552][ T553] loop0: detected capacity change from 0 to 1024 [ 34.369868][ T555] loop1: detected capacity change from 0 to 512 [ 34.403735][ T555] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.416978][ T555] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 34.428482][ T555] EXT4-fs (loop1): 1 truncate cleaned up [ 34.434207][ T555] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none. [ 34.476985][ T553] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,. Quota mode: none. [ 34.478281][ T559] loop2: detected capacity change from 0 to 2048 [ 34.494248][ T553] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.518973][ T562] process 'syz.1.85' launched './file2' with NULL argv: empty string added [ 34.538405][ T559] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 34.539926][ T553] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.82: bg 0: block 112: padding at end of block bitmap is not set [ 34.610384][ T553] EXT4-fs (loop0): Remounting filesystem read-only [ 34.770575][ T559] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 34.785809][ T559] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 34.823265][ T559] EXT4-fs (loop2): This should not happen!! Data will be lost [ 34.823265][ T559] [ 34.835481][ T570] loop0: detected capacity change from 0 to 512 [ 34.842347][ T559] EXT4-fs (loop2): Total free blocks count 0 [ 34.853845][ T559] EXT4-fs (loop2): Free/Dirty block details [ 34.860971][ T559] EXT4-fs (loop2): free_blocks=4096 [ 34.866484][ T6] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 34.875824][ T559] EXT4-fs (loop2): dirty_blocks=32 [ 34.881234][ T559] EXT4-fs (loop2): Block reservation details [ 34.887649][ T570] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 34.896299][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.905625][ T559] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 34.912210][ T6] usb 4-1: Product: syz [ 34.922807][ T580] loop4: detected capacity change from 0 to 128 [ 34.923526][ T6] usb 4-1: Manufacturer: syz [ 34.939817][ T570] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.87: bad orphan inode 15 [ 34.943278][ T6] usb 4-1: SerialNumber: syz [ 34.955132][ T570] EXT4-fs (loop0): Remounting filesystem read-only [ 34.962635][ T580] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 34.962910][ T6] r8152-cfgselector 4-1: config 0 descriptor?? [ 34.983307][ T570] ext4_test_bit(bit=14, block=18) = 1 [ 34.988720][ T570] is_bad_inode(inode)=0 [ 34.992886][ T570] NEXT_ORPHAN(inode)=1023 [ 34.997527][ T570] max_ino=32 [ 35.000820][ T570] i_nlink=0 [ 35.004572][ T570] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #15: comm syz.0.87: corrupted inode contents [ 35.016987][ T570] EXT4-fs (loop0): Remounting filesystem read-only [ 35.023548][ T570] EXT4-fs error (device loop0): ext4_dirty_inode:6108: inode #15: comm syz.0.87: mark_inode_dirty error [ 35.024166][ T580] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.035305][ T570] EXT4-fs (loop0): Remounting filesystem read-only [ 35.051606][ T570] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #15: comm syz.0.87: corrupted inode contents [ 35.076525][ T570] EXT4-fs (loop0): Remounting filesystem read-only [ 35.083897][ T570] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2954: inode #15: comm syz.0.87: mark_inode_dirty error [ 35.087189][ T306] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 482 with error 28 [ 35.108933][ T570] EXT4-fs (loop0): Remounting filesystem read-only [ 35.110029][ T306] EXT4-fs (loop2): This should not happen!! Data will be lost [ 35.110029][ T306] [ 35.123203][ T570] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2957: inode #15: comm syz.0.87: mark inode dirty (error -117) [ 35.138750][ T570] EXT4-fs (loop0): Remounting filesystem read-only [ 35.145783][ T570] EXT4-fs warning (device loop0): ext4_evict_inode:305: xattr delete (err -117) [ 35.154957][ T570] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=,errors=remount-ro,. Quota mode: none. [ 35.166680][ T570] ext2 filesystem being mounted at /8/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 35.273638][ T593] loop4: detected capacity change from 0 to 256 [ 35.280102][ T594] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 35.330979][ T594] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 35.347514][ T594] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.371069][ T594] EXT4-fs error (device loop0): ext4_lookup:1858: inode #12: comm syz.0.93: iget: bad i_size value: 2533274857506816 [ 35.403388][ T602] Core dump to core aborted: cannot preserve file permissions [ 35.443236][ T6] r8152-cfgselector 4-1: Unknown version 0x0000 [ 35.449913][ T6] r8152-cfgselector 4-1: bad CDC descriptors [ 35.473178][ T6] r8152-cfgselector 4-1: Unknown version 0x0000 [ 35.480444][ T6] r8152-cfgselector 4-1: USB disconnect, device number 4 [ 35.502616][ T604] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,nodelalloc,,errors=continue. Quota mode: none. [ 35.515475][ T604] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.605544][ T296] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 35.944912][ T617] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 35.970822][ T617] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 36.007724][ T617] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 36.023541][ T617] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 36.031662][ T617] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e11c, mo2=0000] [ 36.040193][ T617] EXT4-fs (loop1): orphan cleanup on readonly fs [ 36.047440][ T617] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.102: bg 0: block 34: padding at end of block bitmap is not set [ 36.062888][ T617] __quota_error: 20 callbacks suppressed [ 36.062903][ T617] Quota error (device loop1): write_blk: dquota write failed [ 36.110154][ T617] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 36.122217][ T30] audit: type=1400 audit(1783814823.263:209): avc: denied { block_suspend } for pid=621 comm="syz.4.105" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 36.162671][ T626] EXT4-fs (loop3): 1 truncate cleaned up [ 36.169730][ T626] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 36.181483][ T617] EXT4-fs error (device loop1): ext4_acquire_dquot:6227: comm syz.1.102: Failed to acquire dquot type 1 [ 36.213055][ T617] EXT4-fs (loop1): 1 truncate cleaned up [ 36.219283][ T617] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,bsdgroups,barrier=0x0000000000000003,noblock_validity,,errors=continue. Quota mode: writeback. [ 36.237593][ T30] audit: type=1400 audit(1783814823.383:210): avc: denied { remove_name } for pid=625 comm="syz.3.106" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 36.269214][ T30] audit: type=1400 audit(1783814823.383:211): avc: denied { rename } for pid=625 comm="syz.3.106" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.291974][ T30] audit: type=1400 audit(1783814823.383:212): avc: denied { unlink } for pid=625 comm="syz.3.106" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.316953][ T30] audit: type=1400 audit(1783814823.403:213): avc: denied { map } for pid=625 comm="syz.3.106" path="socket:[17035]" dev="sockfs" ino=17035 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.341010][ T30] audit: type=1400 audit(1783814823.403:214): avc: denied { read } for pid=625 comm="syz.3.106" path="socket:[17035]" dev="sockfs" ino=17035 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.517454][ T30] audit: type=1400 audit(1783814823.663:215): avc: denied { create } for pid=618 comm="syz.0.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 36.540024][ T30] audit: type=1400 audit(1783814823.683:216): avc: denied { write } for pid=618 comm="syz.0.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 36.923821][ T643] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 36.937488][ T643] EXT4-fs (loop4): 1 truncate cleaned up [ 36.943443][ T643] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 36.993144][ T380] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 37.243130][ T380] usb 2-1: Using ep0 maxpacket: 16 [ 37.373606][ T380] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.385063][ T380] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.430773][ T380] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 37.510209][ T380] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 37.549528][ T380] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.586452][ T380] usb 2-1: config 0 descriptor?? [ 38.089427][ T380] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 38.108398][ T380] microsoft 0003:045E:07DA.0004: unsupported Resolution Multiplier 0 [ 38.123337][ T296] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.07 [ 38.132571][ T296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.162067][ T296] usb 3-1: config 0 descriptor?? [ 38.303201][ T380] microsoft 0003:045E:07DA.0004: unsupported Resolution Multiplier 0 [ 38.317202][ T380] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 38.326485][ T380] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 38.338391][ T380] microsoft 0003:045E:07DA.0004: no inputs found [ 38.344957][ T380] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 38.409184][ T657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.114'. [ 38.463165][ T296] usb 3-1: Cannot read MAC address [ 38.468453][ T296] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 38.508286][ T296] usb 3-1: USB disconnect, device number 3 [ 38.564448][ T380] usb 2-1: USB disconnect, device number 4 [ 38.735150][ T665] syz.0.120 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 38.765050][ T673] bpf setsockopt: ignoring program buffer with optlen=65520 (max_optlen=4096) [ 39.313271][ T661] set_capacity_and_notify: 6 callbacks suppressed [ 39.313287][ T661] loop2: detected capacity change from 0 to 1024 [ 39.329157][ T6] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 39.703643][ T661] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 39.703643][ T661] [ 39.800922][ T6] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 39.855139][ T6] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 39.900183][ T687] fido_id[687]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 40.958397][ T712] loop4: detected capacity change from 0 to 1024 [ 41.087075][ T712] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 41.274463][ T712] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,nojournal_checksum,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,nojournal_checksum,init_itable,norecovery,bsddf,dioread_nolock. Quota mode: none. [ 41.391502][ T712] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.491479][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 41.491494][ T30] audit: type=1400 audit(1783814828.633:240): avc: denied { setattr } for pid=711 comm="syz.4.129" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 41.528329][ T722] loop3: detected capacity change from 0 to 256 [ 41.543314][ T712] EXT4-fs error (device loop4): __ext4_get_inode_loc:4365: comm syz.4.129: Invalid inode table block 1413256166955286528 in block_group 0 [ 41.597162][ T722] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 41.597528][ T712] EXT4-fs (loop4): Remounting filesystem read-only [ 41.614843][ T712] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 41.624479][ T712] EXT4-fs (loop4): Remounting filesystem read-only [ 41.633152][ T722] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 41.697393][ T306] EXT4-fs error (device loop4): __ext4_get_inode_loc:4365: comm kworker/u4:3: Invalid inode table block 1413256166955286528 in block_group 0 [ 41.718220][ T722] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 41.750748][ T306] EXT4-fs (loop4): Remounting filesystem read-only [ 41.782144][ T30] audit: type=1400 audit(1783814828.923:241): avc: denied { associate } for pid=721 comm="syz.3.134" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 41.878564][ T30] audit: type=1400 audit(1783814829.023:242): avc: denied { mounton } for pid=721 comm="syz.3.134" path="/22/bus/file0" dev="loop3" ino=1048602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.313387][ T722] loop_set_status: loop3 () has still dirty pages (nrpages=32) [ 42.347243][ T729] kvm: pic: non byte read [ 42.351686][ T729] kvm: pic: non byte read [ 42.364772][ T729] kvm: pic: non byte read [ 42.369215][ T729] kvm: pic: non byte read [ 42.439258][ T729] kvm: pic: non byte read [ 42.443785][ T729] kvm: pic: non byte read [ 42.448291][ T729] kvm: pic: non byte read [ 42.452753][ T729] kvm: pic: non byte read [ 42.457445][ T729] kvm: pic: non byte read [ 42.461955][ T729] kvm: pic: non byte read [ 42.576825][ T746] loop1: detected capacity change from 0 to 512 [ 42.644880][ T746] EXT4-fs (loop1): Test dummy encryption mode enabled [ 42.651747][ T746] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 42.735774][ T752] loop2: detected capacity change from 0 to 2048 [ 42.752447][ T746] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.146: bad orphan inode 16 [ 42.768450][ T746] ext4_test_bit(bit=15, block=4) = 0 [ 42.773903][ T746] EXT4-fs (loop1): 1 orphan inode deleted [ 42.779745][ T746] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,max_dir_size_kb=0x000000000000004a,resgid=0x000000000000ee01,inode_readahead_blks=0x0000000000000100,test_dummy_encryption,stripe=0x0000000000000001,init_itable=0x0000000000000008,mb_optimize_scan=0x000000000000,errors=continue. Quota mode: none. [ 42.832467][ T752] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,,errors=continue. Quota mode: writeback. [ 42.847321][ T30] audit: type=1400 audit(1783814829.993:243): avc: denied { mounton } for pid=745 comm="syz.1.146" path="/35/bus/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.836495][ T286] EXT4-fs error (device loop1): __ext4_iget:4950: inode #11: block 524051: comm syz-executor: invalid block [ 43.866673][ T30] audit: type=1400 audit(1783814830.233:244): avc: denied { create } for pid=753 comm="syz.0.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.899695][ T286] EXT4-fs error (device loop1): __ext4_iget:4950: inode #11: block 524051: comm syz-executor: invalid block [ 44.007303][ T30] audit: type=1400 audit(1783814831.153:245): avc: denied { execute } for pid=751 comm="syz.2.140" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.047443][ T30] audit: type=1400 audit(1783814831.173:246): avc: denied { execute_no_trans } for pid=751 comm="syz.2.140" path="/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.143164][ T485] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 44.213709][ T30] audit: type=1400 audit(1783814831.353:247): avc: denied { mounton } for pid=773 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 44.264394][ T779] loop0: detected capacity change from 0 to 256 [ 44.280645][ T777] loop2: detected capacity change from 0 to 4096 [ 44.290425][ T777] EXT4-fs (loop2): Test dummy encryption mode enabled [ 44.298664][ T777] EXT4-fs (loop2): Test dummy encryption mode enabled [ 44.298847][ T779] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 44.324220][ T779] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 44.331457][ T777] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,test_dummy_encryption=v1,noload,test_dummy_encryption=v1,nodiscard,data_err=ignore,usrquota,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 44.362172][ T773] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.363219][ T779] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 44.369469][ T773] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.394514][ T773] device bridge_slave_0 entered promiscuous mode [ 44.405018][ T773] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.412279][ T773] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.426233][ T773] device bridge_slave_1 entered promiscuous mode [ 44.432686][ T30] audit: type=1400 audit(1783814831.573:248): avc: denied { mounton } for pid=778 comm="syz.0.158" path="/22/bus/file0/file0" dev="loop0" ino=1048604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.448115][ T779] exFAT-fs (loop0): error, found bogus dentry(18) beyond unused empty group(0) (start_clu : 5, cur_clu : 5) [ 44.471295][ T779] exFAT-fs (loop0): Filesystem has been set read-only [ 44.543222][ T485] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.571147][ T773] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.578260][ T773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.578365][ T485] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.585685][ T773] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.602301][ T773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.608462][ T485] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 44.671703][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.680745][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.696418][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.704936][ T485] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 44.724425][ T485] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.740365][ T485] usb 4-1: config 0 descriptor?? [ 44.782020][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.797695][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.812294][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.832821][ T30] audit: type=1400 audit(1783814831.973:249): avc: denied { bind } for pid=796 comm="syz.0.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.855656][ T798] netlink: 20 bytes leftover after parsing attributes in process `syz.0.164'. [ 44.867536][ T773] device veth0_vlan entered promiscuous mode [ 44.888782][ T773] device veth1_macvtap entered promiscuous mode [ 45.483732][ T328] device bridge_slave_1 left promiscuous mode [ 45.489935][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.567707][ T328] device bridge_slave_0 left promiscuous mode [ 45.592684][ T485] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd [ 45.601535][ T485] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 45.610608][ T485] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 45.625005][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.653968][ T328] device veth1_macvtap left promiscuous mode [ 45.660035][ T328] device veth0_vlan left promiscuous mode [ 45.804739][ T485] usb 4-1: USB disconnect, device number 5 [ 46.194836][ T805] SELinux: policydb string does not match my string SE Linux [ 46.202487][ T805] SELinux: failed to load policy [ 46.254698][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.273621][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.303554][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.333987][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.353700][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.381420][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.470574][ T812] loop3: detected capacity change from 0 to 4096 [ 46.633473][ T812] EXT4-fs (loop3): Test dummy encryption mode enabled [ 46.640494][ T812] EXT4-fs (loop3): Test dummy encryption mode enabled [ 46.780977][ T812] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,test_dummy_encryption=v1,noload,test_dummy_encryption=v1,nodiscard,data_err=ignore,usrquota,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 46.899507][ T826] loop5: detected capacity change from 0 to 256 [ 47.085559][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 47.085574][ T30] audit: type=1400 audit(1783814834.233:252): avc: denied { ioctl } for pid=829 comm="syz.4.174" path="socket:[17617]" dev="sockfs" ino=17617 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 47.121994][ T826] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 48.394943][ T30] audit: type=1400 audit(1783814835.543:253): avc: denied { mount } for pid=853 comm="syz.3.185" name="/" dev="ramfs" ino=18609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 48.574567][ T30] audit: type=1400 audit(1783814835.573:254): avc: denied { execute } for pid=853 comm="syz.3.185" name="file0" dev="ramfs" ino=18610 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 48.596545][ T30] audit: type=1400 audit(1783814835.573:255): avc: denied { execute_no_trans } for pid=853 comm="syz.3.185" path="/file0" dev="ramfs" ino=18610 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 48.895635][ T869] SELinux: ebitmap: truncated map [ 48.905363][ T869] SELinux: failed to load policy [ 48.913203][ T61] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 49.173499][ T61] usb 3-1: Using ep0 maxpacket: 32 [ 49.256118][ T30] audit: type=1400 audit(1783814836.403:256): avc: denied { setattr } for pid=874 comm="syz.0.192" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.313404][ T61] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 49.337231][ T61] usb 3-1: config 0 has no interface number 0 [ 49.356849][ T61] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 49.378500][ T61] usb 3-1: config 0 interface 85 has no altsetting 0 [ 49.424787][ T886] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 49.563198][ T61] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 49.572399][ T61] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.580648][ T61] usb 3-1: Product: syz [ 49.585104][ T61] usb 3-1: Manufacturer: syz [ 49.589761][ T61] usb 3-1: SerialNumber: syz [ 49.598936][ T61] usb 3-1: config 0 descriptor?? [ 49.680595][ T30] audit: type=1400 audit(1783814836.823:257): avc: denied { setopt } for pid=856 comm="syz.5.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.343550][ T30] audit: type=1400 audit(1783814837.433:258): avc: denied { read write } for pid=881 comm="syz.4.196" name="vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 50.472718][ T30] audit: type=1400 audit(1783814837.433:259): avc: denied { open } for pid=881 comm="syz.4.196" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 50.533483][ T30] audit: type=1400 audit(1783814837.433:260): avc: denied { ioctl } for pid=881 comm="syz.4.196" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 50.561569][ T61] usb 3-1: USB disconnect, device number 4 [ 51.603120][ T61] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 51.923633][ T485] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 52.033189][ T61] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 52.051752][ T61] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 52.063367][ T61] usb 6-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 52.083966][ T61] usb 6-1: config 220 has no interface number 2 [ 52.090268][ T61] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 52.123890][ T61] usb 6-1: config 220 interface 0 has no altsetting 0 [ 52.130697][ T61] usb 6-1: config 220 interface 76 has no altsetting 0 [ 52.158047][ T61] usb 6-1: config 220 interface 1 has no altsetting 0 [ 52.222487][ T935] loop0: detected capacity change from 0 to 1024 [ 52.313967][ T935] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 52.325236][ T935] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,sysvgroups,nodelalloc,journal_dev=0x0000000000000001,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 52.348795][ T61] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 52.357907][ T61] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.366269][ T485] usb 5-1: unable to get BOS descriptor or descriptor too short [ 52.374047][ T61] usb 6-1: Product: syz [ 52.378362][ T61] usb 6-1: Manufacturer: syz [ 52.382980][ T61] usb 6-1: SerialNumber: syz [ 52.453475][ T485] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.463817][ T485] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 52.638406][ T943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.216'. [ 52.763419][ T485] usb 5-1: string descriptor 0 read error: -22 [ 52.774215][ T485] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 52.873821][ T61] usb 6-1: selecting invalid altsetting 0 [ 52.880975][ T61] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 52.896450][ T485] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.933377][ T61] usb 6-1: No valid video chain found. [ 52.984285][ T485] usb 5-1: selecting invalid altsetting 1 [ 52.993946][ T485] usb 5-1: unit 6 not found! [ 53.034880][ T61] usb 6-1: USB disconnect, device number 2 [ 54.056535][ T30] audit: type=1400 audit(1783814841.193:261): avc: denied { ioctl } for pid=971 comm="syz.2.225" path="socket:[17909]" dev="sockfs" ino=17909 ioctlcmd=0x9434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 54.235557][ T976] usb usb9: usbfs: process 976 (syz.2.229) did not claim interface 0 before use [ 54.293499][ T485] usb 5-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 54.319563][ T485] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 54.361931][ T485] usb 5-1: USB disconnect, device number 5 [ 55.640507][ T1012] loop0: detected capacity change from 0 to 1024 [ 55.679319][ T1006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.230'. [ 55.726382][ T1012] EXT4-fs (loop0): Ignoring removed oldalloc option [ 55.744835][ T1012] EXT4-fs (loop0): Unrecognized mount option "fsmagic=0x0" or missing value [ 55.793159][ T26] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 55.850235][ T30] audit: type=1400 audit(1783814842.993:262): avc: denied { sys_module } for pid=1014 comm="syz.0.241" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 56.006246][ T1023] loop5: detected capacity change from 0 to 256 [ 56.073112][ T26] usb 3-1: Using ep0 maxpacket: 8 [ 56.089589][ T30] audit: type=1400 audit(1783814843.233:263): avc: denied { lock } for pid=1022 comm="syz.5.247" path="/21/bus/file1" dev="loop5" ino=1048610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.113874][ T30] audit: type=1400 audit(1783814843.233:264): avc: denied { unlink } for pid=1022 comm="syz.5.247" name="file1" dev="loop5" ino=1048610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.200692][ T1031] loop5: detected capacity change from 0 to 512 [ 56.233175][ T26] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 56.246791][ T26] usb 3-1: config 179 has no interface number 0 [ 56.260518][ T26] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 56.275152][ T26] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 56.288757][ T26] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 56.307868][ T26] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 56.327586][ T1040] loop3: detected capacity change from 0 to 512 [ 56.334574][ T26] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 56.348729][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.356680][ T1029] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.364297][ T1029] device bridge_slave_0 entered promiscuous mode [ 56.371438][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.378683][ T1029] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.386660][ T1029] device bridge_slave_1 entered promiscuous mode [ 56.462542][ T26] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 56.471872][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.502031][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.509138][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.516471][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.523545][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.531048][ T1010] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 56.540373][ T1040] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 56.550874][ T1031] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 56.575910][ T1031] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.607758][ T1031] EXT4-fs error (device loop5): ext4_lookup:1858: inode #12: comm syz.5.251: iget: bad i_size value: 2533274857506816 [ 56.641426][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.649947][ T322] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.658259][ T322] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.674817][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.683626][ T322] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.690673][ T322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.698534][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.708123][ T322] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.715223][ T322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.733999][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.742208][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.808022][ T26] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input11 [ 56.842447][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.894856][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.937312][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.959577][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.976333][ T1029] device veth0_vlan entered promiscuous mode [ 56.984696][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.995909][ T61] usb 3-1: USB disconnect, device number 5 [ 57.003132][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 57.011438][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 57.029706][ T61] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 57.046346][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.066009][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.074620][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.083032][ T1029] device veth1_macvtap entered promiscuous mode [ 57.094243][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.102192][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.110818][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.133151][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.145576][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.298242][ T30] audit: type=1400 audit(1783814844.443:265): avc: denied { watch } for pid=1051 comm="syz.5.255" path="/23" dev="tmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 57.516104][ T26] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 57.568580][ T1067] loop2: detected capacity change from 0 to 16 [ 57.607180][ T1067] erofs: (device loop2): mounted with root inode @ nid 36. [ 57.893200][ T26] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.929075][ T26] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.997928][ T26] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 58.044727][ T26] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 58.077131][ T26] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.087958][ T30] audit: type=1400 audit(1783814845.233:266): avc: denied { read } for pid=1084 comm="syz.2.270" name="usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 58.108876][ T26] usb 7-1: config 0 descriptor?? [ 58.166056][ T30] audit: type=1400 audit(1783814845.233:267): avc: denied { open } for pid=1084 comm="syz.2.270" path="/dev/usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 58.378309][ T1093] loop2: detected capacity change from 0 to 512 [ 59.014174][ T1093] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.272: inode has both inline data and extents flags [ 59.030961][ T30] audit: type=1400 audit(1783814845.263:268): avc: denied { ioctl } for pid=1084 comm="syz.2.270" path="/dev/usbmon0" dev="devtmpfs" ino=155 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 59.033932][ T1093] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.272: couldn't read orphan inode 15 (err -117) [ 59.067925][ T1093] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 59.199887][ T1093] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 59.293860][ T288] EXT4-fs error (device loop2): htree_dirblock_to_tree:1083: inode #2: comm syz-executor: Directory hole found for htree leaf block 0 [ 59.380224][ T26] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 59.389850][ T26] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 60.593801][ T10] device bridge_slave_1 left promiscuous mode [ 60.602312][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.627333][ T10] device bridge_slave_0 left promiscuous mode [ 60.645555][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.671409][ T10] device veth1_macvtap left promiscuous mode [ 60.751637][ T10] device veth0_vlan left promiscuous mode [ 61.333283][ T30] audit: type=1326 audit(1783814848.313:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1139 comm="syz.4.287" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989afeee59 code=0x7ffc0000 [ 61.394529][ T1146] loop4: detected capacity change from 0 to 1024 [ 61.483194][ T30] audit: type=1326 audit(1783814848.313:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1139 comm="syz.4.287" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989afeee59 code=0x7ffc0000 [ 61.534507][ T1146] EXT4-fs error (device loop4): ext4_map_blocks:632: inode #3: block 2: comm syz.4.290: lblock 2 mapped to illegal pblock 2 (length 1) [ 61.848104][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.869583][ T1146] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 62.023065][ C1] sched: RT throttling activated [ 62.023810][ T30] audit: type=1326 audit(1783814848.313:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1139 comm="syz.4.287" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f989afeee59 code=0x7ffc0000 [ 62.300490][ T1146] EXT4-fs error (device loop4): ext4_map_blocks:632: inode #3: block 48: comm syz.4.290: lblock 0 mapped to illegal pblock 48 (length 1) [ 62.324495][ T30] audit: type=1326 audit(1783814848.313:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1139 comm="syz.4.287" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989afeee59 code=0x7ffc0000 [ 62.357363][ T1131] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.391059][ T1146] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 62.400908][ T1131] device bridge_slave_0 entered promiscuous mode [ 62.424289][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.432012][ T1146] EXT4-fs error (device loop4): ext4_acquire_dquot:6227: comm syz.4.290: Failed to acquire dquot type 0 [ 62.453639][ T1146] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 62.467698][ T1131] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.473622][ T1146] EXT4-fs error (device loop4): ext4_evict_inode:285: inode #11: comm syz.4.290: mark_inode_dirty error [ 62.481079][ T30] audit: type=1326 audit(1783814848.313:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1139 comm="syz.4.287" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989afeee59 code=0x7ffc0000 [ 62.506949][ T1146] EXT4-fs warning (device loop4): ext4_evict_inode:288: couldn't mark inode dirty (err -117) [ 62.512407][ T1131] device bridge_slave_1 entered promiscuous mode [ 62.554618][ T61] usb 7-1: USB disconnect, device number 2 [ 62.558413][ T1146] EXT4-fs (loop4): 1 orphan inode deleted [ 62.574292][ T328] EXT4-fs error (device loop4): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 62.626548][ T1146] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000008001,noblock_validity,nolazytime,max_batch_time=0x0000000000000007,nodiscard,nouid32,noauto_da_alloc,,errors=continue. Quota mode: none. [ 62.643183][ T30] audit: type=1326 audit(1783814848.323:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1139 comm="syz.4.287" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f989afeee59 code=0x7ffc0000 [ 62.652094][ T328] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 62.734549][ T1164] loop5: detected capacity change from 0 to 16 [ 62.764372][ T328] EXT4-fs error (device loop4): ext4_release_dquot:6263: comm kworker/u4:5: Failed to release dquot type 0 [ 62.791944][ T30] audit: type=1326 audit(1783814848.323:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1139 comm="syz.4.287" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989afeee59 code=0x7ffc0000 [ 62.814832][ T1164] erofs: (device loop5): mounted with root inode @ nid 36. [ 62.835968][ T1146] EXT4-fs error (device loop4): __ext4_get_inode_loc:4365: comm syz.4.290: Invalid inode table block 1 in block_group 0 [ 62.849110][ T1146] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 62.883508][ T1146] EXT4-fs error (device loop4): ext4_quota_off:6533: inode #3: comm syz.4.290: mark_inode_dirty error [ 62.934876][ T1164] erofs: (device loop5): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 89 [ 62.963118][ T1164] erofs: (device loop5): z_erofs_readahead: readahead error at page 17 @ nid 89 [ 62.972209][ T1164] erofs: (device loop5): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 89 [ 63.040273][ T1164] erofs: (device loop5): z_erofs_readahead: readahead error at page 16 @ nid 89 [ 63.049762][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.052836][ T1164] erofs: (device loop5): z_erofs_readahead: readahead error at page 15 @ nid 89 [ 63.078692][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.113968][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.114412][ T1164] erofs: (device loop5): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 63.131234][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.140850][ T1169] loop4: detected capacity change from 0 to 512 [ 63.148794][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.155890][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.173190][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.182742][ T1169] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.298: bg 0: block 5: invalid block bitmap [ 63.182757][ T1165] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 63.182817][ T1165] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 63.203992][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.220085][ T1169] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 63.229014][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.233871][ T1169] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.298: invalid indirect mapped block 3 (level 2) [ 63.236091][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.263203][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.281043][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.283497][ T1164] erofs: (device loop5): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 63.307401][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.315959][ T1169] EXT4-fs (loop4): 1 orphan inode deleted [ 63.321728][ T1169] EXT4-fs (loop4): 1 truncate cleaned up [ 63.335751][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.350255][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.359168][ T1169] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 63.372642][ T1164] attempt to access beyond end of device [ 63.372642][ T1164] loop5: rw=524288, want=34359738368, limit=16 [ 63.385724][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.393460][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.401393][ T1165] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 63.411053][ T1131] device veth0_vlan entered promiscuous mode [ 63.421270][ T1169] EXT4-fs (loop4): shut down requested (0) [ 63.431027][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.432614][ T1165] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 63.449050][ T1131] device veth1_macvtap entered promiscuous mode [ 63.457124][ T1176] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 63.468936][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.470526][ T1164] attempt to access beyond end of device [ 63.470526][ T1164] loop5: rw=524288, want=136, limit=16 [ 63.490209][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.500271][ T1176] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 63.512530][ T1164] attempt to access beyond end of device [ 63.512530][ T1164] loop5: rw=524288, want=88, limit=16 [ 63.541057][ T1164] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 63.553309][ T1164] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 63.561698][ T1164] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 63.570280][ T1164] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 63.901694][ T1191] loop5: detected capacity change from 0 to 1024 [ 64.470378][ T1191] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 64.479832][ T61] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 64.573423][ T1208] loop4: detected capacity change from 0 to 128 [ 64.704962][ T1191] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_lock,resgid=0x0000000000000000,mblk_io_submit,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,nobarrier,grpid,jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 65.023267][ T61] usb 8-1: unable to get BOS descriptor or descriptor too short [ 65.253170][ T61] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.267724][ T61] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 65.543282][ T61] usb 8-1: string descriptor 0 read error: -22 [ 65.549832][ T61] usb 8-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 65.559832][ T61] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.730373][ T61] usb 8-1: selecting invalid altsetting 1 [ 65.736342][ T61] usb 8-1: unit 6 not found! [ 65.865628][ T1235] loop6: detected capacity change from 0 to 512 [ 65.947752][ T1235] EXT4-fs (loop6): Test dummy encryption mode enabled [ 65.965094][ T1235] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: comm syz.6.319: inode #1: comm syz.6.319: iget: illegal inode # [ 65.983326][ T1235] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.319: error while reading EA inode 1 err=-117 [ 66.004630][ T1235] EXT4-fs (loop6): 1 orphan inode deleted [ 66.013632][ T1235] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpjquota=,inode_readahead_blks=0x0000000000080000,norecovery,noinit_itable,norecovery,nojournal_checksum,sysvgroups,debug_want_extra_isize=0x0000000000000008,test_dummy_encryption,nojournal_checksum,barrier=0x00000000000005,errors=continue. Quota mode: none. [ 66.161372][ T1240] loop5: detected capacity change from 0 to 512 [ 66.183532][ T61] usb 8-1: cannot get ctl value: req = 0x82, wValue = 0x100, wIndex = 0x200, type = 3 [ 66.193288][ T61] usb 8-1: 2:0: cannot get min/max values for control 1 (id 2) [ 66.213202][ T61] usb 8-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 66.231099][ T61] snd-usb-audio: probe of 8-1:1.0 failed with error -22 [ 66.244952][ T61] usb 8-1: USB disconnect, device number 2 [ 66.256802][ T1240] EXT4-fs (loop5): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,grpquota,,errors=continue. Quota mode: writeback. [ 66.274201][ T1240] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.424667][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 66.424696][ T30] audit: type=1400 audit(1783814853.573:289): avc: denied { remount } for pid=1239 comm="syz.5.321" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 66.452218][ T1247] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: writeback. [ 66.527569][ T30] audit: type=1400 audit(1783814853.643:290): avc: denied { map } for pid=1249 comm="syz.6.323" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 66.782169][ T1255] loop6: detected capacity change from 0 to 128 [ 66.869810][ T1233] loop4: detected capacity change from 0 to 1024 [ 67.755648][ T1233] EXT4-fs (loop4): Unsupported blocksize for fs-verity [ 68.759415][ T1264] loop5: detected capacity change from 0 to 512 [ 68.821792][ T30] audit: type=1400 audit(1783814855.963:291): avc: denied { mount } for pid=1267 comm="syz.7.329" name="/" dev="ramfs" ino=20242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 68.846519][ T1264] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 68.957006][ T1273] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 68.974295][ T1264] EXT4-fs warning (device loop5): ext4_begin_enable_verity:136: inode #13: comm syz.5.326: verity is only allowed on extent-based files [ 69.061245][ T1275] loop6: detected capacity change from 0 to 512 [ 69.074632][ T1277] loop7: detected capacity change from 0 to 1024 [ 69.104027][ T1277] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 69.135320][ T1275] EXT4-fs (loop6): Test dummy encryption mode enabled [ 69.142144][ T1275] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 69.161890][ T1277] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,errors=remount-ro,dioread_nolock,nojournal_checksum,lazytime,noauto_da_alloc,. Quota mode: writeback. [ 69.194253][ T1275] EXT4-fs (loop6): Ignoring removed oldalloc option [ 69.200941][ T1275] EXT4-fs (loop6): Value of option "test_dummy_encryption=v" is unrecognized [ 69.491050][ T30] audit: type=1400 audit(1783814856.633:292): avc: denied { name_bind } for pid=1287 comm="syz.6.337" path="socket:[20299]" dev="sockfs" ino=20299 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 69.559653][ T1292] loop7: detected capacity change from 0 to 256 [ 69.657098][ T1292] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 69.679336][ T1292] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 69.834191][ T1292] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000ff98, chksum : 0xdca9dc68, utbl_chksum : 0xe619d30d) [ 69.904620][ T1292] exFAT-fs (loop7): error, found bogus dentry(16) beyond unused empty group(6) (start_clu : 6, cur_clu : 6) [ 69.943121][ T1292] exFAT-fs (loop7): Filesystem has been set read-only [ 70.442509][ T1315] loop7: detected capacity change from 0 to 512 [ 70.470661][ T1315] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled [ 70.518356][ T1315] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 70.544930][ T1315] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.663096][ T61] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 71.123692][ T61] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 71.148698][ T61] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.227612][ T61] usb 6-1: config 0 descriptor?? [ 71.575072][ T1313] loop5: detected capacity change from 0 to 512 [ 71.623907][ T1313] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 71.653143][ T1313] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 71.683140][ T1313] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 71.765444][ T1313] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 71.890498][ T1344] loop7: detected capacity change from 0 to 512 [ 71.898003][ T30] audit: type=1400 audit(1783814859.013:293): avc: denied { bind } for pid=1341 comm="syz.7.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 71.921524][ T1313] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 72.113411][ T1313] EXT4-fs (loop5): failed to initialize system zone (-117) [ 72.120708][ T1313] EXT4-fs (loop5): mount failed [ 72.156500][ T1344] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 72.164637][ T1344] System zones: 0-2, 18-18, 34-34 [ 72.181220][ T1344] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.357: bg 0: block 248: padding at end of block bitmap is not set [ 72.195758][ T1344] Quota error (device loop7): write_blk: dquota write failed [ 72.203209][ T1344] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 72.213192][ T1344] EXT4-fs error (device loop7): ext4_acquire_dquot:6227: comm syz.7.357: Failed to acquire dquot type 1 [ 72.225322][ T1344] EXT4-fs (loop7): 1 truncate cleaned up [ 72.231016][ T1344] EXT4-fs (loop7): mounted filesystem without journal. Opts: discard,noload,,errors=continue. Quota mode: writeback. [ 72.243415][ T1344] ext4 filesystem being mounted at /syzcgroup/unified/syz7/cgroup.procs supports timestamps until 2038-01-19 (0x7fffffff) [ 72.258408][ T30] audit: type=1400 audit(1783814859.013:294): avc: denied { name_bind } for pid=1341 comm="syz.7.357" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 72.340960][ T30] audit: type=1400 audit(1783814859.013:295): avc: denied { node_bind } for pid=1341 comm="syz.7.357" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 72.433982][ T30] audit: type=1400 audit(1783814859.063:296): avc: denied { mounton } for pid=1341 comm="syz.7.357" path="/syzcgroup/unified/syz7/cgroup.procs" dev="cgroup2" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 72.454117][ T1353] loop6: detected capacity change from 0 to 512 [ 72.606856][ T1353] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 72.625756][ T1353] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.682691][ T1353] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 72.727732][ T1353] EXT4-fs (loop6): Delayed block allocation failed for inode 13 at logical offset 1 with max blocks 1 with error 28 [ 72.803367][ T1353] EXT4-fs (loop6): This should not happen!! Data will be lost [ 72.803367][ T1353] [ 72.823232][ T1353] EXT4-fs (loop6): Total free blocks count 0 [ 72.829296][ T1353] EXT4-fs (loop6): Free/Dirty block details [ 72.855669][ T1353] EXT4-fs (loop6): free_blocks=65280 [ 72.872991][ T1353] EXT4-fs (loop6): dirty_blocks=1 [ 72.888072][ T1353] EXT4-fs (loop6): Block reservation details [ 72.908516][ T1353] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 73.571626][ T26] usb 6-1: USB disconnect, device number 3 [ 73.649458][ T1384] loop5: detected capacity change from 0 to 256 [ 73.725399][ T1384] FAT-fs (loop5): Directory bread(block 1285) failed [ 73.928112][ T1384] FAT-fs (loop5): Directory bread(block 1286) failed [ 73.953382][ T30] audit: type=1400 audit(1783814860.823:297): avc: denied { getopt } for pid=1381 comm="syz.4.368" laddr=172.20.20.10 lport=256 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.066037][ T1384] FAT-fs (loop5): Directory bread(block 1287) failed [ 74.072852][ T1384] FAT-fs (loop5): Directory bread(block 1288) failed [ 74.172316][ T1384] FAT-fs (loop5): Directory bread(block 1285) failed [ 74.247642][ T1384] FAT-fs (loop5): Directory bread(block 1286) failed [ 74.273679][ T1384] FAT-fs (loop5): Directory bread(block 1287) failed [ 74.280438][ T1384] FAT-fs (loop5): Directory bread(block 1288) failed [ 74.287535][ T1384] FAT-fs (loop5): FAT read failed (blocknr 1281) [ 74.357831][ T1391] loop4: detected capacity change from 0 to 16 [ 74.380337][ T1393] loop5: detected capacity change from 0 to 1024 [ 74.424161][ T1391] erofs: (device loop4): mounted with root inode @ nid 36. [ 74.434727][ T1391] erofs: (device loop4): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 89 [ 74.445375][ T1393] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 74.460872][ T1391] erofs: (device loop4): z_erofs_readahead: readahead error at page 17 @ nid 89 [ 74.475547][ T1391] erofs: (device loop4): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 89 [ 74.486499][ T1391] erofs: (device loop4): z_erofs_readahead: readahead error at page 16 @ nid 89 [ 74.499163][ T30] audit: type=1400 audit(1783814861.643:298): avc: denied { read } for pid=1394 comm="syz.3.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 74.533193][ T1391] erofs: (device loop4): z_erofs_readahead: readahead error at page 15 @ nid 89 [ 74.542846][ T1393] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv0,nouid32,jqfmt=vfsv1,delalloc,journal_dev=0x0000000000000007,acl,nomblk_io_submit,noinit_itable,usrquota,,errors=continue. Quota mode: writeback. [ 74.582443][ T1391] erofs: (device loop4): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 74.591637][ T1391] erofs: (device loop4): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 74.603192][ T1393] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.603550][ T1391] attempt to access beyond end of device [ 74.603550][ T1391] loop4: rw=524288, want=34359738368, limit=16 [ 74.626441][ T1393] EXT4-fs error (device loop5): ext4_map_blocks:742: inode #15: comm syz.5.372: lblock 0 mapped to illegal pblock 0 (length 2) [ 74.653304][ T1393] EXT4-fs error (device loop5): ext4_ext_remove_space:2929: inode #15: comm syz.5.372: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 74.693212][ T1391] attempt to access beyond end of device [ 74.693212][ T1391] loop4: rw=524288, want=136, limit=16 [ 74.713201][ T1391] attempt to access beyond end of device [ 74.713201][ T1391] loop4: rw=524288, want=88, limit=16 [ 74.753180][ T1391] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 74.781669][ T1391] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 74.796902][ T1408] loop7: detected capacity change from 0 to 512 [ 74.883555][ T1391] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 74.895141][ T1391] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 74.913284][ T1402] EXT4-fs error (device loop5): ext4_map_blocks:742: inode #15: comm syz.5.372: lblock 0 mapped to illegal pblock 0 (length 1) [ 74.929630][ T1408] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 74.963833][ T1406] EXT4-fs error (device loop5): ext4_map_blocks:742: inode #15: comm syz.5.372: lblock 0 mapped to illegal pblock 0 (length 1) [ 75.003970][ T1408] EXT4-fs error (device loop7): ext4_orphan_get:1432: comm syz.7.371: bad orphan inode 131083 [ 75.018585][ T1406] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 75.031558][ T1408] EXT4-fs (loop7): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 75.049123][ T1406] EXT4-fs (loop5): This should not happen!! Data will be lost [ 75.049123][ T1406] [ 75.115242][ T1408] fscrypt (loop7, inode 18): Unsupported encryption flags (0xb4) [ 75.224631][ T1424] loop6: detected capacity change from 0 to 512 [ 75.264967][ T1424] EXT4-fs (loop6): mounted filesystem without journal. Opts: resgid=0x0000000000000000,errors=remount-ro,usrjquota=,sysvgroups,usrquota,. Quota mode: writeback. [ 75.281280][ T1424] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.311983][ T1424] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.384: bg 0: block 217: padding at end of block bitmap is not set [ 75.327342][ T1424] EXT4-fs (loop6): Remounting filesystem read-only [ 75.333985][ T1424] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 75.342999][ T1424] EXT4-fs (loop6): Remounting filesystem read-only [ 75.376147][ T1430] input: syz0 as /devices/virtual/input/input12 [ 75.415606][ T1433] Zero length message leads to an empty skb [ 75.753628][ T1439] netlink: 4 bytes leftover after parsing attributes in process `syz.6.385'. [ 75.788079][ T1441] loop7: detected capacity change from 0 to 2048 [ 75.877077][ T1445] loop6: detected capacity change from 0 to 512 [ 75.936967][ T1445] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 75.958223][ T1441] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsv1,acl,auto_da_alloc,,errors=continue. Quota mode: none. [ 76.007875][ T1445] EXT4-fs (loop6): 1 truncate cleaned up [ 76.029080][ T1441] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 76.048582][ T1445] EXT4-fs (loop6): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 76.064308][ T1452] loop4: detected capacity change from 0 to 128 [ 76.085486][ T1441] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 76.139642][ T1452] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 76.150324][ T1452] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 76.162606][ T1441] EXT4-fs (loop7): This should not happen!! Data will be lost [ 76.162606][ T1441] [ 76.163510][ T1452] syz.4.393 (pid 1452) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 76.172732][ T1441] EXT4-fs (loop7): Total free blocks count 0 [ 76.189502][ T1441] EXT4-fs (loop7): Free/Dirty block details [ 76.195487][ T1441] EXT4-fs (loop7): free_blocks=4096 [ 76.200738][ T1441] EXT4-fs (loop7): dirty_blocks=16 [ 76.205905][ T1441] EXT4-fs (loop7): Block reservation details [ 76.211937][ T1441] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 76.254409][ T306] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 76.322551][ T306] EXT4-fs (loop7): This should not happen!! Data will be lost [ 76.322551][ T306] [ 76.689618][ T1481] loop7: detected capacity change from 0 to 128 [ 76.768605][ T1481] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 76.790629][ T1481] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 77.003120][ T30] audit: type=1400 audit(1783814864.113:299): avc: denied { write } for pid=1458 comm="syz.5.396" path="socket:[20617]" dev="sockfs" ino=20617 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.223097][ T940] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 77.636828][ T30] audit: type=1400 audit(1783814864.783:300): avc: denied { create } for pid=1500 comm="syz.3.407" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 77.692012][ T30] audit: type=1400 audit(1783814864.833:301): avc: denied { unlink } for pid=285 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=441 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 77.753134][ T61] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 77.773246][ T940] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.792587][ T940] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.812784][ T940] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 77.827566][ T940] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 77.836888][ T940] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.888053][ T940] usb 8-1: config 0 descriptor?? [ 78.153386][ T61] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.173108][ T61] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.193172][ T61] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 78.210178][ T61] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 78.219744][ T61] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.232840][ T61] usb 5-1: config 0 descriptor?? [ 78.337387][ T1518] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34988 sclass=netlink_route_socket pid=1518 comm=syz.3.417 [ 78.950729][ T940] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 78.969601][ T940] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 79.124718][ T26] usb 8-1: USB disconnect, device number 3 [ 79.244347][ T61] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 79.253896][ T61] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 79.323165][ T39] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 79.563118][ T39] usb 7-1: Using ep0 maxpacket: 32 [ 79.683249][ T39] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.694473][ T39] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.779968][ T1547] loop7: detected capacity change from 0 to 2048 [ 79.814929][ T1547] Alternate GPT is invalid, using primary GPT. [ 79.821279][ T1547] loop7: p1 p2 p3 [ 79.825162][ T39] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 79.833328][ T1547] loop7: partition table partially beyond EOD, truncated [ 79.834440][ T39] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 79.850126][ T39] usb 7-1: Product: syz [ 79.854373][ T39] usb 7-1: Manufacturer: syz [ 79.895789][ T101] Alternate GPT is invalid, using primary GPT. [ 79.902154][ T101] loop7: p1 p2 p3 [ 79.904804][ T39] hub 7-1:4.0: USB hub found [ 79.906875][ T101] loop7: partition table partially beyond EOD, truncated [ 79.950781][ T310] udevd[310]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 79.961686][ T479] udevd[479]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 79.972759][ T313] udevd[313]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 79.988129][ T479] udevd[479]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 79.999000][ T313] udevd[313]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 80.010204][ T310] udevd[310]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 80.123203][ T39] hub 7-1:4.0: 1 port detected [ 80.341765][ T1566] loop5: detected capacity change from 0 to 4096 [ 80.366819][ T1566] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 80.383013][ T1566] EXT4-fs (loop5): Test dummy encryption mode enabled [ 80.401866][ T1566] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,mblk_io_submit,usrquota,test_dummy_encryption,inode_readahead_blks=0x0000000001000000,minixdf,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 80.494578][ T1566] EXT4-fs (loop5): Test dummy encryption mode enabled [ 80.511574][ T1566] EXT4-fs (loop5): Remounting file system with no journal so ignoring journalled data option [ 80.533145][ T1566] EXT4-fs (loop5): changing journal_checksum during remount not supported; ignoring [ 80.554211][ T1566] EXT4-fs (loop5): re-mounted. Opts: max_dir_size_kb=0x0000000000000019,test_dummy_encryption,user_xattr,grpjquota=,data=writeback,nodelalloc,minixdf,journal_checksum,. Quota mode: writeback. [ 80.629078][ T1571] loop4: detected capacity change from 0 to 256 [ 80.648407][ T1571] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 80.685110][ T1573] loop5: detected capacity change from 0 to 512 [ 80.708556][ T30] audit: type=1400 audit(1783814867.853:302): avc: denied { rmdir } for pid=1570 comm="syz.4.436" name="file0" dev="loop4" ino=1048627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.734705][ T1573] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 80.742770][ T1573] System zones: 0-2, 18-18, 34-34 [ 80.743247][ T39] hub 7-1:4.0: set hub depth failed [ 80.784548][ T39] usb 7-1: USB disconnect, device number 3 [ 80.812926][ T1581] loop7: detected capacity change from 0 to 16 [ 80.819398][ T1573] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.437: bg 0: block 248: padding at end of block bitmap is not set [ 80.836071][ T1573] Quota error (device loop5): write_blk: dquota write failed [ 80.844971][ T1581] erofs: (device loop7): mounted with root inode @ nid 36. [ 80.851276][ T1573] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 80.862537][ T1573] EXT4-fs error (device loop5): ext4_acquire_dquot:6227: comm syz.5.437: Failed to acquire dquot type 1 [ 80.874617][ T1573] EXT4-fs (loop5): 1 truncate cleaned up [ 80.882963][ T1573] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,noload,,errors=continue. Quota mode: writeback. [ 80.895945][ T1573] ext4 filesystem being mounted at /syzcgroup/unified/syz5/cgroup.procs supports timestamps until 2038-01-19 (0x7fffffff) [ 81.384699][ T61] usb 5-1: USB disconnect, device number 6 [ 82.077244][ T1611] loop5: detected capacity change from 0 to 128 [ 82.117276][ T1611] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4) [ 82.158982][ T306] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4) [ 82.178736][ T1611] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4) [ 82.223024][ T1613] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 82.230315][ T1613] IPv6: NLM_F_CREATE should be set when creating new route [ 83.255707][ T30] audit: type=1400 audit(1783814869.983:303): avc: denied { watch_reads } for pid=1629 comm="syz.3.461" path="/92/bus" dev="tmpfs" ino=523 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 83.255973][ T296] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 84.093202][ T296] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.113077][ T296] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 84.122009][ T296] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 84.370087][ T296] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 84.379459][ T296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.387538][ T296] usb 5-1: Product: syz [ 84.391732][ T296] usb 5-1: Manufacturer: syz [ 84.396366][ T296] usb 5-1: SerialNumber: syz [ 84.403416][ T296] usb 5-1: config 0 descriptor?? [ 84.452497][ T1670] 9pnet_virtio: no channels available for device [ 84.504220][ T1672] loop6: detected capacity change from 0 to 256 [ 84.524845][ T1672] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.541338][ T1672] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 84.552417][ T1672] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 84.661348][ T485] usb 5-1: USB disconnect, device number 7 [ 84.679437][ T1674] netlink: 80 bytes leftover after parsing attributes in process `syz.6.477'. [ 84.971245][ T30] audit: type=1400 audit(1783814872.113:304): avc: denied { connect } for pid=1684 comm="syz.3.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 85.047434][ T30] audit: type=1400 audit(1783814872.133:305): avc: denied { shutdown } for pid=1684 comm="syz.3.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 85.220114][ T1699] loop4: detected capacity change from 0 to 128 [ 85.247424][ T1699] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4) [ 85.276645][ T328] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4) [ 85.286207][ T1698] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4) [ 85.497837][ T308] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 86.023484][ T30] audit: type=1400 audit(1783814873.063:306): avc: denied { map } for pid=1704 comm="syz.7.492" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 86.793194][ T308] usb 7-1: Using ep0 maxpacket: 32 [ 86.913165][ T308] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.195257][ T30] audit: type=1400 audit(1783814875.343:307): avc: denied { mount } for pid=1760 comm="syz.5.515" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 88.994751][ T308] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.004617][ T308] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 89.013696][ T308] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.025344][ T308] usb 7-1: config 0 descriptor?? [ 90.023519][ T308] usb 7-1: can't set config #0, error -71 [ 91.202391][ T308] usb 7-1: USB disconnect, device number 4 [ 92.068866][ T1826] loop6: detected capacity change from 0 to 128 [ 92.251359][ T1826] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,dioread_lock,nouid32,,errors=continue. Quota mode: none. [ 92.313243][ T1826] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 93.855756][ T1876] loop6: detected capacity change from 0 to 1024 [ 94.033210][ T1876] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 94.108878][ T30] audit: type=1400 audit(1783814881.253:308): avc: denied { execute } for pid=1891 comm="syz.3.567" name="file0" dev="tmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 94.161819][ T1876] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_lock,resgid=0x0000000000000000,mblk_io_submit,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,nobarrier,grpid,jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 94.897335][ T30] audit: type=1400 audit(1783814881.283:309): avc: denied { execute_no_trans } for pid=1891 comm="syz.3.567" path="/130/file0" dev="tmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 95.042996][ T30] audit: type=1400 audit(1783814882.063:310): avc: denied { create } for pid=1911 comm="syz.5.573" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 95.074557][ T30] audit: type=1400 audit(1783814882.063:311): avc: denied { write } for pid=1911 comm="syz.5.573" name="file0" dev="tmpfs" ino=529 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 95.122923][ T30] audit: type=1400 audit(1783814882.063:312): avc: denied { open } for pid=1911 comm="syz.5.573" path="/94/file0" dev="tmpfs" ino=529 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 95.540721][ T1929] loop7: detected capacity change from 0 to 128 [ 95.568914][ T30] audit: type=1400 audit(1783814882.063:313): avc: denied { ioctl } for pid=1911 comm="syz.5.573" path="/94/file0" dev="tmpfs" ino=529 ioctlcmd=0x1274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 95.656121][ T1929] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4) [ 95.698659][ T10] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4) [ 95.715682][ T30] audit: type=1400 audit(1783814882.863:314): avc: denied { unlink } for pid=773 comm="syz-executor" name="file0" dev="tmpfs" ino=529 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 95.746472][ T1929] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4) [ 95.758381][ T1939] netlink: 12 bytes leftover after parsing attributes in process `syz.3.584'. [ 96.814045][ T1969] loop6: detected capacity change from 0 to 4096 [ 96.894634][ T1969] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 96.914545][ T1969] EXT4-fs (loop6): mounted filesystem without journal. Opts: noquota,lazytime,mblk_io_submit,resuid=0x0000000000000000,block_validity,abort,,errors=continue. Quota mode: writeback. [ 97.026039][ T1972] loop6: detected capacity change from 0 to 512 [ 97.130024][ T1972] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 97.214299][ T1972] EXT4-fs (loop6): 1 truncate cleaned up [ 97.220010][ T1972] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,jqfmt=vfsold,init_itable,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 97.275136][ T1972] EXT4-fs error (device loop6): mb_free_blocks:1889: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 97.344112][ T1972] EXT4-fs (loop6): Remounting filesystem read-only [ 97.612293][ T1997] ================================================================== [ 97.620429][ T1997] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x635/0x6e0 [ 97.629690][ T1997] Read of size 1 at addr ffff8881079a33f8 by task syz.7.607/1997 [ 97.637448][ T1997] [ 97.639805][ T1997] CPU: 1 PID: 1997 Comm: syz.7.607 Not tainted syzkaller #0 [ 97.647121][ T1997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 97.657228][ T1997] Call Trace: [ 97.660540][ T1997] [ 97.663505][ T1997] __dump_stack+0x21/0x30 [ 97.667873][ T1997] dump_stack_lvl+0x110/0x170 [ 97.672588][ T1997] ? show_regs_print_info+0x20/0x20 [ 97.677817][ T1997] ? load_image+0x3f0/0x3f0 [ 97.682376][ T1997] ? unwind_get_return_address+0x4d/0x90 [ 97.688043][ T1997] ? stack_trace_save+0xf0/0xf0 [ 97.692938][ T1997] print_address_description+0x7f/0x2c0 [ 97.698521][ T1997] ? xfrm_policy_inexact_list_reinsert+0x635/0x6e0 [ 97.705068][ T1997] kasan_report+0x10f/0x150 [ 97.709648][ T1997] ? xfrm_policy_inexact_list_reinsert+0x635/0x6e0 [ 97.716222][ T1997] __asan_report_load1_noabort+0x14/0x20 [ 97.721897][ T1997] xfrm_policy_inexact_list_reinsert+0x635/0x6e0 [ 97.728276][ T1997] xfrm_policy_inexact_insert_node+0x954/0xb60 [ 97.734467][ T1997] ? xfrm_netlink_rcv+0x72/0x90 [ 97.739355][ T1997] ? netlink_unicast+0x86c/0xa30 [ 97.744327][ T1997] ? ____sys_sendmsg+0x5be/0x8f0 [ 97.749300][ T1997] ? ___sys_sendmsg+0x236/0x2e0 [ 97.754191][ T1997] xfrm_policy_inexact_alloc_chain+0x540/0xb40 [ 97.760415][ T1997] xfrm_policy_inexact_insert+0x6a/0x1190 [ 97.766176][ T1997] ? __kasan_check_write+0x14/0x20 [ 97.771327][ T1997] ? _raw_spin_lock_bh+0x94/0xf0 [ 97.776307][ T1997] xfrm_policy_insert+0x12c/0x9c0 [ 97.781412][ T1997] xfrm_add_policy+0x4e1/0x840 [ 97.786226][ T1997] ? xfrm_dump_sa_done+0xc0/0xc0 [ 97.791201][ T1997] xfrm_user_rcv_msg+0x559/0x7f0 [ 97.796174][ T1997] ? xfrm_netlink_rcv+0x90/0x90 [ 97.801061][ T1997] ? avc_has_perm_noaudit+0x490/0x490 [ 97.806472][ T1997] ? x64_sys_call+0x4b/0x9a0 [ 97.811107][ T1997] ? selinux_nlmsg_lookup+0x233/0x440 [ 97.816516][ T1997] netlink_rcv_skb+0x1e9/0x430 [ 97.821501][ T1997] ? xfrm_netlink_rcv+0x90/0x90 [ 97.826399][ T1997] ? netlink_ack+0xb10/0xb10 [ 97.831031][ T1997] ? wait_for_completion_killable_timeout+0x10/0x10 [ 97.837663][ T1997] ? __netlink_lookup+0x387/0x3b0 [ 97.842730][ T1997] xfrm_netlink_rcv+0x72/0x90 [ 97.847448][ T1997] netlink_unicast+0x86c/0xa30 [ 97.852248][ T1997] netlink_sendmsg+0x879/0xb80 [ 97.857054][ T1997] ? netlink_getsockopt+0x530/0x530 [ 97.862294][ T1997] ? alloc_file+0x59/0x580 [ 97.866744][ T1997] ? security_socket_sendmsg+0x82/0xa0 [ 97.872237][ T1997] ? netlink_getsockopt+0x530/0x530 [ 97.877478][ T1997] ____sys_sendmsg+0x5be/0x8f0 [ 97.882280][ T1997] ? __sys_sendmsg_sock+0x40/0x40 [ 97.887444][ T1997] ? import_iovec+0x7c/0xb0 [ 97.891989][ T1997] ___sys_sendmsg+0x236/0x2e0 [ 97.896704][ T1997] ? __sys_sendmsg+0x280/0x280 [ 97.901499][ T1997] ? percpu_counter_add_batch+0x13c/0x160 [ 97.907260][ T1997] ? __fdget+0x1a1/0x230 [ 97.911534][ T1997] __x64_sys_sendmsg+0x201/0x2d0 [ 97.916506][ T1997] ? ___sys_sendmsg+0x2e0/0x2e0 [ 97.921388][ T1997] ? __kasan_check_write+0x14/0x20 [ 97.926535][ T1997] ? switch_fpu_return+0x15d/0x2c0 [ 97.931687][ T1997] x64_sys_call+0x4b/0x9a0 [ 97.936140][ T1997] do_syscall_64+0x4c/0xa0 [ 97.940591][ T1997] ? clear_bhb_loop+0x50/0xa0 [ 97.945297][ T1997] ? clear_bhb_loop+0x50/0xa0 [ 97.950000][ T1997] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.955929][ T1997] RIP: 0033:0x7f6225030e59 [ 97.960379][ T1997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.980019][ T1997] RSP: 002b:00007f6223a8a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.988471][ T1997] RAX: ffffffffffffffda RBX: 00007f62252b8fa0 RCX: 00007f6225030e59 [ 97.996473][ T1997] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000008 [ 98.004481][ T1997] RBP: 00007f62250c6e6f R08: 0000000000000000 R09: 0000000000000000 [ 98.012487][ T1997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.020500][ T1997] R13: 00007f62252b9038 R14: 00007f62252b8fa0 R15: 00007ffffb434af8 [ 98.028514][ T1997] [ 98.031559][ T1997] [ 98.033902][ T1997] Allocated by task 1997: [ 98.038246][ T1997] __kasan_kmalloc+0xd4/0x100 [ 98.042953][ T1997] __kmalloc+0x13d/0x2c0 [ 98.047225][ T1997] sk_prot_alloc+0xed/0x320 [ 98.051789][ T1997] sk_alloc+0x38/0x430 [ 98.055885][ T1997] pfkey_create+0x12a/0x650 [ 98.060428][ T1997] __sock_create+0x38d/0x7a0 [ 98.065057][ T1997] __sys_socket+0xec/0x190 [ 98.069508][ T1997] __x64_sys_socket+0x7a/0x90 [ 98.074222][ T1997] x64_sys_call+0x8c5/0x9a0 [ 98.078748][ T1997] do_syscall_64+0x4c/0xa0 [ 98.083186][ T1997] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.089109][ T1997] [ 98.091453][ T1997] The buggy address belongs to the object at ffff8881079a3000 [ 98.091453][ T1997] which belongs to the cache kmalloc-1k of size 1024 [ 98.105532][ T1997] The buggy address is located 1016 bytes inside of [ 98.105532][ T1997] 1024-byte region [ffff8881079a3000, ffff8881079a3400) [ 98.119014][ T1997] The buggy address belongs to the page: [ 98.124682][ T1997] page:ffffea00041e6800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1079a0 [ 98.135005][ T1997] head:ffffea00041e6800 order:3 compound_mapcount:0 compound_pincount:0 [ 98.143351][ T1997] flags: 0x4000000000010200(slab|head|zone=1) [ 98.149501][ T1997] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043080 [ 98.158111][ T1997] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 98.166709][ T1997] page dumped because: kasan: bad access detected [ 98.173136][ T1997] page_owner tracks the page as allocated [ 98.178866][ T1997] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 286, ts 21371052239, free_ts 21016133488 [ 98.197907][ T1997] post_alloc_hook+0x192/0x1b0 [ 98.202701][ T1997] prep_new_page+0x1c/0x110 [ 98.207229][ T1997] get_page_from_freelist+0x2c3a/0x2cd0 [ 98.212800][ T1997] __alloc_pages+0x1a2/0x460 [ 98.217415][ T1997] new_slab+0xa0/0x4d0 [ 98.221508][ T1997] ___slab_alloc+0x3ac/0x840 [ 98.226123][ T1997] __slab_alloc+0x49/0x90 [ 98.230476][ T1997] __kmalloc+0x16a/0x2c0 [ 98.234743][ T1997] __register_sysctl_table+0xeb/0x1240 [ 98.240233][ T1997] register_net_sysctl+0x21d/0x230 [ 98.245358][ T1997] neigh_sysctl_register+0x9a9/0xa90 [ 98.250664][ T1997] addrconf_sysctl_register+0xb3/0x1a0 [ 98.256137][ T1997] ipv6_add_dev+0xc09/0x1150 [ 98.260738][ T1997] addrconf_notify+0x582/0xe00 [ 98.265507][ T1997] raw_notifier_call_chain+0x90/0x100 [ 98.270894][ T1997] call_netdevice_notifiers+0x119/0x190 [ 98.276451][ T1997] page last free stack trace: [ 98.281125][ T1997] free_unref_page_prepare+0x5fa/0x600 [ 98.286594][ T1997] free_unref_page+0xae/0x540 [ 98.291280][ T1997] __free_pages+0x6c/0x100 [ 98.295707][ T1997] __free_slab+0xe5/0x1e0 [ 98.300048][ T1997] __unfreeze_partials+0x15a/0x190 [ 98.305177][ T1997] put_cpu_partial+0xc6/0x120 [ 98.309873][ T1997] __slab_free+0x1d4/0x290 [ 98.314297][ T1997] ___cache_free+0x104/0x120 [ 98.318899][ T1997] qlink_free+0x4d/0x90 [ 98.323072][ T1997] qlist_free_all+0x5f/0xb0 [ 98.327608][ T1997] kasan_quarantine_reduce+0x14a/0x170 [ 98.333082][ T1997] __kasan_slab_alloc+0x2f/0xe0 [ 98.337939][ T1997] slab_post_alloc_hook+0x4f/0x2b0 [ 98.343060][ T1997] kmem_cache_alloc+0xf7/0x260 [ 98.347837][ T1997] alloc_buffer_head+0x26/0x120 [ 98.352697][ T1997] alloc_page_buffers+0x16d/0x370 [ 98.357755][ T1997] [ 98.360087][ T1997] Memory state around the buggy address: [ 98.365838][ T1997] ffff8881079a3280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 98.373911][ T1997] ffff8881079a3300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 98.381978][ T1997] >ffff8881079a3380: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 98.390045][ T1997] ^ [ 98.398029][ T1997] ffff8881079a3400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 98.406200][ T1997] ffff8881079a3480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 98.414263][ T1997] ================================================================== [ 98.422328][ T1997] Disabling lock debugging due to kernel taint