last executing test programs: 13.40182954s ago: executing program 4 (id=2601): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x5, 0x1) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f00000000c0)=0x1e, 0x4) r5 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB]) socket$inet6_icmp(0xa, 0x2, 0x3a) close_range(r3, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0xc248, &(0x7f0000000240)={[{@nodelalloc}, {@resgid={'resgid', 0x3d, 0xee00}}, {@init_itable}]}, 0x83, 0x5f9, &(0x7f0000001200)="$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") r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newsa={0x140, 0x10, 0x1, 0x70bd26, 0x25dfdbfd, {{@in=@empty, @in6=@mcast1, 0x1, 0x390, 0x4e21, 0x5, 0x2, 0x0, 0x0, 0x3a}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x2008251d, 0x2, 0xfffffffffffffff8, 0x68}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0xb3}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x10) 10.337119558s ago: executing program 4 (id=2608): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000000)=@fragment={0x73, 0x0, 0x5, 0x1, 0x0, 0x1, 0x64}, 0x8) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000100)=0x3, 0x4) connect$inet6(r3, 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x10) unshare(0x28000600) syz_open_dev$loop(&(0x7f0000000100), 0x7, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) setreuid(0x0, 0xee00) openat$tun(0xffffffffffffff9c, 0x0, 0x50000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40000, 0x173) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000400)={[{@test_dummy_encryption_v1}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@nogrpid}, {@block_validity}], [{@permit_directio}, {@seclabel, 0x22}, {@euid_gt}]}, 0x0, 0x533, &(0x7f0000001b40)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 7.225718239s ago: executing program 4 (id=2612): execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000780)={[], 0x1000000}, 0x800) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)={0x10, 0x22, 0x201, 0x70bd2a, 0x25dfdbfb}, 0x10}], 0x1, 0x0, 0x0, 0x4040000}, 0x2040000) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x20, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400880, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000000)=@get={0x1, 0x0, 0x5}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYRES32, @ANYBLOB="0be465fe2f3c99a164717c50f7c7fd90e7d2577ed58b0bfb49efb60f55e8977ae47033f78b86d67528fb255e5148559e782f8bb5808c87735989e37ff90619cc40cb4febebb53a73a879d1", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r5, &(0x7f0000000640), &(0x7f0000000280)=@tcp6=r4}, 0x20) recvmmsg(r4, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x845af6a6}, {{0x0, 0x0, 0x0}, 0x1}, {{&(0x7f0000000940)=@sco, 0x80, &(0x7f0000000c00)=[{&(0x7f00000009c0)=""/133, 0x85}, {0x0}], 0x2}, 0x2d5}], 0x4, 0x10041, 0x0) 7.180023532s ago: executing program 0 (id=2613): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) r7 = openat$cgroup_procs(r5, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c40)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) write$cgroup_int(r9, &(0x7f0000000340)=0x1, 0x12) 6.243020046s ago: executing program 0 (id=2615): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000000)=@fragment={0x73, 0x0, 0x5, 0x1, 0x0, 0x1, 0x64}, 0x8) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000100)=0x3, 0x4) connect$inet6(r3, 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x10) unshare(0x28000600) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x7, 0x0) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, 0x0) setreuid(0x0, 0xee00) openat$tun(0xffffffffffffff9c, 0x0, 0x50000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40000, 0x173) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000400)={[{@test_dummy_encryption_v1}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@nogrpid}, {@block_validity}], [{@permit_directio}, {@seclabel, 0x22}, {@euid_gt}]}, 0x0, 0x533, &(0x7f0000001b40)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 6.070711706s ago: executing program 2 (id=2618): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'veth1_virt_wifi\x00'}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xb) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r4 = fsopen(&(0x7f0000001900)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) fcntl$dupfd(r4, 0x406, r5) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) setregid(0xffffffffffffffff, 0x0) read$FUSE(r3, &(0x7f0000001680)={0x2020}, 0x2020) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f00000001c0)={0x1, 0x1, 0x10000000000000a, 0x5}) 6.057237197s ago: executing program 4 (id=2619): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xb) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r4 = fsopen(&(0x7f0000001900)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) fcntl$dupfd(r4, 0x406, r5) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) setregid(0xffffffffffffffff, 0x0) read$FUSE(r3, &(0x7f0000001680)={0x2020}, 0x2020) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f00000001c0)={0x1, 0x1, 0x10000000000000a, 0x5}) 5.102514813s ago: executing program 0 (id=2620): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'veth1_virt_wifi\x00'}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xb) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r4 = fsopen(&(0x7f0000001900)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) fcntl$dupfd(r4, 0x406, r5) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) setregid(0xffffffffffffffff, 0x0) read$FUSE(r3, &(0x7f0000001680)={0x2020}, 0x2020) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f00000001c0)={0x1, 0x1, 0x10000000000000a, 0x5}) 4.957560671s ago: executing program 1 (id=2621): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route(r4, 0x0, 0x84) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00'}) socket$netlink(0x10, 0x3, 0x0) ioctl$FS_IOC_RESVSP(r3, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) 4.896115435s ago: executing program 2 (id=2622): ftruncate(0xffffffffffffffff, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4c21, 0x84, @mcast1, 0x5}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x540, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0x28) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40002000) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x7ffff000, 0x0) io_uring_setup(0x748d, &(0x7f0000000180)={0x0, 0x2c3f, 0x40, 0x21, 0xe7, 0x0, r5}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000000) setfsuid(0xee01) 3.922176992s ago: executing program 3 (id=2623): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4c21, 0x84, @mcast1, 0x5}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x540, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0x28) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40002000) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x7ffff000, 0x0) io_uring_setup(0x748d, &(0x7f0000000180)={0x0, 0x2c3f, 0x40, 0x21, 0xe7, 0x0, r5}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000000) setfsuid(0xee01) 3.826496417s ago: executing program 4 (id=2624): ftruncate(0xffffffffffffffff, 0x8800000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4c21, 0x84, @mcast1, 0x5}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x540, 0x4) 3.750382692s ago: executing program 1 (id=2625): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'veth1_virt_wifi\x00'}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xb) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r4 = fsopen(&(0x7f0000001900)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) fcntl$dupfd(r4, 0x406, r5) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) setregid(0xffffffffffffffff, 0x0) read$FUSE(r3, &(0x7f0000001680)={0x2020}, 0x2020) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f00000001c0)={0x1, 0x1, 0x10000000000000a, 0x5}) 3.711644193s ago: executing program 2 (id=2626): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x5, 0x1) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f00000000c0)=0x1e, 0x4) r5 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB]) socket$inet6_icmp(0xa, 0x2, 0x3a) close_range(r3, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0xc248, &(0x7f0000000240)={[{@nodelalloc}, {@resgid={'resgid', 0x3d, 0xee00}}, {@init_itable}]}, 0x83, 0x5f9, &(0x7f0000001200)="$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") r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newsa={0x140, 0x10, 0x1, 0x70bd26, 0x25dfdbfd, {{@in=@empty, @in6=@mcast1, 0x1, 0x390, 0x4e21, 0x5, 0x2, 0x0, 0x0, 0x3a}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x2008251d, 0x2, 0xfffffffffffffff8, 0x68}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0xb3}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x10) 3.127997427s ago: executing program 1 (id=2627): execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000780)={[], 0x1000000}, 0x800) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)={0x10, 0x22, 0x201, 0x70bd2a, 0x25dfdbfb}, 0x10}], 0x1, 0x0, 0x0, 0x4040000}, 0x2040000) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x20, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400880, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000000)=@get={0x1, 0x0, 0x5}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYRES32, @ANYBLOB="0be465fe2f3c99a164717c50f7c7fd90e7d2577ed58b0bfb49efb60f55e8977ae47033f78b86d67528fb255e5148559e782f8bb5808c87735989e37ff90619cc40cb4febebb53a73a879d1", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r5, &(0x7f0000000640), &(0x7f0000000280)=@tcp6=r4}, 0x20) recvmmsg(r4, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x845af6a6}, {{0x0, 0x0, 0x0}, 0x1}, {{&(0x7f0000000940)=@sco, 0x80, &(0x7f0000000c00)=[{&(0x7f00000009c0)=""/133, 0x85}, {0x0}], 0x2}, 0x2d5}], 0x4, 0x10041, 0x0) 3.096280119s ago: executing program 3 (id=2628): ftruncate(0xffffffffffffffff, 0x8800000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x540, 0x4) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40002000) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x7ffff000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000000) setfsuid(0xee01) 2.995261815s ago: executing program 0 (id=2629): execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000780)={[], 0x1000000}, 0x800) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)={0x10, 0x22, 0x201, 0x70bd2a, 0x25dfdbfb}, 0x10}], 0x1, 0x0, 0x0, 0x4040000}, 0x2040000) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x20, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400880, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000000)=@get={0x1, 0x0, 0x5}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYRES32, @ANYBLOB="0be465fe2f3c99a164717c50f7c7fd90e7d2577ed58b0bfb49efb60f55e8977ae47033f78b86d67528fb255e5148559e782f8bb5808c87735989e37ff90619cc40cb4febebb53a73a879d1", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r5, &(0x7f0000000640), &(0x7f0000000280)=@tcp6=r4}, 0x20) recvmmsg(r4, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x845af6a6}, {{0x0, 0x0, 0x0}, 0x1}, {{&(0x7f0000000940)=@sco, 0x80, &(0x7f0000000c00)=[{&(0x7f00000009c0)=""/133, 0x85}, {0x0}], 0x2}, 0x2d5}], 0x4, 0x10041, 0x0) 2.239923889s ago: executing program 4 (id=2630): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x5, 0x1) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f00000000c0)=0x1e, 0x4) r5 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB]) socket$inet6_icmp(0xa, 0x2, 0x3a) close_range(r3, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0xc248, &(0x7f0000000240)={[{@nodelalloc}, {@resgid={'resgid', 0x3d, 0xee00}}, {@init_itable}]}, 0x83, 0x5f9, &(0x7f0000001200)="$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") r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newsa={0x140, 0x10, 0x1, 0x70bd26, 0x25dfdbfd, {{@in=@empty, @in6=@mcast1, 0x1, 0x390, 0x4e21, 0x5, 0x2, 0x0, 0x0, 0x3a}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x2008251d, 0x2, 0xfffffffffffffff8, 0x68}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0xb3}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x10) 2.23935384s ago: executing program 1 (id=2631): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x5, 0x1) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f00000000c0)=0x1e, 0x4) r5 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB]) socket$inet6_icmp(0xa, 0x2, 0x3a) close_range(r3, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0xc248, &(0x7f0000000240)={[{@nodelalloc}, {@resgid={'resgid', 0x3d, 0xee00}}, {@init_itable}]}, 0x83, 0x5f9, &(0x7f0000001200)="$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") r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newsa={0x140, 0x10, 0x1, 0x70bd26, 0x25dfdbfd, {{@in=@empty, @in6=@mcast1, 0x1, 0x390, 0x4e21, 0x5, 0x2, 0x0, 0x0, 0x3a}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x2008251d, 0x2, 0xfffffffffffffff8, 0x68}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0xb3}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x10) 2.210204341s ago: executing program 2 (id=2632): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'veth1_virt_wifi\x00'}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xb) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r4 = fsopen(&(0x7f0000001900)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) fcntl$dupfd(r4, 0x406, r5) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) setregid(0xffffffffffffffff, 0x0) read$FUSE(r3, &(0x7f0000001680)={0x2020}, 0x2020) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f00000001c0)={0x1, 0x1, 0x10000000000000a, 0x5}) 2.104014047s ago: executing program 3 (id=2633): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'veth1_virt_wifi\x00'}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xb) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r4 = fsopen(&(0x7f0000001900)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) fcntl$dupfd(r4, 0x406, r5) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) setregid(0xffffffffffffffff, 0x0) read$FUSE(r3, &(0x7f0000001680)={0x2020}, 0x2020) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f00000001c0)={0x1, 0x1, 0x10000000000000a, 0x5}) 1.949489106s ago: executing program 0 (id=2634): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'veth1_virt_wifi\x00'}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xb) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r4 = fsopen(&(0x7f0000001900)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) fcntl$dupfd(r4, 0x406, r5) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) setregid(0xffffffffffffffff, 0x0) read$FUSE(r3, &(0x7f0000001680)={0x2020}, 0x2020) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f00000001c0)={0x1, 0x1, 0x10000000000000a, 0x5}) 1.37197393s ago: executing program 1 (id=2635): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x5, 0x1) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000000c0)=0x1e, 0x4) r4 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB]) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0xc248, &(0x7f0000000240)={[{@nodelalloc}, {@resgid={'resgid', 0x3d, 0xee00}}, {@init_itable}]}, 0x83, 0x5f9, &(0x7f0000001200)="$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") r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newsa={0x140, 0x10, 0x1, 0x70bd26, 0x25dfdbfd, {{@in=@empty, @in6=@mcast1, 0x1, 0x390, 0x4e21, 0x5, 0x2, 0x0, 0x0, 0x3a}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x2008251d, 0x2, 0xfffffffffffffff8, 0x68}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0xb3}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x10) 1.261486886s ago: executing program 2 (id=2636): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route(r4, 0x0, 0x84) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00'}) socket$netlink(0x10, 0x3, 0x0) ioctl$FS_IOC_RESVSP(r3, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) 550.057447ms ago: executing program 3 (id=2637): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'veth1_virt_wifi\x00'}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xb) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r2 = fsopen(&(0x7f0000001900)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) fcntl$dupfd(r2, 0x406, r3) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) setregid(0xffffffffffffffff, 0x0) read$FUSE(r1, &(0x7f0000001680)={0x2020}, 0x2020) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f00000001c0)={0x1, 0x1, 0x10000000000000a, 0x5}) 549.549648ms ago: executing program 3 (id=2638): ftruncate(0xffffffffffffffff, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4c21, 0x84, @mcast1, 0x5}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x540, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0x28) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40002000) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x7ffff000, 0x0) io_uring_setup(0x748d, &(0x7f0000000180)={0x0, 0x2c3f, 0x40, 0x21, 0xe7, 0x0, r5}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000000) setfsuid(0xee01) 506.46304ms ago: executing program 0 (id=2639): ftruncate(0xffffffffffffffff, 0x8800000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x540, 0x4) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0x28) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40002000) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x7ffff000, 0x0) io_uring_setup(0x748d, &(0x7f0000000180)={0x0, 0x2c3f, 0x40, 0x21, 0xe7, 0x0, r5}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000000) setfsuid(0xee01) 77.744275ms ago: executing program 1 (id=2640): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'veth1_virt_wifi\x00'}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xb) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r4 = fsopen(&(0x7f0000001900)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) fcntl$dupfd(r4, 0x406, r5) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) setregid(0xffffffffffffffff, 0x0) read$FUSE(r3, &(0x7f0000001680)={0x2020}, 0x2020) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f00000001c0)={0x1, 0x1, 0x10000000000000a, 0x5}) 77.305485ms ago: executing program 2 (id=2641): ftruncate(0xffffffffffffffff, 0x8800000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4c21, 0x84, @mcast1, 0x5}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x540, 0x4) 0s ago: executing program 3 (id=2642): execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000780)={[], 0x1000000}, 0x800) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)={0x10, 0x22, 0x201, 0x70bd2a, 0x25dfdbfb}, 0x10}], 0x1, 0x0, 0x0, 0x4040000}, 0x2040000) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x20, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400880, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000000)=@get={0x1, 0x0, 0x5}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYRES32, @ANYBLOB="0be465fe2f3c99a164717c50f7c7fd90e7d2577ed58b0bfb49efb60f55e8977ae47033f78b86d67528fb255e5148559e782f8bb5808c87735989e37ff90619cc40cb4febebb53a73a879d1", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r5, &(0x7f0000000640), &(0x7f0000000280)=@tcp6=r4}, 0x20) recvmmsg(r4, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x845af6a6}, {{0x0, 0x0, 0x0}, 0x1}, {{&(0x7f0000000940)=@sco, 0x80, &(0x7f0000000c00)=[{&(0x7f00000009c0)=""/133, 0x85}, {0x0}], 0x2}, 0x2d5}], 0x4, 0x10041, 0x0) kernel console output (not intermixed with test programs): 90.320577][ T3464] cgroup: Unknown subsys name 'euid<00000000000000000000' [ 294.392661][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 294.392678][ T30] audit: type=1400 audit(1769731231.210:950): avc: denied { ioctl } for pid=3481 comm="syz.2.865" path="socket:[25756]" dev="sockfs" ino=25756 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 294.555572][ T30] audit: type=1400 audit(1769731231.280:951): avc: denied { ioctl } for pid=3503 comm="syz.4.870" path="socket:[25758]" dev="sockfs" ino=25758 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 294.593760][ T30] audit: type=1326 audit(1769731231.350:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3500 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69e3bceb9 code=0x7ffc0000 [ 294.617910][ T30] audit: type=1326 audit(1769731231.350:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3500 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69e3bceb9 code=0x7ffc0000 [ 294.641338][ T30] audit: type=1326 audit(1769731231.350:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3500 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7fc69e3bceb9 code=0x7ffc0000 [ 294.664602][ T30] audit: type=1326 audit(1769731231.350:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3500 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69e3bceb9 code=0x7ffc0000 [ 294.687978][ T30] audit: type=1326 audit(1769731231.350:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3500 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69e3bceb9 code=0x7ffc0000 [ 295.337172][ T3524] netlink: 'syz.1.873': attribute type 4 has an invalid length. [ 295.345327][ T3524] netlink: 17 bytes leftover after parsing attributes in process `syz.1.873'. [ 297.440570][ T30] audit: type=1400 audit(1769731234.250:957): avc: denied { name_bind } for pid=3539 comm="syz.3.879" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 298.801764][ T30] audit: type=1326 audit(1769731235.620:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3553 comm="syz.2.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f342ceb9 code=0x7ffc0000 [ 298.827280][ T3554] netlink: 'syz.2.883': attribute type 27 has an invalid length. [ 298.979793][ T30] audit: type=1326 audit(1769731235.640:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3553 comm="syz.2.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f342ceb9 code=0x7ffc0000 [ 300.066160][ T3554] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.073494][ T3554] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.520906][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 300.520948][ T30] audit: type=1400 audit(1769731237.240:973): avc: denied { getopt } for pid=3561 comm="syz.4.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 300.666902][ T30] audit: type=1326 audit(1769731237.480:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3553 comm="syz.2.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f342ceb9 code=0x7ffc0000 [ 300.715711][ T30] audit: type=1326 audit(1769731237.510:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3553 comm="syz.2.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f342ceb9 code=0x7ffc0000 [ 300.799842][ T3559] device veth0_vlan left promiscuous mode [ 300.818172][ T3559] device veth0_vlan entered promiscuous mode [ 300.844595][ T3559] device veth1_macvtap left promiscuous mode [ 300.851746][ T3559] device veth1_macvtap entered promiscuous mode [ 300.861350][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 302.830092][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 302.849582][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 303.019280][ T332] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.026411][ T332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.362594][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 304.385876][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 304.638346][ T332] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.645474][ T332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.033259][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 305.041887][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 305.088286][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 305.096883][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 305.105413][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 305.106593][ T3604] overlayfs: failed to clone upperpath [ 305.114485][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 305.127485][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 305.791336][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 305.936428][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 306.192059][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 306.218157][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 306.252862][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 306.262514][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 306.271043][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 306.279626][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 306.288179][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 306.296868][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 306.305778][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 306.374251][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 306.382353][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 306.423962][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 306.432162][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 306.443438][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 306.451892][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 306.459794][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 306.483477][ T3592] device batadv_slave_1 entered promiscuous mode [ 306.490293][ T3601] device veth1_virt_wifi entered promiscuous mode [ 307.347302][ T3601] device veth1_virt_wifi left promiscuous mode [ 307.358876][ T3601] device batadv_slave_1 left promiscuous mode [ 307.989670][ T3636] loop3: detected capacity change from 0 to 512 [ 308.522818][ T3640] overlayfs: failed to clone upperpath [ 309.063203][ T3636] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 309.084952][ T3636] ext4 filesystem being mounted at /142/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.608784][ T3636] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 309.731816][ T3636] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 309.768445][ T3636] EXT4-fs error (device loop3): ext4_acquire_dquot:6201: comm syz.3.904: Failed to acquire dquot type 0 [ 310.330698][ T30] audit: type=1326 audit(1769731247.140:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3655 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0bb86eb9 code=0x7ffc0000 [ 310.354926][ T30] audit: type=1326 audit(1769731247.140:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3655 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0bb86eb9 code=0x7ffc0000 [ 310.379453][ T30] audit: type=1326 audit(1769731247.140:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3655 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f9c0bb86eb9 code=0x7ffc0000 [ 310.504083][ T30] audit: type=1326 audit(1769731247.140:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3655 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0bb86eb9 code=0x7ffc0000 [ 310.538862][ T30] audit: type=1326 audit(1769731247.140:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3655 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0bb86eb9 code=0x7ffc0000 [ 310.579537][ T30] audit: type=1326 audit(1769731247.140:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3655 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f9c0bb86eb9 code=0x7ffc0000 [ 310.637356][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 310.925070][ T30] audit: type=1326 audit(1769731247.140:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3655 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0bb86eb9 code=0x7ffc0000 [ 310.956898][ T3666] loop3: detected capacity change from 0 to 128 [ 310.975101][ T30] audit: type=1326 audit(1769731247.140:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3655 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0bb86eb9 code=0x7ffc0000 [ 311.014915][ T3663] netlink: 24 bytes leftover after parsing attributes in process `syz.0.910'. [ 311.158695][ T3663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.910'. [ 311.169774][ T3666] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 312.957898][ T3680] netlink: 104 bytes leftover after parsing attributes in process `syz.3.909'. [ 313.076105][ T3690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.917'. [ 313.194489][ T3690] netlink: 'syz.0.917': attribute type 27 has an invalid length. [ 313.231189][ T3696] loop3: detected capacity change from 0 to 256 [ 313.330134][ T3696] exfat: Unknown parameter '0x00000000000000030x0000000000000000' [ 313.972178][ T3700] lo: Caught tx_queue_len zero misconfig [ 314.052734][ T3704] usb usb8: usbfs: process 3704 (syz.3.920) did not claim interface 0 before use [ 314.338013][ T3703] netlink: 'syz.3.920': attribute type 6 has an invalid length. [ 319.151655][ T3742] netlink: 24 bytes leftover after parsing attributes in process `syz.1.932'. [ 319.338997][ T3743] netlink: 68 bytes leftover after parsing attributes in process `syz.3.930'. [ 319.397021][ T3742] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3742 comm=syz.1.932 [ 319.869891][ T3755] loop3: detected capacity change from 0 to 512 [ 319.883586][ T3753] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 320.238742][ T3755] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 320.951101][ T3755] ext4 filesystem being mounted at /148/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.017057][ T3755] __quota_error: 80 callbacks suppressed [ 321.017079][ T3755] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 321.052157][ T3755] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 321.062615][ T3755] EXT4-fs error (device loop3): ext4_acquire_dquot:6201: comm syz.3.935: Failed to acquire dquot type 0 [ 322.712659][ T30] audit: type=1400 audit(1769731258.780:1064): avc: denied { name_bind } for pid=3768 comm="syz.1.938" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 325.023600][ T3806] overlayfs: failed to clone upperpath [ 325.116526][ T3808] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 325.142366][ T30] audit: type=1400 audit(1769731261.864:1065): avc: denied { relabelto } for pid=3788 comm="syz.4.944" name="192" dev="tmpfs" ino=1135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 325.872813][ T30] audit: type=1400 audit(1769731261.864:1066): avc: denied { associate } for pid=3788 comm="syz.4.944" name="192" dev="tmpfs" ino=1135 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 326.089644][ T30] audit: type=1400 audit(1769731262.706:1067): avc: denied { write } for pid=493 comm="syz-executor" name="192" dev="tmpfs" ino=1135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 326.855602][ T30] audit: type=1400 audit(1769731262.706:1068): avc: denied { remove_name } for pid=493 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 327.362150][ T30] audit: type=1400 audit(1769731262.752:1069): avc: denied { rmdir } for pid=493 comm="syz-executor" name="192" dev="tmpfs" ino=1135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 328.641731][ T3835] overlayfs: failed to clone lowerpath [ 328.657584][ T3835] netlink: 72 bytes leftover after parsing attributes in process `syz.0.956'. [ 328.666687][ T3835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.956'. [ 335.466995][ T3866] netlink: 12 bytes leftover after parsing attributes in process `syz.4.964'. [ 335.705706][ T30] audit: type=1400 audit(1769731270.779:1070): avc: denied { create } for pid=3856 comm="syz.3.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 339.780652][ T30] audit: type=1400 audit(1769731275.569:1071): avc: denied { bind } for pid=3886 comm="syz.4.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 344.371063][ T30] audit: type=1400 audit(1769731279.489:1072): avc: denied { listen } for pid=3908 comm="syz.2.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 344.413924][ T3917] /dev/loop0: Can't open blockdev [ 345.297410][ T3921] netlink: 16 bytes leftover after parsing attributes in process `syz.2.978'. [ 345.947613][ T30] audit: type=1400 audit(1769731279.489:1073): avc: denied { accept } for pid=3908 comm="syz.2.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 346.170186][ T3929] device ip6gretap0 entered promiscuous mode [ 346.185661][ T3929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.980'. [ 346.794724][ T3929] device ip6gretap0 left promiscuous mode [ 347.425050][ T3944] cgroup: Unknown subsys name 'euid<00000000000000000000' [ 347.953019][ T3948] fuse: Bad value for 'fd' [ 350.127219][ T3951] netlink: 200 bytes leftover after parsing attributes in process `syz.0.982'. [ 352.909002][ T3971] overlayfs: missing 'lowerdir' [ 353.404551][ T3984] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3984 comm=syz.4.992 [ 357.052412][ T3986] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.061496][ T3986] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 357.101472][ T30] audit: type=1400 audit(1769731291.473:1074): avc: denied { map } for pid=3982 comm="syz.0.994" path="socket:[26988]" dev="sockfs" ino=26988 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 358.141941][ T30] audit: type=1400 audit(1769731291.473:1075): avc: denied { read } for pid=3982 comm="syz.0.994" path="socket:[26988]" dev="sockfs" ino=26988 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 359.445735][ T4001] overlayfs: missing 'lowerdir' [ 363.438902][ T677] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 363.447273][ T677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 363.512724][ T677] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 363.521351][ T677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 363.530733][ T677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 363.548025][ T677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 363.571400][ T677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 363.583353][ T677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 364.077139][ T4033] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1006'. [ 364.100620][ T4033] device gretap0 entered promiscuous mode [ 364.110015][ T4033] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1006'. [ 364.119443][ T4033] 0{X: renamed from gretap0 [ 364.169051][ T4033] device 30{X left promiscuous mode [ 364.176474][ T4033] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 366.489819][ T4048] overlayfs: missing 'lowerdir' [ 368.617933][ T30] audit: type=1326 audit(1769731304.549:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4067 comm="syz.4.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee0797deb9 code=0x7ffc0000 [ 368.671940][ T30] audit: type=1326 audit(1769731304.549:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4067 comm="syz.4.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee0797deb9 code=0x7ffc0000 [ 368.701250][ T30] audit: type=1326 audit(1769731304.577:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4067 comm="syz.4.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fee0797deb9 code=0x7ffc0000 [ 368.729460][ T30] audit: type=1326 audit(1769731304.577:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4067 comm="syz.4.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee0797deb9 code=0x7ffc0000 [ 368.798031][ T30] audit: type=1326 audit(1769731304.577:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4067 comm="syz.4.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee0797deb9 code=0x7ffc0000 [ 368.824571][ T30] audit: type=1326 audit(1769731304.577:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4067 comm="syz.4.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fee0797deb9 code=0x7ffc0000 [ 368.849135][ T30] audit: type=1326 audit(1769731304.577:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4067 comm="syz.4.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee0797deb9 code=0x7ffc0000 [ 368.873563][ T30] audit: type=1326 audit(1769731304.577:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4067 comm="syz.4.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee0797deb9 code=0x7ffc0000 [ 368.899638][ T30] audit: type=1326 audit(1769731304.577:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4067 comm="syz.4.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fee0797deb9 code=0x7ffc0000 [ 368.923602][ T30] audit: type=1326 audit(1769731304.680:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4067 comm="syz.4.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee0797deb9 code=0x7ffc0000 [ 368.952869][ T4083] xt_CONNSECMARK: invalid mode: 0 [ 369.944255][ T4097] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1022'. [ 369.953463][ T4097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1022'. [ 369.962460][ T4097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1022'. [ 369.971791][ T4097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1022'. [ 369.983558][ T4097] tipc: Enabled bearer , priority 10 [ 371.143094][ T4104] xt_CT: You must specify a L4 protocol and not use inversions on it [ 373.078152][ T4123] team_slave_1: Caught tx_queue_len zero misconfig [ 373.375194][ T4128] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1031'. [ 373.384571][ T4128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1031'. [ 374.653050][ T4134] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1033'. [ 374.662094][ T4134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1033'. [ 374.898366][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 374.898384][ T30] audit: type=1400 audit(1769731310.395:1095): avc: denied { nlmsg_read } for pid=4129 comm="syz.2.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 375.566549][ T4144] device ip6gretap0 entered promiscuous mode [ 375.976800][ T4140] device ip6gretap0 left promiscuous mode [ 376.716086][ T4151] SELinux: Context is not valid (left unmapped). [ 376.722909][ T30] audit: type=1400 audit(1769731312.126:1096): avc: denied { relabelto } for pid=4149 comm="syz.0.1037" name="blkio.bfq.io_serviced" dev="tmpfs" ino=1238 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 377.569771][ T30] audit: type=1400 audit(1769731312.126:1097): avc: denied { associate } for pid=4149 comm="syz.0.1037" name="blkio.bfq.io_serviced" dev="tmpfs" ino=1238 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="" [ 377.600285][ T30] audit: type=1400 audit(1769731312.154:1098): avc: denied { ioctl } for pid=4149 comm="syz.0.1037" path="/215/blkio.bfq.io_serviced" dev="tmpfs" ino=1238 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 377.703083][ T4168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1040'. [ 377.991609][ T30] audit: type=1400 audit(1769731312.659:1099): avc: denied { unlink } for pid=283 comm="syz-executor" name="blkio.bfq.io_serviced" dev="tmpfs" ino=1238 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 379.245595][ T30] audit: type=1400 audit(1769731314.474:1100): avc: denied { remount } for pid=4173 comm="syz.4.1044" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 380.139339][ T30] audit: type=1400 audit(1769731315.325:1101): avc: denied { unmount } for pid=493 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 381.438512][ T4208] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1054'. [ 382.679446][ T4220] netlink: 'syz.0.1057': attribute type 1 has an invalid length. [ 386.664610][ T30] audit: type=1400 audit(1769731321.424:1102): avc: denied { accept } for pid=4240 comm="syz.4.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 386.913338][ T4257] overlayfs: failed to clone upperpath [ 387.594234][ T30] audit: type=1326 audit(1769731322.191:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.4.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee0797deb9 code=0x7ffc0000 [ 389.131699][ T30] audit: type=1326 audit(1769731322.191:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.4.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee0797deb9 code=0x7ffc0000 [ 389.186455][ T30] audit: type=1326 audit(1769731322.191:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.4.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fee0797deb9 code=0x7ffc0000 [ 389.670334][ T30] audit: type=1326 audit(1769731322.191:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.4.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee0797deb9 code=0x7ffc0000 [ 389.761626][ T30] audit: type=1326 audit(1769731322.191:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.4.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee0797deb9 code=0x7ffc0000 [ 389.818800][ T30] audit: type=1326 audit(1769731322.191:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.4.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7fee0797deb9 code=0x7ffc0000 [ 389.886313][ T30] audit: type=1326 audit(1769731322.200:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.4.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee0797deb9 code=0x7ffc0000 [ 389.916945][ T30] audit: type=1326 audit(1769731322.200:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.4.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee0797deb9 code=0x7ffc0000 [ 390.877563][ T30] audit: type=1326 audit(1769731322.200:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.4.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fee0797deb9 code=0x7ffc0000 [ 391.050476][ T4285] device sit0 entered promiscuous mode [ 391.074225][ T4285] netlink: 'syz.2.1075': attribute type 1 has an invalid length. [ 391.117616][ T4285] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1075'. [ 391.936134][ T4282] sch_fq: defrate 4294967295 ignored. [ 392.367692][ T4312] cgroup: Unknown subsys name 'euid<00000000000000000000' [ 392.593941][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 392.594005][ T30] audit: type=1400 audit(1769731327.937:1137): avc: denied { read } for pid=4310 comm="syz.0.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 393.478733][ T4321] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1085'. [ 400.332619][ T4377] cgroup: Unknown subsys name 'euid<00000000000000000000' [ 401.052033][ T4379] overlayfs: failed to clone upperpath [ 407.147878][ T4411] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1108'. [ 407.157256][ T4411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1108'. [ 407.166331][ T4411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1108'. [ 407.175428][ T4411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1108'. [ 408.101892][ T4417] cgroup: Unknown subsys name 'euid<00000000000000000000' [ 413.074414][ T30] audit: type=1400 audit(1769731346.981:1138): avc: denied { getopt } for pid=4455 comm="syz.0.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 413.468905][ T4483] cgroup: Unknown subsys name 'euid<00000000000000000000' [ 416.484883][ T4506] netlink: 'syz.2.1138': attribute type 22 has an invalid length. [ 416.591756][ T4506] netlink: 'syz.2.1138': attribute type 22 has an invalid length. [ 416.599635][ T4506] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1138'. [ 417.286911][ T30] audit: type=1400 audit(1769731351.041:1139): avc: denied { getopt } for pid=4495 comm="syz.4.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 418.159690][ T4517] batadv_slave_0: Caught tx_queue_len zero misconfig [ 418.192377][ T4517] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4517 comm=syz.1.1140 [ 423.093384][ T4534] cgroup: Unknown subsys name 'euid<00000000000000000000' [ 423.374404][ T30] audit: type=1400 audit(1769731357.765:1140): avc: denied { read } for pid=4546 comm="syz.4.1150" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 425.343862][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 426.403785][ T4574] device ip6gretap0 entered promiscuous mode [ 426.714025][ T4563] device ip6gretap0 left promiscuous mode [ 427.182796][ T4594] cgroup: Unknown subsys name 'euid<00000000000000000000' [ 427.227974][ T30] audit: type=1400 audit(1769731361.367:1141): avc: denied { getattr } for pid=4570 comm="syz.0.1154" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=28676 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 427.294313][ T4596] ip6tnl0: Caught tx_queue_len zero misconfig [ 427.960648][ T30] audit: type=1326 audit(1769731361.806:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.4.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee0797deb9 code=0x7ffc0000 [ 428.184866][ T30] audit: type=1326 audit(1769731361.816:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.4.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee0797deb9 code=0x7ffc0000 [ 428.263575][ T30] audit: type=1326 audit(1769731361.834:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.4.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fee0793e78e code=0x7ffc0000 [ 428.303795][ T30] audit: type=1326 audit(1769731362.059:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.4.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fee0793e78e code=0x7ffc0000 [ 429.081619][ T30] audit: type=1326 audit(1769731362.068:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.4.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fee0793e78e code=0x7ffc0000 [ 429.123561][ T4613] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1168'. [ 429.133023][ T4613] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1168'. [ 429.173251][ T30] audit: type=1326 audit(1769731362.068:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.4.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fee0793e78e code=0x7ffc0000 [ 429.207084][ T30] audit: type=1326 audit(1769731362.068:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.4.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fee0793e78e code=0x7ffc0000 [ 429.261657][ T30] audit: type=1326 audit(1769731362.068:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.4.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fee0793e78e code=0x7ffc0000 [ 429.285834][ T30] audit: type=1326 audit(1769731362.077:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.4.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fee0793e78e code=0x7ffc0000 [ 429.310423][ T30] audit: type=1326 audit(1769731362.077:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.4.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fee0793e78e code=0x7ffc0000 [ 429.334427][ T30] audit: type=1326 audit(1769731362.077:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.4.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fee0793e78e code=0x7ffc0000 [ 429.367055][ T30] audit: type=1326 audit(1769731362.077:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.4.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fee0793e78e code=0x7ffc0000 [ 429.412784][ T30] audit: type=1326 audit(1769731362.077:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.4.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fee0793e78e code=0x7ffc0000 [ 429.437266][ T30] audit: type=1326 audit(1769731362.077:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.4.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fee0793e78e code=0x7ffc0000 [ 431.375497][ T4645] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1173'. [ 431.478173][ T4647] cgroup: Unknown subsys name 'euid<00000000000000000000' [ 431.603490][ T4654] netlink: 'syz.0.1183': attribute type 27 has an invalid length. [ 431.620077][ T4654] bridge0: port 3(gretap0) entered disabled state [ 431.638656][ T4654] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.645951][ T4654] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.695910][ T4654] bridge2: port 3(vlan2) entered disabled state [ 431.711931][ T4654] bridge2: port 2(veth0_to_bond) entered disabled state [ 431.741637][ T4654] bridge2: port 1(veth3) entered disabled state [ 432.983667][ T4657] bridge0: port 3(gretap0) entered blocking state [ 432.990552][ T4657] bridge0: port 3(gretap0) entered forwarding state [ 433.016257][ T4657] device veth0_vlan left promiscuous mode [ 433.022485][ T4657] device veth0_vlan entered promiscuous mode [ 433.039852][ T4657] device veth1_macvtap left promiscuous mode [ 433.046875][ T4657] device veth1_macvtap entered promiscuous mode [ 433.062174][ T3496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 434.368341][ T3496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 434.495474][ T3496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 434.504149][ T3496] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 434.542589][ T30] kauditd_printk_skb: 145 callbacks suppressed [ 434.542609][ T30] audit: type=1326 audit(1769731368.167:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4674 comm="syz.3.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69e3bceb9 code=0x7ffc0000 [ 434.560385][ T3496] bridge2: port 3(vlan2) entered blocking state [ 434.579514][ T3496] bridge2: port 3(vlan2) entered forwarding state [ 434.605503][ T3496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 434.678115][ T3496] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.685284][ T3496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.697335][ T30] audit: type=1326 audit(1769731368.167:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4674 comm="syz.3.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69e3bceb9 code=0x7ffc0000 [ 434.756132][ T3496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 434.775747][ T3496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 434.786674][ T3496] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.793915][ T3496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.813644][ T30] audit: type=1326 audit(1769731368.223:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4674 comm="syz.3.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc69e3bceb9 code=0x7ffc0000 [ 434.841516][ T3496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 434.850223][ T3496] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 434.858549][ T30] audit: type=1326 audit(1769731368.223:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4674 comm="syz.3.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc69e3bceb9 code=0x7ffc0000 [ 434.907651][ T3496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 434.921977][ T3496] bridge2: port 2(veth0_to_bond) entered blocking state [ 434.929059][ T3496] bridge2: port 2(veth0_to_bond) entered forwarding state [ 434.937553][ T4696] cgroup: Unknown subsys name 'euid<00000000000000000000' [ 434.945467][ T3496] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 434.953968][ T3496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 434.962601][ T3496] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 434.971442][ T3496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 434.980073][ T3496] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 434.988347][ T3496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 434.996917][ T3496] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 435.005503][ T3496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 435.014543][ T3496] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 435.023460][ T3496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 435.032256][ T3496] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 435.040691][ T3496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 435.100432][ T3496] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 435.108670][ T3496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 435.116872][ T3496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 435.125777][ T3496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 435.134389][ T3496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 435.142787][ T3496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 435.151243][ T3496] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 435.159199][ T3496] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 435.166797][ T3496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 435.175242][ T3496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 435.183554][ T3496] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 435.191309][ T3496] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 435.198852][ T3496] bridge2: port 1(veth3) entered blocking state [ 435.205264][ T3496] bridge2: port 1(veth3) entered forwarding state [ 435.212168][ T3496] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 435.223069][ T4671] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1187'. [ 435.625570][ T3496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge2: link becomes ready [ 437.274664][ T4730] overlayfs: failed to clone lowerpath [ 438.311319][ T4737] cgroup: Unknown subsys name 'euid<00000000000000000000' [ 438.467226][ T4749] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1211'. [ 438.942788][ T4752] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1219'. [ 439.020468][ T4749] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4749 comm=syz.2.1211 [ 443.549711][ T4785] cgroup: Unknown subsys name 'euid<00000000000000000000' [ 446.196239][ T4808] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1227'. [ 446.300414][ T4802] device ip6gretap0 entered promiscuous mode [ 446.311918][ T4802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1225'. [ 446.327876][ T4802] device ip6gretap0 left promiscuous mode [ 449.604805][ T4840] cgroup: Unknown subsys name 'euid<00000000000000000000' [ 452.591982][ T4845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1236'. [ 456.322934][ T4883] cgroup: Unknown subsys name 'euid<00000000000000000000' [ 456.651917][ T4890] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1250'. [ 456.661025][ T4890] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1250'. [ 456.670126][ T4890] netlink: 'syz.3.1250': attribute type 5 has an invalid length. [ 456.677958][ T4890] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1250'. [ 456.688986][ T4890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1250'. [ 458.366886][ T4912] overlayfs: missing 'lowerdir' [ 458.691351][ T4926] cgroup: Unknown subsys name 'euid<00000000000000000000' [ 459.340634][ T30] audit: type=1400 audit(1769731391.281:1305): avc: denied { create } for pid=4916 comm="syz.4.1261" name="cgroup.freeze" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 461.590621][ T4965] cgroup: Unknown subsys name 'euid<00000000000000000000' [ 466.631842][ T5019] cgroup: Unknown subsys name 'euid<00000000000000000000' [ 468.758006][ T5042] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1292'. [ 476.747032][ T5097] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1306'. [ 477.422569][ T30] audit: type=1400 audit(1769731408.324:1306): avc: denied { read } for pid=5106 comm="syz.4.1311" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 477.687688][ T30] audit: type=1400 audit(1769731408.389:1307): avc: denied { open } for pid=5106 comm="syz.4.1311" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 478.448131][ T30] audit: type=1400 audit(1769731409.268:1308): avc: denied { write } for pid=5106 comm="syz.4.1311" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 480.498571][ T5146] overlayfs: missing 'lowerdir' [ 480.832063][ T5149] overlayfs: failed to clone upperpath [ 488.890675][ T5204] overlayfs: failed to clone upperpath [ 491.574602][ T30] audit: type=1326 audit(1769731421.550:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5227 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0bb86eb9 code=0x7ffc0000 [ 491.606891][ T5228] netlink: 'syz.1.1344': attribute type 27 has an invalid length. [ 491.631342][ T30] audit: type=1326 audit(1769731421.588:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5227 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0bb86eb9 code=0x7ffc0000 [ 491.658632][ T30] audit: type=1326 audit(1769731421.588:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5227 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f9c0bb86eb9 code=0x7ffc0000 [ 491.691021][ T30] audit: type=1326 audit(1769731421.588:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5227 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0bb86eb9 code=0x7ffc0000 [ 491.752693][ T30] audit: type=1326 audit(1769731421.588:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5227 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0bb86eb9 code=0x7ffc0000 [ 491.780875][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.788270][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.083785][ T30] audit: type=1326 audit(1769731421.588:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5227 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9c0bb86eb9 code=0x7ffc0000 [ 492.263368][ T30] audit: type=1326 audit(1769731421.588:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5227 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0bb86eb9 code=0x7ffc0000 [ 492.307614][ T30] audit: type=1326 audit(1769731421.588:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5227 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0bb86eb9 code=0x7ffc0000 [ 492.334945][ T30] audit: type=1326 audit(1769731421.588:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5227 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9c0bb86eb9 code=0x7ffc0000 [ 494.591178][ T30] audit: type=1326 audit(1769731421.588:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5227 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0bb86eb9 code=0x7ffc0000 [ 494.656295][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 495.736747][ T5228] device veth0_vlan left promiscuous mode [ 495.749664][ T5228] device veth0_vlan entered promiscuous mode [ 495.757077][ T5228] device veth1_macvtap left promiscuous mode [ 495.764173][ T5228] device veth1_macvtap entered promiscuous mode [ 495.824032][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 495.898386][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 495.952946][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 495.974494][ T332] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.982232][ T332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.011455][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 496.024903][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 496.033400][ T332] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.040753][ T332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.053366][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 496.062589][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 496.071102][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 496.085536][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 496.169090][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 496.177467][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 496.186098][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 496.194650][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 496.202831][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 496.216025][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 496.225898][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 496.236275][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 496.272201][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 496.322529][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 496.420821][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 496.498773][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 496.531727][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 496.540217][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 496.548418][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 496.556471][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 496.564475][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 496.572117][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 496.580992][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 496.589778][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 496.597494][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 496.605506][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 496.618843][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 500.900780][ T5319] netlink: 'syz.4.1370': attribute type 27 has an invalid length. [ 500.929956][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 500.929974][ T30] audit: type=1326 audit(1769731430.287:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5314 comm="syz.4.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee0797deb9 code=0x7ffc0000 [ 500.973355][ T5319] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.980562][ T5319] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.988226][ T30] audit: type=1326 audit(1769731430.287:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5314 comm="syz.4.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fee0797deb9 code=0x7ffc0000 [ 501.509870][ T30] audit: type=1326 audit(1769731430.287:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5314 comm="syz.4.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee0797deb9 code=0x7ffc0000 [ 501.621239][ T30] audit: type=1326 audit(1769731430.287:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5314 comm="syz.4.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fee0797deb9 code=0x7ffc0000 [ 501.649488][ T30] audit: type=1326 audit(1769731430.287:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5314 comm="syz.4.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee0797deb9 code=0x7ffc0000 [ 501.708351][ T30] audit: type=1326 audit(1769731430.287:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5314 comm="syz.4.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fee0797deb9 code=0x7ffc0000 [ 501.855237][ T30] audit: type=1326 audit(1769731430.287:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5314 comm="syz.4.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee0797deb9 code=0x7ffc0000 [ 502.374776][ T30] audit: type=1326 audit(1769731430.287:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5314 comm="syz.4.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fee0797deb9 code=0x7ffc0000 [ 502.410868][ T30] audit: type=1326 audit(1769731430.287:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5314 comm="syz.4.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee0797deb9 code=0x7ffc0000 [ 502.869902][ T30] audit: type=1326 audit(1769731430.287:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5314 comm="syz.4.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fee0797deb9 code=0x7ffc0000 [ 510.320749][ T30] audit: type=1400 audit(1769731438.883:1337): avc: denied { map } for pid=5420 comm="syz.4.1400" path="/dev/ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 513.849029][ T20] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 517.116040][ T5474] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1417'. [ 517.125218][ T5474] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1417'. [ 517.134322][ T5474] netlink: 'syz.4.1417': attribute type 5 has an invalid length. [ 517.142243][ T5474] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1417'. [ 517.172333][ T5474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1417'. [ 521.739124][ T5523] cgroup: Unknown subsys name 'euid<00000000000000000000' [ 522.974932][ T5542] overlayfs: failed to clone upperpath [ 524.374756][ T5552] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1436'. [ 524.384269][ T5552] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1436'. [ 524.393454][ T5552] netlink: 'syz.0.1436': attribute type 5 has an invalid length. [ 524.402003][ T5552] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1436'. [ 524.424792][ T5552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1436'. [ 524.880470][ T5560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1437'. [ 527.545058][ T5596] overlayfs: failed to clone upperpath [ 527.642469][ T5599] cgroup: Unknown subsys name 'euid<00000000000000000000' [ 531.428506][ T5641] overlayfs: failed to clone upperpath [ 531.981782][ T5646] overlayfs: failed to clone upperpath [ 534.891608][ T5685] overlayfs: failed to clone upperpath [ 535.819609][ T5692] overlayfs: failed to clone upperpath [ 540.262519][ T5734] overlayfs: failed to clone upperpath [ 542.611908][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 542.627683][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 543.315199][ T5748] overlayfs: failed to clone upperpath [ 555.024098][ T30] audit: type=1400 audit(1769731480.873:1338): avc: denied { remount } for pid=5820 comm="syz.4.1508" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 556.581165][ T30] audit: type=1400 audit(1769731482.361:1339): avc: denied { unmount } for pid=493 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 556.891259][ T5845] overlayfs: failed to clone upperpath [ 558.105774][ T5863] overlayfs: failed to clone upperpath [ 562.305283][ T5900] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1527'. [ 562.639139][ T5907] overlayfs: failed to clone upperpath [ 563.036587][ T5915] overlayfs: failed to clone upperpath [ 566.950860][ T5962] overlayfs: failed to clone upperpath [ 568.058816][ T5974] overlayfs: failed to clone upperpath [ 572.634266][ T6015] overlayfs: failed to clone upperpath [ 572.644718][ T6010] overlayfs: failed to clone upperpath [ 574.308067][ T6033] overlayfs: failed to clone upperpath [ 574.344459][ T6035] overlayfs: failed to clone upperpath [ 580.560803][ T30] audit: type=1400 audit(1769731504.791:1340): avc: denied { lock } for pid=6092 comm="syz.4.1575" path="socket:[31644]" dev="sockfs" ino=31644 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 591.490841][ T6182] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1595'. [ 593.632964][ T6195] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1598'. [ 593.642152][ T6195] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1598'. [ 593.652458][ T6195] tipc: Started in network mode [ 593.657360][ T6195] tipc: Node identity 4246, cluster identity 4711 [ 593.663938][ T6195] tipc: Node number set to 16966 [ 602.884544][ T6272] overlayfs: missing 'lowerdir' [ 609.547427][ T6314] netlink: 'syz.2.1633': attribute type 1 has an invalid length. [ 609.557752][ T6314] overlayfs: failed to clone upperpath [ 609.570968][ T6308] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.578372][ T6308] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.586747][ T6308] device bridge_slave_0 entered promiscuous mode [ 609.593986][ T6308] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.601302][ T6308] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.608928][ T6308] device bridge_slave_1 entered promiscuous mode [ 609.700201][ T6308] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.708095][ T6308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.715707][ T6308] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.722799][ T6308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.804708][ T6318] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.812022][ T6318] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.819632][ T6318] device bridge_slave_0 entered promiscuous mode [ 609.832544][ T6318] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.839796][ T6318] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.847348][ T6318] device bridge_slave_1 entered promiscuous mode [ 609.871308][ T8] tipc: Left network mode [ 609.878252][ T2163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 609.885974][ T2163] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.893638][ T2163] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.914374][ T6325] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.921632][ T6325] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.929065][ T6325] device bridge_slave_0 entered promiscuous mode [ 609.936192][ T2163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 609.944498][ T2163] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.951552][ T2163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.970137][ T6325] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.977510][ T6325] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.985693][ T6325] device bridge_slave_1 entered promiscuous mode [ 609.999446][ T2163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 610.007826][ T2163] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.014886][ T2163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.054317][ T2163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 610.085887][ T2163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 610.149029][ T6325] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.156197][ T6325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.163636][ T6325] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.170893][ T6325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.184871][ T6308] device veth0_vlan entered promiscuous mode [ 610.226557][ T2163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 610.237443][ T2163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 610.247460][ T2163] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 610.272620][ T2163] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 610.280571][ T2163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 610.325070][ T2163] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.333156][ T2163] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.342644][ T6308] device veth1_macvtap entered promiscuous mode [ 610.403159][ T6318] device veth0_vlan entered promiscuous mode [ 610.416805][ T6318] device veth1_macvtap entered promiscuous mode [ 610.432776][ T2163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 610.442572][ T2163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 610.453112][ T2163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 610.462149][ T2163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 610.470947][ T2163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 610.479510][ T2163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 610.489543][ T2163] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 610.498802][ T2163] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 610.511945][ T2163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 610.522222][ T2163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 610.531304][ T2163] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.538413][ T2163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.571177][ T2163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 610.581862][ T2163] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.588990][ T2163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.601306][ T2163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 610.610744][ T2163] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.618666][ T2163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.690513][ T2163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 610.699436][ T2163] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.706552][ T2163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.714596][ T2163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 610.722936][ T2163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 610.731450][ T2163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 610.800037][ T2163] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 610.809318][ T2163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 610.818338][ T2163] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 610.829297][ T2163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 610.859701][ T6325] device veth0_vlan entered promiscuous mode [ 610.874847][ T6325] device veth1_macvtap entered promiscuous mode [ 610.895079][ T30] audit: type=1400 audit(1769731533.171:1341): avc: denied { mounton } for pid=6325 comm="syz-executor" path="/root/syzkaller.3U4MkM/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 610.957260][ T2163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 610.965536][ T2163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 610.973875][ T2163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 610.982414][ T2163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 610.990843][ T2163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 610.999941][ T2163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 611.008417][ T2163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 611.365975][ T2163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 611.376328][ T2163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 611.389002][ T2163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 611.398359][ T2163] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 611.408291][ T2163] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 611.419541][ T2163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 611.430501][ T2163] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 611.440476][ T2163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 611.547328][ T8] bridge0: port 3(gretap0) entered disabled state [ 611.646399][ T8] device gretap0 left promiscuous mode [ 611.722243][ T8] bridge0: port 3(gretap0) entered disabled state [ 611.744839][ T2163] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 611.753077][ T2163] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 612.463812][ T6373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1632'. [ 612.472963][ T6373] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1632'. [ 612.508840][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.737691][ T8] device bridge_slave_0 left promiscuous mode [ 613.747362][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.772104][ T8] device vlan2 left promiscuous mode [ 613.777456][ T8] device veth1 left promiscuous mode [ 613.782995][ T8] bridge2: port 3(vlan2) entered disabled state [ 613.789836][ T8] device veth0_to_bond left promiscuous mode [ 613.807108][ T8] bridge2: port 2(veth0_to_bond) entered disabled state [ 613.833329][ T8] device veth3 left promiscuous mode [ 613.853467][ T8] bridge2: port 1(veth3) entered disabled state [ 613.874905][ T8] device bridge_slave_1 left promiscuous mode [ 613.884073][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.903360][ T8] device bridge_slave_0 left promiscuous mode [ 613.913618][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.940629][ T8] device veth1_macvtap left promiscuous mode [ 613.972184][ T8] device veth1_macvtap left promiscuous mode [ 613.978312][ T8] device veth0_vlan left promiscuous mode [ 614.094420][ T6394] loop4: detected capacity change from 0 to 40427 [ 614.279606][ T6394] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 614.287476][ T6394] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 614.299738][ T6394] F2FS-fs (loop4): invalid crc value [ 614.370182][ T6394] F2FS-fs (loop4): Found nat_bits in checkpoint [ 614.426044][ T6394] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 614.433239][ T6394] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 614.959405][ T4992] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 615.847775][ T6426] loop3: detected capacity change from 0 to 1024 [ 615.929215][ T6426] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 615.937967][ T6426] EXT4-fs (loop3): orphan cleanup on readonly fs [ 615.944954][ T6426] Quota error (device loop3): v2_read_file_info: Can't read info structure [ 615.953818][ T6426] EXT4-fs warning (device loop3): ext4_enable_quotas:6453: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 615.968537][ T6426] EXT4-fs (loop3): Cannot turn on quotas: error -5 [ 615.982325][ T4992] usb 5-1: unable to get BOS descriptor or descriptor too short [ 615.988901][ T6426] EXT4-fs (loop3): 1 truncate cleaned up [ 615.995842][ T6426] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,resgid=0x000000000000ee00,init_itable,,errors=continue. Quota mode: writeback. [ 616.332178][ T8] ------------[ cut here ]------------ [ 616.348699][ T8] WARNING: CPU: 0 PID: 8 at net/ipv6/xfrm6_tunnel.c:337 xfrm6_tunnel_net_exit+0xc0/0x130 [ 616.367497][ T4992] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 49919, setting to 1024 [ 616.397185][ T4992] usb 5-1: config 1 interface 1 has no altsetting 0 [ 616.484591][ T8] Modules linked in: [ 616.503435][ T8] CPU: 1 PID: 8 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 616.530842][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 616.636726][ T4992] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 616.654303][ T8] Workqueue: netns cleanup_net [ 616.660041][ T4992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.668527][ T4992] usb 5-1: Product: syz [ 616.672915][ T4992] usb 5-1: Manufacturer: syz [ 616.675972][ T8] RIP: 0010:xfrm6_tunnel_net_exit+0xc0/0x130 [ 616.678336][ T4992] usb 5-1: SerialNumber: syz [ 616.685040][ T8] Code: e8 b5 5d 71 fd 4b 83 3c 3e 00 75 19 e8 b9 32 32 fd 49 81 ff f8 07 00 00 74 1b e8 ab 32 32 fd 49 83 c7 08 eb c9 e8 a0 32 32 fd <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 616.995279][ T8] RSP: 0018:ffffc90000087c30 EFLAGS: 00010293 [ 617.019902][ T8] RAX: ffffffff84379650 RBX: ffff88811f30d000 RCX: ffff888100274f00 [ 617.028111][ T8] RDX: 0000000000000000 RSI: ffffc90000087a20 RDI: ffff888126890000 [ 617.046652][ T30] audit: type=1400 audit(1769731538.924:1342): avc: denied { read append open } for pid=6385 comm="syz.4.1644" path="/3/bus/freezer.state" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 617.047648][ T8] RBP: ffffc90000087c50 R08: 0000000000000003 R09: 0000000000000004 [ 617.107500][ T30] audit: type=1400 audit(1769731538.962:1343): avc: denied { lock } for pid=6385 comm="syz.4.1644" path="/3/bus/freezer.state" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 617.145335][ T8] R10: dffffc0000000000 R11: fffff52000010f24 R12: dffffc0000000000 [ 617.162220][ T8] R13: dffffc0000000000 R14: ffff888126890000 R15: 0000000000000000 [ 617.172897][ T30] audit: type=1400 audit(1769731538.962:1344): avc: denied { ioctl } for pid=6385 comm="syz.4.1644" path="/3/bus/freezer.state" dev="loop4" ino=10 ioctlcmd=0x620b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 617.206264][ T8] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 617.225709][ T8] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 617.232542][ T8] CR2: 000000110c2c5203 CR3: 000000013df01000 CR4: 00000000003506b0 [ 617.301088][ T8] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 617.319025][ T8] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 617.336325][ T8] Call Trace: [ 617.344190][ T8] [ 617.352782][ T8] cleanup_net+0x593/0xae0 [ 617.378749][ T8] ? ops_init+0x4a0/0x4a0 [ 617.405897][ T8] process_one_work+0x6be/0xba0 [ 617.420011][ T8] worker_thread+0xa59/0x1200 [ 618.115058][ T6453] netlink: 'syz.3.1657': attribute type 30 has an invalid length. [ 618.516153][ T8] kthread+0x411/0x500 [ 618.520592][ T8] ? worker_clr_flags+0x190/0x190 [ 618.525925][ T8] ? kthread_blkcg+0xd0/0xd0 [ 618.548257][ T8] ret_from_fork+0x1f/0x30 [ 618.553494][ T8] [ 619.067312][ T8] ---[ end trace c857b2393c068712 ]--- [ 619.073285][ T8] ------------[ cut here ]------------ [ 619.079219][ T8] WARNING: CPU: 1 PID: 8 at net/ipv6/xfrm6_tunnel.c:340 xfrm6_tunnel_net_exit+0x115/0x130 [ 619.103463][ T8] Modules linked in: [ 619.118562][ T8] CPU: 1 PID: 8 Comm: kworker/u4:0 Tainted: G W syzkaller #0 [ 619.202246][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 619.221235][ T8] Workqueue: netns cleanup_net [ 619.233086][ T8] RIP: 0010:xfrm6_tunnel_net_exit+0x115/0x130 [ 619.246105][ T8] Code: fd 4b 83 bc 3e 00 08 00 00 00 75 19 e8 64 32 32 fd 49 81 ff f8 07 00 00 74 1b e8 56 32 32 fd 49 83 c7 08 eb c5 e8 4b 32 32 fd <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 3b 32 32 fd 5b 41 5c 41 5e 41 [ 619.288089][ T8] RSP: 0018:ffffc90000087c30 EFLAGS: 00010293 [ 619.323784][ T8] RAX: ffffffff843796a5 RBX: ffff888126890800 RCX: ffff888100274f00 [ 619.332175][ T8] RDX: 0000000000000000 RSI: ffffc90000087a20 RDI: ffff888126890808 [ 619.340323][ T8] RBP: ffffc90000087c50 R08: 0000000000000003 R09: 0000000000000004 [ 619.348357][ T8] R10: dffffc0000000000 R11: fffff52000010f24 R12: dffffc0000000000 [ 619.367851][ T8] R13: dffffc0000000000 R14: ffff888126890000 R15: 0000000000000008 [ 620.709112][ T8] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 620.729479][ T8] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 620.740242][ T8] CR2: 0000200000317030 CR3: 0000000115913000 CR4: 00000000003506b0 [ 620.758856][ T8] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 620.767069][ T8] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 620.775125][ T8] Call Trace: [ 620.778468][ T8] [ 620.781479][ T8] cleanup_net+0x593/0xae0 [ 620.787362][ T8] ? ops_init+0x4a0/0x4a0 [ 620.791799][ T8] process_one_work+0x6be/0xba0 [ 620.796721][ T8] worker_thread+0xa59/0x1200 [ 620.801437][ T8] kthread+0x411/0x500 [ 620.805839][ T8] ? worker_clr_flags+0x190/0x190 [ 620.811085][ T8] ? kthread_blkcg+0xd0/0xd0 [ 620.950510][ T8] ret_from_fork+0x1f/0x30 [ 620.955356][ T8] [ 620.958403][ T8] ---[ end trace c857b2393c068713 ]--- [ 621.048550][ T8] ------------[ cut here ]------------ [ 621.071301][ T8] WARNING: CPU: 0 PID: 8 at net/xfrm/xfrm_state.c:2754 xfrm_state_fini+0x289/0x2e0 [ 621.088542][ T8] Modules linked in: [ 621.092834][ T8] CPU: 0 PID: 8 Comm: kworker/u4:0 Tainted: G W syzkaller #0 [ 621.101917][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 621.113156][ T8] Workqueue: netns cleanup_net [ 621.118148][ T8] RIP: 0010:xfrm_state_fini+0x289/0x2e0 [ 621.123915][ T8] Code: 43 80 3c 2c 00 74 08 48 89 df e8 02 f5 88 fd 48 8b 3b 44 89 f6 e8 d7 20 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f7 c9 49 fd <0f> 0b e9 e1 fd ff ff e8 eb c9 49 fd 0f 0b e9 49 fe ff ff e8 df c9 [ 621.162021][ T8] RSP: 0018:ffffc90000087c10 EFLAGS: 00010293 [ 621.177893][ T8] RAX: ffffffff841ffef9 RBX: ffff88811f30d000 RCX: ffff888100274f00 [ 621.188704][ T8] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888100274f00 [ 621.218507][ T8] RBP: ffffc90000087c38 R08: ffffffff86d85467 R09: 1ffffffff0db0a8c [ 621.237680][ T8] R10: dffffc0000000000 R11: fffffbfff0db0a8d R12: 1ffffffff0db0864 [ 621.889046][ T8] R13: dffffc0000000000 R14: ffff88811f30da80 R15: dffffc0000000000 [ 621.897698][ T8] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 621.927062][ T4992] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 622.025247][ T8] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 622.061014][ T4992] usb 5-1: found format II with max.bitrate = 2418, frame size=7 [ 622.186039][ T8] CR2: 00007f99f1e47d58 CR3: 000000013355d000 CR4: 00000000003506a0 [ 622.194221][ T8] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 622.202279][ T8] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 622.229375][ T8] Call Trace: [ 622.232726][ T8] [ 622.235774][ T8] xfrm_net_exit+0x25/0x60 [ 622.259718][ T8] cleanup_net+0x593/0xae0 [ 622.296622][ T8] ? ops_init+0x4a0/0x4a0 [ 622.320328][ T8] process_one_work+0x6be/0xba0 [ 622.336702][ T8] worker_thread+0xa59/0x1200 [ 622.344782][ T8] kthread+0x411/0x500 [ 622.365217][ T4992] usb 5-1: 2:1: All rates were zero [ 622.370932][ T8] ? worker_clr_flags+0x190/0x190 [ 622.376182][ T8] ? kthread_blkcg+0xd0/0xd0 [ 622.381110][ T8] ret_from_fork+0x1f/0x30 [ 623.749068][ T8] [ 623.752118][ T8] ---[ end trace c857b2393c068714 ]--- [ 623.803567][ T4992] usb 5-1: USB disconnect, device number 4 [ 623.937056][ T6513] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 625.304597][ T4992] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 626.533906][ T4992] usb 5-1: Using ep0 maxpacket: 16 [ 627.261225][ T4992] usb 5-1: unable to read config index 0 descriptor/all [ 627.289316][ T4992] usb 5-1: can't read configurations, error -71 [ 627.744356][ T6555] overlayfs: failed to clone upperpath [ 628.966747][ T6309] udevd[6309]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 629.495309][ T6576] loop4: detected capacity change from 0 to 512 [ 630.909984][ T6576] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 12 [ 635.783388][ T6640] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1703'. [ 635.941678][ T4992] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 636.529837][ T4992] usb 1-1: unable to get BOS descriptor or descriptor too short [ 636.633278][ T4992] usb 1-1: not running at top speed; connect to a high speed hub [ 636.776820][ T6650] loop4: detected capacity change from 0 to 256 [ 636.818415][ T4992] usb 1-1: config index 0 descriptor too short (expected 65442, got 162) [ 636.836600][ T6650] FAT-fs (loop4): Unrecognized mount option "shortnale=lower" or missing value [ 637.222847][ T4992] usb 1-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 637.231877][ T4992] usb 1-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 637.242434][ T4992] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 255 [ 638.321440][ T6672] loop4: detected capacity change from 0 to 512 [ 638.343956][ T6672] EXT4-fs (loop4): Ignoring removed orlov option [ 638.357342][ T6672] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1713: inode #1: comm syz.4.1713: iget: illegal inode # [ 638.421945][ T4992] usb 1-1: string descriptor 0 read error: -71 [ 639.311512][ T4992] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 639.322861][ T6672] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1713: error while reading EA inode 1 err=-117 [ 639.341242][ T4992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.346848][ T6684] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1714'. [ 639.359247][ T6672] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1713: inode #1: comm syz.4.1713: iget: illegal inode # [ 639.372981][ T6672] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1713: error while reading EA inode 1 err=-117 [ 639.491989][ T4992] usb 1-1: can't set config #1, error -71 [ 639.826355][ T4992] usb 1-1: USB disconnect, device number 2 [ 639.846051][ T6692] overlayfs: failed to clone upperpath [ 639.939371][ T6672] EXT4-fs (loop4): 1 orphan inode deleted [ 639.948647][ T6672] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,orlov,minixdf,i_version,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 640.899379][ T6697] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz.4.1713: deleted inode referenced: 15 [ 641.694693][ T6704] overlayfs: failed to clone upperpath [ 644.259003][ T60] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 646.178176][ T6744] loop0: detected capacity change from 0 to 1024 [ 646.353868][ T6744] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 646.362594][ T6744] EXT4-fs (loop0): orphan cleanup on readonly fs [ 646.375701][ T6744] Quota error (device loop0): v2_read_file_info: Can't read info structure [ 646.384669][ T6744] EXT4-fs warning (device loop0): ext4_enable_quotas:6453: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 646.399418][ T6744] EXT4-fs (loop0): Cannot turn on quotas: error -5 [ 646.468287][ T6744] EXT4-fs (loop0): 1 truncate cleaned up [ 646.474101][ T6744] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,resgid=0x000000000000ee00,init_itable,,errors=continue. Quota mode: writeback. [ 647.003513][ T6749] loop3: detected capacity change from 0 to 4096 [ 647.392548][ T6749] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 647.603894][ T6747] EXT4-fs (loop3): shut down requested (1) [ 647.700770][ T6749] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1728'. [ 647.788068][ T6749] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 647.870856][ T30] audit: type=1400 audit(1769731567.753:1345): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 647.893576][ T6747] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 647.895030][ T30] audit: type=1400 audit(1769731567.753:1346): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.001648][ T30] audit: type=1400 audit(1769731567.753:1347): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.048557][ T30] audit: type=1400 audit(1769731567.753:1348): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.078187][ T30] audit: type=1400 audit(1769731567.753:1349): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 648.137202][ T30] audit: type=1400 audit(1769731567.753:1350): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 648.164312][ T30] audit: type=1400 audit(1769731567.753:1351): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 648.327735][ T6769] loop0: detected capacity change from 0 to 1024 [ 648.393361][ T6772] loop3: detected capacity change from 0 to 512 [ 648.424443][ T6769] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 648.433232][ T6769] EXT4-fs (loop0): orphan cleanup on readonly fs [ 648.440153][ T6769] Quota error (device loop0): v2_read_file_info: Can't read info structure [ 648.448877][ T6769] EXT4-fs warning (device loop0): ext4_enable_quotas:6453: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 648.463479][ T6769] EXT4-fs (loop0): Cannot turn on quotas: error -5 [ 648.470611][ T6769] EXT4-fs (loop0): 1 truncate cleaned up [ 648.476396][ T6769] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,resgid=0x000000000000ee00,init_itable,,errors=continue. Quota mode: writeback. [ 648.514566][ T6772] EXT4-fs (loop3): orphan cleanup on readonly fs [ 648.522023][ T6772] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1733: bg 0: block 248: padding at end of block bitmap is not set [ 648.536848][ T6772] Quota error (device loop3): write_blk: dquota write failed [ 648.544345][ T6772] EXT4-fs error (device loop3): ext4_acquire_dquot:6201: comm syz.3.1733: Failed to acquire dquot type 1 [ 648.557159][ T6772] EXT4-fs (loop3): 1 truncate cleaned up [ 648.563175][ T6772] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 649.267718][ T6787] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1737'. [ 651.015019][ T6806] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 652.255502][ T1148] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 652.565606][ T1148] usb 1-1: Using ep0 maxpacket: 16 [ 652.875616][ T1148] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 652.891338][ T1148] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.920418][ T1148] usb 1-1: Product: syz [ 652.929269][ T1148] usb 1-1: Manufacturer: syz [ 652.999945][ T1148] usb 1-1: SerialNumber: syz [ 653.005949][ T1148] r8152-cfgselector 1-1: config 0 descriptor?? [ 654.201505][ T6824] loop4: detected capacity change from 0 to 1024 [ 654.915948][ T1148] r8152-cfgselector 1-1: Unknown version 0x0000 [ 655.026148][ T6829] tipc: Enabling of bearer rejected, failed to enable media [ 655.046369][ T6824] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 655.054886][ T6824] EXT4-fs (loop4): orphan cleanup on readonly fs [ 655.068875][ T6829] fuse: Unknown parameter 'gup_i' [ 655.104038][ T6824] __quota_error: 1 callbacks suppressed [ 655.104057][ T6824] Quota error (device loop4): v2_read_file_info: Can't read info structure [ 655.118560][ T6824] EXT4-fs warning (device loop4): ext4_enable_quotas:6453: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 655.133308][ T6824] EXT4-fs (loop4): Cannot turn on quotas: error -5 [ 655.140772][ T6824] EXT4-fs (loop4): 1 truncate cleaned up [ 655.146607][ T6824] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,resgid=0x000000000000ee00,init_itable,,errors=continue. Quota mode: writeback. [ 655.147033][ T1148] r8152-cfgselector 1-1: Unknown version 0x0000 [ 655.255113][ T1148] r8152-cfgselector 1-1: bad CDC descriptors [ 655.300049][ T6832] loop4: detected capacity change from 0 to 128 [ 655.354020][ T6833] cgroup: Unknown subsys name 'euid<00000000000000000000' [ 655.354547][ T6832] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 655.402983][ T30] audit: type=1400 audit(1769731574.806:1352): avc: denied { mount } for pid=6831 comm="syz.4.1749" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 656.818733][ T30] audit: type=1400 audit(1769731576.125:1353): avc: denied { unmount } for pid=6325 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 656.827920][ T1148] r8152-cfgselector 1-1: Unknown version 0x0000 [ 656.957823][ T1148] r8152-cfgselector 1-1: USB disconnect, device number 3 [ 657.980870][ T6851] netlink: 'syz.2.1753': attribute type 30 has an invalid length. [ 658.313549][ T6858] loop3: detected capacity change from 0 to 2048 [ 658.479338][ T6858] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 659.416519][ T6874] loop4: detected capacity change from 0 to 1024 [ 659.528760][ T6874] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 659.539729][ T6874] EXT4-fs (loop4): orphan cleanup on readonly fs [ 659.547922][ T6874] Quota error (device loop4): v2_read_file_info: Can't read info structure [ 659.556731][ T6874] EXT4-fs warning (device loop4): ext4_enable_quotas:6453: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 659.571617][ T6874] EXT4-fs (loop4): Cannot turn on quotas: error -5 [ 659.581886][ T6874] EXT4-fs (loop4): 1 truncate cleaned up [ 659.587611][ T6874] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,resgid=0x000000000000ee00,init_itable,,errors=continue. Quota mode: writeback. [ 660.113096][ T6881] loop4: detected capacity change from 0 to 1024 [ 660.250277][ T6881] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 660.261916][ T6881] EXT4-fs (loop4): orphan cleanup on readonly fs [ 660.270060][ T6881] Quota error (device loop4): v2_read_file_info: Can't read info structure [ 660.279070][ T6881] EXT4-fs warning (device loop4): ext4_enable_quotas:6453: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 660.294108][ T6881] EXT4-fs (loop4): Cannot turn on quotas: error -5 [ 660.304532][ T6881] EXT4-fs (loop4): 1 truncate cleaned up [ 660.310596][ T6881] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,resgid=0x000000000000ee00,init_itable,,errors=continue. Quota mode: writeback. [ 660.432231][ T30] audit: type=1400 audit(1769731579.502:1354): avc: denied { remove_name } for pid=6855 comm="syz.3.1754" name="#21" dev="loop3" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 660.459958][ T6870] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 660.538626][ T6870] overlayfs: failed to set xattr on upper [ 660.546865][ T30] audit: type=1400 audit(1769731579.539:1355): avc: denied { rename } for pid=6855 comm="syz.3.1754" name="#21" dev="loop3" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 660.621378][ T677] tipc: Disabling bearer [ 660.631246][ T677] tipc: Disabling bearer [ 660.633774][ T30] audit: type=1400 audit(1769731579.539:1356): avc: denied { unlink } for pid=6855 comm="syz.3.1754" name="#21" dev="loop3" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 660.670136][ T677] tipc: Left network mode [ 660.686948][ T30] audit: type=1400 audit(1769731579.539:1357): avc: denied { unlink } for pid=6855 comm="syz.3.1754" name="#22" dev="loop3" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 661.132785][ T6893] loop4: detected capacity change from 0 to 512 [ 661.286961][ T6893] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1763: inode has both inline data and extents flags [ 661.300996][ T6893] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1763: couldn't read orphan inode 15 (err -117) [ 661.321899][ T6893] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 661.342573][ T6896] loop0: detected capacity change from 0 to 1024 [ 661.384073][ T30] audit: type=1400 audit(1769731580.390:1358): avc: denied { unlink } for pid=6318 comm="syz-executor" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 661.407193][ T30] audit: type=1400 audit(1769731580.390:1359): avc: denied { rmdir } for pid=6318 comm="syz-executor" name="work" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 661.451982][ T6896] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback. [ 666.083094][ T6918] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1767'. [ 666.272195][ T677] device vlan2 left promiscuous mode [ 666.409829][ T677] device veth1 left promiscuous mode [ 666.415584][ T677] bridge3: port 3(vlan2) entered disabled state [ 666.422670][ T677] device veth0_to_bond left promiscuous mode [ 666.428995][ T677] bridge3: port 2(veth0_to_bond) entered disabled state [ 666.448717][ T677] device veth3 left promiscuous mode [ 666.481719][ T677] bridge3: port 1(veth3) entered disabled state [ 666.518172][ T677] device bridge_slave_1 left promiscuous mode [ 666.524836][ T677] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.536539][ T6927] loop0: detected capacity change from 0 to 1024 [ 666.544598][ T6921] cgroup: Unknown subsys name 'euid<00000000000000000000' [ 666.555381][ T6927] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 666.566930][ T677] device bridge_slave_0 left promiscuous mode [ 666.573188][ T677] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.581813][ T6927] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 666.589089][ T6927] EXT4-fs (loop0): Ignoring removed nobh option [ 666.618425][ T6927] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 666.625727][ T6927] EXT4-fs (loop0): Unrecognized mount option "uid=00000000000000000000" or missing value [ 666.643543][ T6929] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1773'. [ 669.029563][ T6941] loop3: detected capacity change from 0 to 1024 [ 669.277697][ T6941] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 669.289394][ T6941] EXT4-fs (loop3): orphan cleanup on readonly fs [ 669.296703][ T6941] Quota error (device loop3): v2_read_file_info: Can't read info structure [ 669.305436][ T6941] EXT4-fs warning (device loop3): ext4_enable_quotas:6453: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 669.319949][ T6941] EXT4-fs (loop3): Cannot turn on quotas: error -5 [ 669.330506][ T6941] EXT4-fs (loop3): 1 truncate cleaned up [ 669.336246][ T6941] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,resgid=0x000000000000ee00,init_itable,,errors=continue. Quota mode: writeback. [ 670.241566][ T6953] loop4: detected capacity change from 0 to 16 [ 670.327214][ T6953] erofs: (device loop4): mounted with root inode @ nid 36. [ 670.352485][ T6953] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 670.385130][ T49] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4868] [ 670.405723][ T30] audit: type=1400 audit(1769731588.781:1360): avc: denied { read } for pid=6945 comm="syz.4.1778" name="file2" dev="loop4" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 670.951204][ T30] audit: type=1400 audit(1769731588.781:1361): avc: denied { open } for pid=6945 comm="syz.4.1778" path="/27/file2/file2" dev="loop4" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 671.790826][ T6967] cgroup: Unknown subsys name 'euid<00000000000000000000' [ 672.327682][ T30] audit: type=1400 audit(1769731590.633:1362): avc: denied { write } for pid=6961 comm="syz.1.1782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 672.379720][ T6977] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1785'. [ 672.584283][ T6984] overlayfs: failed to clone upperpath [ 673.147292][ T6988] loop3: detected capacity change from 0 to 1024 [ 673.190210][ T6988] EXT4-fs (loop3): Ignoring removed orlov option [ 673.452845][ T6988] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouid32,orlov,noquota,delalloc,journal_dev=0x0000000000000009,nodioread_nolock,,errors=continue. Quota mode: none. [ 673.471071][ T6988] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 673.505975][ T6988] EXT4-fs error (device loop3): ext4_map_blocks:740: inode #15: block 3: comm syz.3.1787: lblock 3 mapped to illegal pblock 3 (length 3) [ 673.520786][ T30] audit: type=1400 audit(1769731591.728:1363): avc: denied { write } for pid=6981 comm="syz.3.1787" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 673.544907][ T6988] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 673.557393][ T6988] EXT4-fs (loop3): This should not happen!! Data will be lost [ 673.557393][ T6988] [ 674.135027][ T677] EXT4-fs error (device loop3): ext4_map_blocks:740: inode #15: block 8: comm kworker/u4:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 674.192818][ T677] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 674.224687][ T677] EXT4-fs (loop3): This should not happen!! Data will be lost [ 674.224687][ T677] [ 674.485832][ T7005] loop0: detected capacity change from 0 to 1024 [ 674.859402][ T7008] cgroup: Unknown subsys name 'euid<00000000000000000000' [ 675.165532][ T7010] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1784'. [ 675.174528][ T7010] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1784'. [ 677.630434][ T7033] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1798'. [ 678.437024][ T7036] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1799'. [ 678.446593][ T7036] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1799'. [ 678.490748][ T30] audit: type=1326 audit(1769731596.339:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7021 comm="syz.2.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f342ceb9 code=0x7ffc0000 [ 678.541936][ T30] audit: type=1326 audit(1769731596.339:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7021 comm="syz.2.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f342ceb9 code=0x7ffc0000 [ 679.109181][ T7046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1801'. [ 679.348929][ T30] audit: type=1326 audit(1769731596.339:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7021 comm="syz.2.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f342ceb9 code=0x7ffc0000 [ 679.771020][ T30] audit: type=1326 audit(1769731596.339:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7021 comm="syz.2.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f342ceb9 code=0x7ffc0000 [ 679.795764][ T30] audit: type=1326 audit(1769731596.339:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7021 comm="syz.2.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f99f342ceb9 code=0x7ffc0000 [ 679.820582][ T30] audit: type=1326 audit(1769731596.339:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7021 comm="syz.2.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f342ceb9 code=0x7ffc0000 [ 679.890837][ T30] audit: type=1326 audit(1769731596.339:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7021 comm="syz.2.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f342ceb9 code=0x7ffc0000 [ 680.061122][ T7062] netlink: 'syz.1.1804': attribute type 30 has an invalid length. [ 680.491180][ T30] audit: type=1326 audit(1769731596.339:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7021 comm="syz.2.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f99f342ceb9 code=0x7ffc0000 [ 680.515004][ T30] audit: type=1326 audit(1769731596.339:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7021 comm="syz.2.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f342ceb9 code=0x7ffc0000 [ 681.065625][ T30] audit: type=1326 audit(1769731596.339:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7021 comm="syz.2.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f342ceb9 code=0x7ffc0000 [ 684.253945][ T7093] loop3: detected capacity change from 0 to 512 [ 684.480834][ T7095] loop0: detected capacity change from 0 to 1024 [ 684.626963][ T7095] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 684.635819][ T7095] EXT4-fs (loop0): orphan cleanup on readonly fs [ 684.642920][ T7095] __quota_error: 44 callbacks suppressed [ 684.642937][ T7095] Quota error (device loop0): v2_read_file_info: Can't read info structure [ 684.657641][ T7095] EXT4-fs warning (device loop0): ext4_enable_quotas:6453: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 684.672479][ T7095] EXT4-fs (loop0): Cannot turn on quotas: error -5 [ 684.680637][ T7095] EXT4-fs (loop0): 1 truncate cleaned up [ 684.686338][ T7095] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,resgid=0x000000000000ee00,init_itable,,errors=continue. Quota mode: writeback. [ 684.718414][ T7093] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 684.730051][ T7093] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 686.245553][ T30] audit: type=1400 audit(1769731602.522:1418): avc: denied { ioctl } for pid=7092 comm="syz.3.1813" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 688.175777][ T7122] hub 8-0:1.0: USB hub found [ 688.182207][ T7122] hub 8-0:1.0: 1 port detected [ 688.230686][ T7122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1815'. [ 690.143233][ T7133] netlink: 'syz.2.1819': attribute type 30 has an invalid length. [ 690.690505][ T7137] cgroup: Unknown subsys name 'euid<00000000000000000000' [ 690.736502][ T7134] cgroup: Need name or subsystem set [ 690.745833][ T30] audit: type=1400 audit(1769731606.909:1419): avc: denied { read } for pid=7128 comm="syz.3.1820" name="usbmon7" dev="devtmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 690.774868][ T30] audit: type=1400 audit(1769731606.909:1420): avc: denied { open } for pid=7128 comm="syz.3.1820" path="/dev/usbmon7" dev="devtmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 690.799591][ T30] audit: type=1400 audit(1769731607.105:1421): avc: denied { ioctl } for pid=7128 comm="syz.3.1820" path="/dev/usbmon7" dev="devtmpfs" ino=176 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 691.036544][ T30] audit: type=1400 audit(1769731607.854:1422): avc: denied { remount } for pid=7128 comm="syz.3.1820" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 691.102498][ T30] audit: type=1400 audit(1769731608.172:1423): avc: denied { getopt } for pid=7143 comm="syz.4.1824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 692.285418][ T7157] loop3: detected capacity change from 0 to 512 [ 692.495952][ T7157] EXT4-fs (loop3): orphan cleanup on readonly fs [ 692.505482][ T7157] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1825: bg 0: block 248: padding at end of block bitmap is not set [ 692.521840][ T7157] Quota error (device loop3): write_blk: dquota write failed [ 692.529502][ T7157] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 692.539751][ T7157] EXT4-fs error (device loop3): ext4_acquire_dquot:6201: comm syz.3.1825: Failed to acquire dquot type 1 [ 692.553768][ T7157] EXT4-fs (loop3): 1 truncate cleaned up [ 692.561830][ T7157] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 694.273406][ T30] audit: type=1326 audit(1769731611.109:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7168 comm="syz.2.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f342ceb9 code=0x7ffc0000 [ 694.729353][ T30] audit: type=1326 audit(1769731611.109:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7168 comm="syz.2.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f342ceb9 code=0x7ffc0000 [ 694.812151][ T30] audit: type=1326 audit(1769731611.109:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7168 comm="syz.2.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f99f342ceb9 code=0x7ffc0000 [ 695.085294][ T7191] cgroup: Unknown subsys name 'euid<00000000000000000000' [ 697.254237][ T1015] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 698.358508][ T1015] usb 1-1: unable to get BOS descriptor or descriptor too short [ 698.419178][ T1015] usb 1-1: not running at top speed; connect to a high speed hub [ 698.505933][ T1015] usb 1-1: config index 0 descriptor too short (expected 65442, got 162) [ 698.520894][ T1015] usb 1-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 698.553086][ T7230] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1853'. [ 698.562263][ T7230] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1853'. [ 698.571341][ T7230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1853'. [ 698.580273][ T7230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1853'. [ 698.666834][ T7230] tipc: Started in network mode [ 698.671759][ T7230] tipc: Node identity 7f000001, cluster identity 4711 [ 698.679042][ T7230] tipc: Enabled bearer , priority 10 [ 698.695740][ T1015] usb 1-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 698.716971][ T1015] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 255 [ 698.771140][ T7227] loop3: detected capacity change from 0 to 40427 [ 698.880381][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 698.885930][ T30] audit: type=1400 audit(1769731615.477:1454): avc: denied { getopt } for pid=7232 comm="syz.4.1845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 698.916160][ T7227] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 698.942364][ T1015] usb 1-1: language id specifier not provided by device, defaulting to English [ 700.003386][ T7248] loop0: detected capacity change from 0 to 512 [ 700.021605][ T7227] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 700.080746][ T4992] tipc: Node number set to 2130706433 [ 700.175497][ T7227] F2FS-fs (loop3): invalid crc value [ 700.587868][ T1015] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 700.677706][ T7227] F2FS-fs (loop3): Found nat_bits in checkpoint [ 700.685006][ T1015] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.740094][ T7248] EXT4-fs (loop0): Ignoring removed bh option [ 701.267640][ T1015] usb 1-1: can't set config #1, error -71 [ 701.306513][ T7248] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,min_batch_time=0x00000000000003a5,bh,,errors=continue. Quota mode: writeback. [ 701.327771][ T1015] usb 1-1: USB disconnect, device number 4 [ 701.352608][ T7267] loop4: detected capacity change from 0 to 512 [ 701.384639][ T7248] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 701.469724][ T7227] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 701.617195][ T7227] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 701.677972][ T7267] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1851: inode has both inline data and extents flags [ 701.692855][ T7267] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1851: couldn't read orphan inode 15 (err -117) [ 701.709422][ T30] audit: type=1400 audit(1769731618.115:1455): avc: denied { write } for pid=7247 comm="syz.0.1847" path="/46/bus/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 701.732639][ T7267] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 703.792709][ T7287] loop3: detected capacity change from 0 to 256 [ 703.838471][ T7287] exfat: Bad value for 'umask' [ 708.200082][ T7317] loop4: detected capacity change from 0 to 2048 [ 708.526231][ T6309] loop4: p2 p3 p7 [ 708.633615][ T7317] loop4: p2 p3 p7 [ 708.874091][ T7325] loop3: detected capacity change from 0 to 1024 [ 709.950595][ T7327] loop0: detected capacity change from 0 to 512 [ 710.030032][ T101] loop4: p2 p3 p7 [ 710.042746][ T7327] EXT4-fs (loop0): orphan cleanup on readonly fs [ 710.052411][ T7327] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1864: bg 0: block 248: padding at end of block bitmap is not set [ 710.068370][ T7327] Quota error (device loop0): write_blk: dquota write failed [ 710.075996][ T7327] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 710.086209][ T7327] EXT4-fs error (device loop0): ext4_acquire_dquot:6201: comm syz.0.1864: Failed to acquire dquot type 1 [ 710.100293][ T7327] EXT4-fs (loop0): 1 truncate cleaned up [ 710.107032][ T7327] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 710.241079][ T7325] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 710.249738][ T7325] EXT4-fs (loop3): orphan cleanup on readonly fs [ 710.256849][ T7325] Quota error (device loop3): v2_read_file_info: Can't read info structure [ 710.265627][ T7325] EXT4-fs warning (device loop3): ext4_enable_quotas:6453: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 710.280174][ T7325] EXT4-fs (loop3): Cannot turn on quotas: error -5 [ 710.288082][ T7325] EXT4-fs (loop3): 1 truncate cleaned up [ 710.293852][ T7325] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,resgid=0x000000000000ee00,init_itable,,errors=continue. Quota mode: writeback. [ 711.570721][ T6516] udevd[6516]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 711.589282][ T7338] udevd[7338]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 711.621733][ T6309] udevd[6309]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 711.706016][ T39] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 711.810902][ T6516] udevd[6516]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 711.830865][ T7338] udevd[7338]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 711.842111][ T6309] udevd[6309]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 712.005564][ T7349] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1872'. [ 712.016245][ T39] usb 5-1: Using ep0 maxpacket: 32 [ 712.100892][ T7338] udevd[7338]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 712.120785][ T6516] udevd[6516]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 712.144446][ T39] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 712.205927][ T6309] udevd[6309]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 712.797023][ T7358] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1869'. [ 712.806295][ T7358] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1869'. [ 713.405532][ T30] audit: type=1400 audit(1769731629.013:1456): avc: denied { read } for pid=7353 comm="syz.0.1874" name="loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 713.438117][ T30] audit: type=1400 audit(1769731629.013:1457): avc: denied { open } for pid=7353 comm="syz.0.1874" path="/dev/loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 713.463559][ T30] audit: type=1400 audit(1769731629.013:1458): avc: denied { ioctl } for pid=7353 comm="syz.0.1874" path="/dev/loop-control" dev="devtmpfs" ino=115 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 713.733688][ T39] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 713.860476][ T30] audit: type=1400 audit(1769731629.087:1459): avc: denied { create } for pid=7353 comm="syz.0.1874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 713.870317][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.896163][ T39] usb 5-1: Product: syz [ 713.901352][ T39] usb 5-1: Manufacturer: syz [ 713.906087][ T39] usb 5-1: SerialNumber: syz [ 713.970063][ T39] usb 5-1: config 0 descriptor?? [ 714.057951][ T39] usb 5-1: can't set config #0, error -71 [ 714.074245][ T39] usb 5-1: USB disconnect, device number 8 [ 714.089707][ T7372] loop4: detected capacity change from 0 to 256 [ 714.102446][ T7372] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 714.113293][ T7372] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 714.126553][ T7372] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 715.952171][ T7397] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1884'. [ 720.206388][ T7430] loop3: detected capacity change from 0 to 1024 [ 720.426139][ T7430] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 720.434757][ T7430] EXT4-fs (loop3): orphan cleanup on readonly fs [ 720.441573][ T7430] Quota error (device loop3): v2_read_file_info: Can't read info structure [ 720.450281][ T7430] EXT4-fs warning (device loop3): ext4_enable_quotas:6453: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 720.464791][ T7430] EXT4-fs (loop3): Cannot turn on quotas: error -5 [ 720.472112][ T7430] EXT4-fs (loop3): 1 truncate cleaned up [ 720.477853][ T7430] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,resgid=0x000000000000ee00,init_itable,,errors=continue. Quota mode: writeback. [ 720.577402][ T7437] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1896'. [ 721.461250][ T30] audit: type=1400 audit(1769731636.599:1460): avc: denied { mount } for pid=7450 comm="syz.2.1899" name="/" dev="ramfs" ino=37321 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 725.611842][ T7504] loop3: detected capacity change from 0 to 512 [ 725.879832][ T7513] loop4: detected capacity change from 0 to 512 [ 726.173529][ T7513] EXT4-fs (loop4): orphan cleanup on readonly fs [ 726.258535][ T7513] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1913: bg 0: block 248: padding at end of block bitmap is not set [ 726.328663][ T7513] Quota error (device loop4): write_blk: dquota write failed [ 726.337119][ T7513] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 726.347853][ T7513] EXT4-fs error (device loop4): ext4_acquire_dquot:6201: comm syz.4.1913: Failed to acquire dquot type 1 [ 726.426426][ T7513] EXT4-fs (loop4): 1 truncate cleaned up [ 726.455103][ T7513] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 728.153283][ T7504] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1912: inode has both inline data and extents flags [ 728.315406][ T7504] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1912: couldn't read orphan inode 15 (err -117) [ 728.338828][ T7504] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsdgroups,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue. Quota mode: none. [ 730.711083][ T30] audit: type=1400 audit(1769731643.811:1461): avc: denied { create } for pid=7503 comm="syz.3.1912" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 730.734069][ T30] audit: type=1400 audit(1769731643.839:1462): avc: denied { write } for pid=7503 comm="syz.3.1912" name=E91F7189591E9233614B dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 730.757890][ T30] audit: type=1326 audit(1769731644.054:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7503 comm="syz.3.1912" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f554bc5beb9 code=0x0 [ 736.536177][ T39] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 738.105001][ T7609] loop3: detected capacity change from 0 to 1024 [ 738.189858][ T7620] printk: syz.2.1938 (7620): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 738.207002][ T7620] overlayfs: failed to resolve './file0': -2 [ 739.782412][ T7609] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 739.791122][ T7609] EXT4-fs (loop3): orphan cleanup on readonly fs [ 739.799470][ T7609] Quota error (device loop3): v2_read_file_info: Can't read info structure [ 739.808293][ T7609] EXT4-fs warning (device loop3): ext4_enable_quotas:6453: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 739.822811][ T7609] EXT4-fs (loop3): Cannot turn on quotas: error -5 [ 739.831958][ T7609] EXT4-fs (loop3): 1 truncate cleaned up [ 739.837687][ T7609] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,resgid=0x000000000000ee00,init_itable,,errors=continue. Quota mode: writeback. [ 740.550985][ T7644] loop4: detected capacity change from 0 to 256 [ 740.559685][ T7646] bridge0: port 3(vlan2) entered blocking state [ 740.566080][ T7646] bridge0: port 3(vlan2) entered disabled state [ 740.573926][ T7646] device vlan2 entered promiscuous mode [ 740.945298][ T7644] exfat: Bad value for 'umask' [ 746.193872][ T7678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1951'. [ 746.276871][ T7684] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1953'. [ 746.343549][ T334] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 746.452888][ T7692] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1952'. [ 748.656177][ T334] usb 5-1: device not accepting address 10, error -71 [ 749.638623][ T7729] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1964'. [ 749.827943][ T7731] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1965'. [ 751.218546][ T1015] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 751.411419][ T7742] futex_wake_op: syz.0.1968 tries to shift op by 144; fix this program [ 751.422697][ T30] audit: type=1400 audit(1769731664.614:1464): avc: denied { connect } for pid=7739 comm="syz.0.1968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 751.630140][ T7753] overlayfs: failed to resolve './file0': -2 [ 751.759737][ T7754] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1971'. [ 753.485496][ T1015] usb 4-1: unable to get BOS descriptor or descriptor too short [ 754.455567][ T7775] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.462993][ T7775] device bridge0 entered promiscuous mode [ 754.469436][ T7775] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 754.685383][ T1015] usb 4-1: not running at top speed; connect to a high speed hub [ 754.757093][ T1015] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 754.764728][ T1015] usb 4-1: can't read configurations, error -71 [ 755.592628][ T7792] loop4: detected capacity change from 0 to 512 [ 755.788326][ T7792] EXT4-fs (loop4): orphan cleanup on readonly fs [ 755.797920][ T7792] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1979: bg 0: block 248: padding at end of block bitmap is not set [ 755.814252][ T7792] Quota error (device loop4): write_blk: dquota write failed [ 755.821902][ T7792] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 755.831942][ T7792] EXT4-fs error (device loop4): ext4_acquire_dquot:6201: comm syz.4.1979: Failed to acquire dquot type 1 [ 755.845930][ T7792] EXT4-fs (loop4): 1 truncate cleaned up [ 755.853341][ T7792] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 759.095765][ T7822] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1988'. [ 759.106802][ T7822] device gretap0 entered promiscuous mode [ 759.149384][ T7822] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1988'. [ 759.158880][ T7822] 0{X: renamed from gretap0 [ 759.168589][ T7822] device 30{X left promiscuous mode [ 759.177708][ T7822] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 760.030233][ T7817] loop4: detected capacity change from 0 to 40427 [ 760.081484][ T7817] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 760.089342][ T7817] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 760.228194][ T7817] F2FS-fs (loop4): invalid crc value [ 761.120964][ T7817] F2FS-fs (loop4): Found nat_bits in checkpoint [ 761.210503][ T30] audit: type=1326 audit(1769731673.771:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7809 comm="syz.2.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f342ceb9 code=0x7ffc0000 [ 761.277677][ T30] audit: type=1326 audit(1769731673.837:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7809 comm="syz.2.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f342ceb9 code=0x7ffc0000 [ 761.310938][ T30] audit: type=1326 audit(1769731673.865:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7809 comm="syz.2.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f99f342ceb9 code=0x7ffc0000 [ 761.324512][ T7817] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 761.342816][ T1015] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 762.194374][ T7817] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 762.203532][ T30] audit: type=1326 audit(1769731673.865:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7809 comm="syz.2.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f342ceb9 code=0x7ffc0000 [ 762.303117][ T30] audit: type=1326 audit(1769731673.874:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7809 comm="syz.2.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f342ceb9 code=0x7ffc0000 [ 762.348778][ T7849] xt_CT: You must specify a L4 protocol and not use inversions on it [ 762.357290][ T30] audit: type=1400 audit(1769731674.595:1470): avc: denied { write } for pid=7839 comm="syz.0.1992" name="loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 762.396862][ T30] audit: type=1326 audit(1769731674.838:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7848 comm="syz.2.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f342ceb9 code=0x7ffc0000 [ 762.423104][ T30] audit: type=1326 audit(1769731674.838:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7848 comm="syz.2.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f342ceb9 code=0x7ffc0000 [ 762.448185][ T30] audit: type=1326 audit(1769731674.847:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7848 comm="syz.2.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f99f33ed78e code=0x7ffc0000 [ 762.477610][ T30] audit: type=1326 audit(1769731674.847:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7848 comm="syz.2.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f342ceb9 code=0x7ffc0000 [ 762.863318][ T1015] usb 4-1: unable to get BOS descriptor or descriptor too short [ 763.453230][ T7864] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 764.219955][ T7864] loop4: detected capacity change from 0 to 40427 [ 764.408736][ T1015] usb 4-1: not running at top speed; connect to a high speed hub [ 764.416813][ T7864] F2FS-fs (loop4): Invalid segment/section count (24 != 2 * 1) [ 764.424517][ T7864] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 764.434407][ T7864] F2FS-fs (loop4): fault_injection options not supported [ 764.445297][ T7864] F2FS-fs (loop4): invalid crc value [ 764.551109][ T7870] bridge0: port 4(gretap0) entered blocking state [ 764.557731][ T7870] bridge0: port 4(gretap0) entered disabled state [ 764.571299][ T7870] device gretap0 entered promiscuous mode [ 764.578575][ T7870] bridge0: port 4(gretap0) entered blocking state [ 764.585074][ T7870] bridge0: port 4(gretap0) entered forwarding state [ 764.779048][ T7864] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 764.792299][ T1015] usb 4-1: config index 0 descriptor too short (expected 65442, got 162) [ 764.817171][ T1015] usb 4-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 764.826910][ T1015] usb 4-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 764.837393][ T1015] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 255 [ 764.848259][ T7864] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 764.855407][ T7864] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 764.881221][ T1015] usb 4-1: language id specifier not provided by device, defaulting to English [ 765.093514][ T6325] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 765.141472][ T6325] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 765.153849][ T6325] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 766.110553][ T1015] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 766.520446][ T1015] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.238730][ T7903] loop4: detected capacity change from 0 to 256 [ 767.256636][ T1015] usb 4-1: can't set config #1, error -71 [ 767.263059][ T1015] usb 4-1: USB disconnect, device number 8 [ 767.703744][ T7903] exfat: Bad value for 'uid' [ 767.739099][ T7889] loop3: detected capacity change from 0 to 1024 [ 767.825720][ T7903] loop4: detected capacity change from 0 to 512 [ 767.865427][ T7889] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 767.875374][ T7903] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 768.043567][ T7903] EXT4-fs (loop4): 1 orphan inode deleted [ 768.059957][ T7889] EXT4-fs (loop3): orphan cleanup on readonly fs [ 768.066503][ T7903] EXT4-fs (loop4): 1 truncate cleaned up [ 768.087684][ T7903] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,max_dir_size_kb=0x00000000000000b9,jqfmt=vfsv0,quota,. Quota mode: writeback. [ 768.115907][ T7889] __quota_error: 71 callbacks suppressed [ 768.115925][ T7889] Quota error (device loop3): v2_read_file_info: Can't read info structure [ 768.153748][ T7889] EXT4-fs warning (device loop3): ext4_enable_quotas:6453: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 768.177269][ T7889] EXT4-fs (loop3): Cannot turn on quotas: error -5 [ 768.207012][ T7889] EXT4-fs (loop3): 1 truncate cleaned up [ 768.216882][ T7889] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,resgid=0x000000000000ee00,init_itable,,errors=continue. Quota mode: writeback. [ 768.473425][ T30] audit: type=1326 audit(1769731680.516:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7919 comm="syz.2.2010" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f99f342ceb9 code=0x0 [ 769.016686][ T7935] tmpfs: Unknown parameter 'nrYblocks' [ 770.787032][ T7955] netlink: 'syz.2.2016': attribute type 4 has an invalid length. [ 770.794907][ T7955] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2016'. [ 770.870361][ T7947] loop3: detected capacity change from 0 to 1024 [ 771.333224][ T1015] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 771.342797][ T7947] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 771.351479][ T7947] EXT4-fs (loop3): orphan cleanup on readonly fs [ 771.358475][ T7947] Quota error (device loop3): v2_read_file_info: Can't read info structure [ 771.367366][ T7947] EXT4-fs warning (device loop3): ext4_enable_quotas:6453: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 771.383101][ T7947] EXT4-fs (loop3): Cannot turn on quotas: error -5 [ 771.413431][ T7947] EXT4-fs (loop3): 1 truncate cleaned up [ 771.419136][ T7947] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,resgid=0x000000000000ee00,init_itable,,errors=continue. Quota mode: writeback. [ 771.583136][ T7964] overlayfs: failed to clone upperpath [ 771.711888][ T7965] loop3: detected capacity change from 0 to 512 [ 771.968980][ T1015] usb 1-1: unable to get BOS descriptor or descriptor too short [ 772.032604][ T1015] usb 1-1: not running at top speed; connect to a high speed hub [ 772.129538][ T1015] usb 1-1: config index 0 descriptor too short (expected 65442, got 162) [ 772.138513][ T1015] usb 1-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 772.150724][ T1015] usb 1-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 772.162382][ T1015] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 255 [ 772.204212][ T1015] usb 1-1: language id specifier not provided by device, defaulting to English [ 772.827354][ T1015] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 772.839357][ T1015] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.849387][ T1015] usb 1-1: SerialNumber: ц [ 773.069417][ T7982] loop4: detected capacity change from 0 to 1024 [ 773.089618][ T7982] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 773.157085][ T7982] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 773.169184][ T7982] EXT4-fs (loop4): Ignoring removed nobh option [ 773.175550][ T7982] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 773.178914][ T7985] overlayfs: failed to clone upperpath [ 773.184238][ T7982] EXT4-fs (loop4): Unrecognized mount option "uid=00000000000000000000" or missing value [ 773.188740][ T1015] usb 1-1: can't set config #1, error -71 [ 773.205572][ T1015] usb 1-1: USB disconnect, device number 6 [ 773.627632][ T7988] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 773.638898][ T30] audit: type=1400 audit(1769731685.408:1547): avc: denied { load_policy } for pid=7981 comm="syz.4.2026" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 773.639309][ T7988] SELinux: policydb magic number 0x6f6c does not match expected magic number 0xf97cff8c [ 773.669750][ T7988] SELinux: failed to load policy [ 773.993258][ T7992] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.007883][ T7992] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 774.535456][ T30] audit: type=1326 audit(1769731685.997:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7993 comm="syz.0.2028" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdf6c04deb9 code=0x0 [ 774.963933][ T8018] overlayfs: failed to clone upperpath [ 775.387633][ T8031] loop4: detected capacity change from 0 to 512 [ 775.455676][ T8031] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 775.533217][ T30] audit: type=1326 audit(1769731687.176:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8024 comm="syz.4.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7faee85eb9 code=0x7ffc0000 [ 775.586524][ T30] audit: type=1326 audit(1769731687.176:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8024 comm="syz.4.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7faee85eb9 code=0x7ffc0000 [ 775.629977][ T6] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 775.678768][ T30] audit: type=1326 audit(1769731687.176:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8024 comm="syz.4.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7faee85eb9 code=0x7ffc0000 [ 775.745491][ T30] audit: type=1326 audit(1769731687.176:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8024 comm="syz.4.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7faee85eb9 code=0x7ffc0000 [ 775.801409][ T30] audit: type=1326 audit(1769731687.176:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8024 comm="syz.4.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f7faee85eb9 code=0x7ffc0000 [ 775.846684][ T30] audit: type=1326 audit(1769731687.183:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8024 comm="syz.4.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7faee85eb9 code=0x7ffc0000 [ 775.891924][ T30] audit: type=1326 audit(1769731687.183:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8024 comm="syz.4.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7faee85eb9 code=0x7ffc0000 [ 775.958551][ T30] audit: type=1326 audit(1769731687.193:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8024 comm="syz.4.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7faee4678e code=0x7ffc0000 [ 776.095548][ T6] usb 1-1: unable to get BOS descriptor or descriptor too short [ 776.138353][ T6] usb 1-1: not running at top speed; connect to a high speed hub [ 776.199094][ T8044] loop4: detected capacity change from 0 to 512 [ 776.245216][ T6] usb 1-1: config index 0 descriptor too short (expected 65442, got 162) [ 776.272412][ T6] usb 1-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 776.368291][ T8044] EXT4-fs (loop4): orphan cleanup on readonly fs [ 776.378256][ T8044] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2040: bg 0: block 248: padding at end of block bitmap is not set [ 776.395615][ T8044] EXT4-fs error (device loop4): ext4_acquire_dquot:6201: comm syz.4.2040: Failed to acquire dquot type 1 [ 776.409935][ T8044] EXT4-fs (loop4): 1 truncate cleaned up [ 776.436879][ T6] usb 1-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 776.448638][ T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 255 [ 776.459682][ T8044] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 776.634465][ T6] usb 1-1: language id specifier not provided by device, defaulting to English [ 776.893376][ T8048] overlayfs: failed to clone upperpath [ 777.352988][ T8055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2043'. [ 777.365014][ T8055] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2043'. [ 777.623408][ T8060] loop4: detected capacity change from 0 to 256 [ 777.708675][ T8060] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 777.869450][ T6] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 777.879366][ T8061] exFAT-fs (loop4): hint_cluster is invalid (17) [ 777.882032][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.908280][ T6] usb 1-1: SerialNumber: ц [ 778.512172][ T8074] loop3: detected capacity change from 0 to 1024 [ 778.633630][ T8074] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 778.643925][ T8074] EXT4-fs (loop3): orphan cleanup on readonly fs [ 778.651367][ T8074] EXT4-fs warning (device loop3): ext4_enable_quotas:6453: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 778.665954][ T8074] EXT4-fs (loop3): Cannot turn on quotas: error -5 [ 778.674515][ T8074] EXT4-fs (loop3): 1 truncate cleaned up [ 778.680264][ T8074] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,resgid=0x000000000000ee00,init_itable,,errors=continue. Quota mode: writeback. [ 779.451887][ T6] usb 1-1: 0:2 : does not exist [ 779.517537][ T8095] loop3: detected capacity change from 0 to 512 [ 779.539901][ T6] usb 1-1: USB disconnect, device number 7 [ 779.585342][ T8095] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 779.622167][ T8095] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 780.693805][ T8110] overlayfs: failed to clone upperpath [ 783.026573][ T39] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 783.034762][ T1148] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 783.350851][ T1148] usb 5-1: Using ep0 maxpacket: 8 [ 783.356078][ T39] usb 4-1: Using ep0 maxpacket: 16 [ 783.703498][ T39] usb 4-1: unable to get BOS descriptor or descriptor too short [ 783.711254][ T1148] usb 5-1: unable to get BOS descriptor or descriptor too short [ 783.842729][ T39] usb 4-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 783.864103][ T1148] usb 5-1: config 9 has an invalid interface number: 5 but max is 0 [ 783.887056][ T39] usb 4-1: config 1 interface 0 has no altsetting 0 [ 783.901938][ T1148] usb 5-1: config 9 has no interface number 0 [ 783.952941][ T1148] usb 5-1: config 9 interface 5 altsetting 9 endpoint 0x9 has an invalid bInterval 181, changing to 7 [ 784.017857][ T1148] usb 5-1: config 9 interface 5 has no altsetting 0 [ 784.141528][ T39] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 784.150796][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.159115][ T39] usb 4-1: Product: syz [ 784.163780][ T39] usb 4-1: Manufacturer: 膬䯹䄰䞙㞌쐜쥙혟翶夼뜂쌴싵ꉄ鮅↣롱鋃䘲񲳝 [ 784.174768][ T39] usb 4-1: SerialNumber: syz [ 784.205682][ T1148] usb 5-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 784.214948][ T1148] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.223308][ T1148] usb 5-1: Product: syz [ 784.227623][ T1148] usb 5-1: Manufacturer: syz [ 784.232286][ T1148] usb 5-1: SerialNumber: syz [ 784.602500][ T39] usbhid 4-1:1.0: can't add hid device: -22 [ 784.613720][ T1148] usb 5-1: USB disconnect, device number 12 [ 784.619983][ T39] usbhid: probe of 4-1:1.0 failed with error -22 [ 784.637741][ T39] usb 4-1: USB disconnect, device number 9 [ 785.440276][ T8199] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2080'. [ 786.874952][ T8222] loop3: detected capacity change from 0 to 256 [ 786.892828][ T8222] exfat: Deprecated parameter 'utf8' [ 787.087110][ T8222] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 787.102563][ T8222] exFAT-fs (loop3): IO charset iso8859v-6XQVfAHU6wq8Aju֢3|s}X %ptDhd0L%j*϶jJXgzl3V(BB^Aa}Rסh/)6sIOdz!H> eꋸ not found [ 787.914049][ T8234] cgroup: Need name or subsystem set [ 788.154474][ T8237] loop3: detected capacity change from 0 to 1024 [ 788.213730][ T8237] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 788.222314][ T8237] EXT4-fs (loop3): orphan cleanup on readonly fs [ 788.230298][ T8237] __quota_error: 67 callbacks suppressed [ 788.230315][ T8237] Quota error (device loop3): v2_read_file_info: Can't read info structure [ 788.245434][ T8237] EXT4-fs warning (device loop3): ext4_enable_quotas:6453: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 788.260326][ T8237] EXT4-fs (loop3): Cannot turn on quotas: error -5 [ 788.306203][ T8237] EXT4-fs (loop3): 1 truncate cleaned up [ 788.311979][ T8237] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,resgid=0x000000000000ee00,init_itable,,errors=continue. Quota mode: writeback. [ 788.427714][ T8243] loop4: detected capacity change from 0 to 1024 [ 788.521127][ T8243] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 788.529918][ T8243] EXT4-fs (loop4): orphan cleanup on readonly fs [ 788.536665][ T8243] Quota error (device loop4): v2_read_file_info: Can't read info structure [ 788.545928][ T8243] EXT4-fs warning (device loop4): ext4_enable_quotas:6453: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 788.560619][ T8243] EXT4-fs (loop4): Cannot turn on quotas: error -5 [ 788.568050][ T8243] EXT4-fs (loop4): 1 truncate cleaned up [ 788.573705][ T8243] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,resgid=0x000000000000ee00,init_itable,,errors=continue. Quota mode: writeback. [ 790.669910][ T6] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 791.075961][ T6] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 791.446602][ T6] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 791.455008][ T6] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 791.464135][ T6] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 791.475159][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 791.485308][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 791.495295][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 791.759817][ T6] usb 4-1: string descriptor 0 read error: -22 [ 791.768366][ T6] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 791.842673][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.855216][ T8271] loop4: detected capacity change from 0 to 131072 [ 791.877352][ T6] usb 4-1: config 0 descriptor?? [ 791.920713][ T6] hub 4-1:0.0: bad descriptor, ignoring hub [ 791.926666][ T6] hub: probe of 4-1:0.0 failed with error -5 [ 791.962633][ T8271] F2FS-fs (loop4): Found nat_bits in checkpoint [ 791.970721][ T6] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 792.009999][ T30] audit: type=1400 audit(1769731702.597:1621): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=1002 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 792.066342][ T8271] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 792.102026][ T30] audit: type=1400 audit(1769731702.597:1622): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1002 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 792.144477][ T6] usb 4-1: USB disconnect, device number 10 [ 795.051728][ T8352] overlayfs: failed to resolve './file0': -2 [ 796.845017][ T8377] overlayfs: failed to clone upperpath [ 797.447144][ T8383] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.454435][ T8383] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.462200][ T8383] device bridge0 entered promiscuous mode [ 797.472065][ T8383] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 797.609345][ T8385] loop3: detected capacity change from 0 to 1024 [ 797.680172][ T8385] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 797.688808][ T8385] EXT4-fs (loop3): orphan cleanup on readonly fs [ 797.696785][ T8385] Quota error (device loop3): v2_read_file_info: Can't read info structure [ 797.705897][ T8385] EXT4-fs warning (device loop3): ext4_enable_quotas:6453: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 797.720579][ T8385] EXT4-fs (loop3): Cannot turn on quotas: error -5 [ 797.728088][ T8385] EXT4-fs (loop3): 1 truncate cleaned up [ 797.733985][ T8385] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,resgid=0x000000000000ee00,init_itable,,errors=continue. Quota mode: writeback. [ 799.409490][ T8419] loop4: detected capacity change from 0 to 512 [ 799.710203][ T8419] EXT4-fs (loop4): orphan cleanup on readonly fs [ 799.719730][ T8419] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2141: bg 0: block 248: padding at end of block bitmap is not set [ 799.736763][ T8419] Quota error (device loop4): write_blk: dquota write failed [ 799.744767][ T8419] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 799.754860][ T8419] EXT4-fs error (device loop4): ext4_acquire_dquot:6201: comm syz.4.2141: Failed to acquire dquot type 1 [ 799.771095][ T8419] EXT4-fs (loop4): 1 truncate cleaned up [ 799.778626][ T8419] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 800.784429][ T8436] overlayfs: failed to clone upperpath [ 801.433102][ T559] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 801.433796][ T8443] loop3: detected capacity change from 0 to 1024 [ 801.877010][ T8443] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 801.886004][ T8443] EXT4-fs (loop3): orphan cleanup on readonly fs [ 801.901408][ T8443] Quota error (device loop3): v2_read_file_info: Can't read info structure [ 801.910113][ T8443] EXT4-fs warning (device loop3): ext4_enable_quotas:6453: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 801.924672][ T8443] EXT4-fs (loop3): Cannot turn on quotas: error -5 [ 801.932116][ T8443] EXT4-fs (loop3): 1 truncate cleaned up [ 801.937793][ T8443] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,resgid=0x000000000000ee00,init_itable,,errors=continue. Quota mode: writeback. [ 802.134818][ T559] usb 1-1: Using ep0 maxpacket: 16 [ 802.177655][ T39] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 802.263068][ T559] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 802.275435][ T559] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 802.305778][ T559] usb 1-1: config 0 has no interface number 0 [ 802.324301][ T559] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 802.351334][ T559] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.457063][ T559] usb 1-1: config 0 descriptor?? [ 802.552037][ T559] usb 1-1: Found UVC 0.00 device (0bd3:0555) [ 802.559304][ T559] usb 1-1: No valid video chain found. [ 802.655581][ T8459] loop3: detected capacity change from 0 to 1024 [ 802.710363][ T8459] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 802.719106][ T8459] EXT4-fs (loop3): orphan cleanup on readonly fs [ 802.726534][ T8459] Quota error (device loop3): v2_read_file_info: Can't read info structure [ 802.735370][ T8459] EXT4-fs warning (device loop3): ext4_enable_quotas:6453: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 802.750104][ T8459] EXT4-fs (loop3): Cannot turn on quotas: error -5 [ 802.760192][ T6] usb 1-1: USB disconnect, device number 8 [ 802.766320][ T8459] EXT4-fs (loop3): 1 truncate cleaned up [ 802.772027][ T8459] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,resgid=0x000000000000ee00,init_itable,,errors=continue. Quota mode: writeback. [ 802.840115][ T39] usb 5-1: unable to get BOS descriptor or descriptor too short [ 803.053717][ T39] usb 5-1: not running at top speed; connect to a high speed hub [ 803.139227][ T39] usb 5-1: config index 0 descriptor too short (expected 65442, got 162) [ 803.147695][ T39] usb 5-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 803.157532][ T39] usb 5-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 803.168078][ T39] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 255 [ 803.214039][ T39] usb 5-1: language id specifier not provided by device, defaulting to English [ 805.059116][ T8490] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2163'. [ 805.068285][ T39] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 805.090828][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.344953][ T8501] loop3: detected capacity change from 0 to 256 [ 805.383050][ T8501] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 805.506102][ T39] usb 5-1: can't set config #1, error -71 [ 805.511375][ T8501] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 805.534841][ T39] usb 5-1: USB disconnect, device number 13 [ 807.230614][ T8501] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe5e3e5da, utbl_chksum : 0xe619d30d) [ 807.268203][ T8501] exFAT-fs (loop3): error, found bogus dentry(11) beyond unused empty group(10) (start_clu : 5, cur_clu : 5) [ 807.288712][ T8501] exFAT-fs (loop3): Filesystem has been set read-only [ 808.524360][ T8539] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2179'. [ 808.730958][ T8555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2185'. [ 808.741204][ T8555] netlink: 15 bytes leftover after parsing attributes in process `syz.2.2185'. [ 809.524592][ T8564] xt_hashlimit: max too large, truncated to 1048576 [ 809.709126][ T8575] bridge0: port 3(veth1_macvtap) entered blocking state [ 809.742454][ T8575] bridge0: port 3(veth1_macvtap) entered disabled state [ 809.938573][ T8570] loop4: detected capacity change from 0 to 1024 [ 810.041603][ T8570] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 810.058955][ T8570] EXT4-fs (loop4): orphan cleanup on readonly fs [ 810.065650][ T8570] Quota error (device loop4): v2_read_file_info: Can't read info structure [ 810.074391][ T8570] EXT4-fs warning (device loop4): ext4_enable_quotas:6453: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 810.088989][ T8570] EXT4-fs (loop4): Cannot turn on quotas: error -5 [ 810.102348][ T8570] EXT4-fs (loop4): 1 truncate cleaned up [ 810.108211][ T8570] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,resgid=0x000000000000ee00,init_itable,,errors=continue. Quota mode: writeback. [ 810.157740][ T8585] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2194'. [ 811.672658][ T8614] loop4: detected capacity change from 0 to 1024 [ 811.761486][ T8614] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 811.770230][ T8614] EXT4-fs (loop4): orphan cleanup on readonly fs [ 811.777222][ T8614] Quota error (device loop4): v2_read_file_info: Can't read info structure [ 811.786005][ T8614] EXT4-fs warning (device loop4): ext4_enable_quotas:6453: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 811.801383][ T8614] EXT4-fs (loop4): Cannot turn on quotas: error -5 [ 811.858914][ T8614] EXT4-fs (loop4): 1 truncate cleaned up [ 811.864634][ T8614] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,resgid=0x000000000000ee00,init_itable,,errors=continue. Quota mode: writeback. [ 813.437925][ T8640] loop4: detected capacity change from 0 to 512 [ 813.549219][ T8640] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 813.549219][ T8640] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 813.549219][ T8640] [ 813.595267][ T8640] EXT4-fs (loop4): Ignoring removed orlov option [ 813.707000][ T8652] cgroup: Unknown subsys name 'euid<00000000000000000000' [ 814.570384][ T8654] loop3: detected capacity change from 0 to 512 [ 814.710627][ T8654] EXT4-fs (loop3): orphan cleanup on readonly fs [ 814.720593][ T8654] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2215: bg 0: block 248: padding at end of block bitmap is not set [ 814.736799][ T8654] Quota error (device loop3): write_blk: dquota write failed [ 814.744470][ T8654] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 814.754584][ T8654] EXT4-fs error (device loop3): ext4_acquire_dquot:6201: comm syz.3.2215: Failed to acquire dquot type 1 [ 814.768887][ T8654] EXT4-fs (loop3): 1 truncate cleaned up [ 814.776864][ T8654] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 815.101146][ T8640] EXT4-fs (loop4): mounted filesystem without journal. Opts: noacl,orlov,discard,min_batch_time=0x0000000000000007,sysvgroups,data_err=abort,noinit_itable,,errors=continue. Quota mode: writeback. [ 815.145453][ T8640] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 816.772116][ T8686] overlayfs: failed to clone upperpath [ 816.907677][ T8688] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2226'. [ 817.140237][ T6] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 817.184964][ T8698] cgroup: Unknown subsys name 'euid<00000000000000000000' [ 818.017454][ T8696] loop3: detected capacity change from 0 to 1024 [ 818.123179][ T8696] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 818.171379][ T8696] EXT4-fs (loop3): orphan cleanup on readonly fs [ 818.211181][ T8696] Quota error (device loop3): v2_read_file_info: Can't read info structure [ 818.411886][ T8696] EXT4-fs warning (device loop3): ext4_enable_quotas:6453: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 818.447572][ T8696] EXT4-fs (loop3): Cannot turn on quotas: error -5 [ 818.540570][ T8696] EXT4-fs (loop3): 1 truncate cleaned up [ 818.622462][ T8696] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,resgid=0x000000000000ee00,init_itable,,errors=continue. Quota mode: writeback. [ 819.015113][ T6] usb 5-1: Using ep0 maxpacket: 8 [ 819.096690][ T8723] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2236'. [ 819.120988][ T8725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2237'. [ 819.145277][ T6] usb 5-1: config 5 has an invalid interface number: 15 but max is 0 [ 819.157238][ T6] usb 5-1: config 5 has no interface number 0 [ 819.163377][ T6] usb 5-1: config 5 interface 15 has no altsetting 0 [ 819.178822][ T8727] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2238'. [ 819.369718][ T6] usb 5-1: New USB device found, idVendor=045e, idProduct=0441, bcdDevice=c2.b9 [ 819.378849][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.567201][ T8757] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2251'. [ 819.571532][ T6] usb 5-1: Product: syz [ 819.580623][ T6] usb 5-1: Manufacturer: syz [ 819.585427][ T6] usb 5-1: SerialNumber: syz [ 819.928228][ T6] usb 5-1: bad CDC descriptors [ 819.941156][ T6] usb 5-1: USB disconnect, device number 14 [ 820.439811][ T30] audit: type=1400 audit(1769731729.205:1623): avc: denied { ioctl } for pid=8766 comm="syz.3.2254" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 820.439921][ T8767] Restarting kernel threads ... done. [ 820.734121][ T8773] overlayfs: missing 'lowerdir' [ 820.745062][ T30] audit: type=1400 audit(1769731729.486:1624): avc: denied { read write } for pid=8770 comm="syz.3.2257" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 820.806266][ T30] audit: type=1400 audit(1769731729.486:1625): avc: denied { open } for pid=8770 comm="syz.3.2257" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 821.364723][ T8797] overlayfs: failed to clone upperpath [ 825.338916][ T8864] loop4: detected capacity change from 0 to 1024 [ 826.188966][ T8864] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 826.197790][ T8864] EXT4-fs (loop4): orphan cleanup on readonly fs [ 826.204769][ T8864] Quota error (device loop4): v2_read_file_info: Can't read info structure [ 826.213489][ T8864] EXT4-fs warning (device loop4): ext4_enable_quotas:6453: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 826.228045][ T8864] EXT4-fs (loop4): Cannot turn on quotas: error -5 [ 826.236629][ T8864] EXT4-fs (loop4): 1 truncate cleaned up [ 826.242363][ T8864] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,resgid=0x000000000000ee00,init_itable,,errors=continue. Quota mode: writeback. [ 829.572268][ T8882] loop4: detected capacity change from 0 to 512 [ 829.580036][ T356] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 830.126436][ T8882] EXT4-fs (loop4): orphan cleanup on readonly fs [ 830.137440][ T8882] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2291: bg 0: block 248: padding at end of block bitmap is not set [ 830.154318][ T8882] Quota error (device loop4): write_blk: dquota write failed [ 830.162136][ T8882] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 830.172208][ T8882] EXT4-fs error (device loop4): ext4_acquire_dquot:6201: comm syz.4.2291: Failed to acquire dquot type 1 [ 830.191364][ T8882] EXT4-fs (loop4): 1 truncate cleaned up [ 830.199468][ T8882] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 836.340340][ T8946] loop3: detected capacity change from 0 to 512 [ 836.573484][ T8946] EXT4-fs (loop3): orphan cleanup on readonly fs [ 836.580759][ T8946] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2309: bg 0: block 248: padding at end of block bitmap is not set [ 836.595749][ T8946] Quota error (device loop3): write_blk: dquota write failed [ 836.603385][ T8946] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 836.613403][ T8946] EXT4-fs error (device loop3): ext4_acquire_dquot:6201: comm syz.3.2309: Failed to acquire dquot type 1 [ 836.626098][ T8946] EXT4-fs (loop3): 1 truncate cleaned up [ 836.639155][ T8946] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 838.576654][ T8966] netlink: 'syz.4.2317': attribute type 1 has an invalid length. [ 843.241988][ T9012] loop4: detected capacity change from 0 to 512 [ 846.137457][ T9037] mip6: mip6_rthdr_init_state: state's mode is not 2: 4 [ 849.286050][ T9069] overlayfs: failed to resolve './file2': -2 [ 849.857603][ T374] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 850.273903][ T9079] loop4: detected capacity change from 0 to 1024 [ 850.697746][ T9079] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 850.706301][ T9079] EXT4-fs (loop4): orphan cleanup on readonly fs [ 850.713948][ T9079] Quota error (device loop4): v2_read_file_info: Can't read info structure [ 850.722715][ T9079] EXT4-fs warning (device loop4): ext4_enable_quotas:6453: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 850.737545][ T9079] EXT4-fs (loop4): Cannot turn on quotas: error -5 [ 850.746561][ T9079] EXT4-fs (loop4): 1 truncate cleaned up [ 850.752340][ T9079] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,resgid=0x000000000000ee00,init_itable,,errors=continue. Quota mode: writeback. [ 851.669607][ T374] usb 1-1: device not accepting address 9, error -71 [ 851.886317][ T9114] overlayfs: failed to resolve './file2': -2 [ 855.196292][ T9144] loop3: detected capacity change from 0 to 512 [ 855.446571][ T9144] EXT4-fs (loop3): orphan cleanup on readonly fs [ 855.456176][ T9144] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2371: bg 0: block 248: padding at end of block bitmap is not set [ 855.473392][ T9144] Quota error (device loop3): write_blk: dquota write failed [ 855.481051][ T9144] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 855.491122][ T9144] EXT4-fs error (device loop3): ext4_acquire_dquot:6201: comm syz.3.2371: Failed to acquire dquot type 1 [ 855.506490][ T9144] EXT4-fs (loop3): 1 truncate cleaned up [ 855.513104][ T9144] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 857.427728][ T9188] netlink: 193 bytes leftover after parsing attributes in process `syz.1.2390'. [ 858.733902][ T9208] overlayfs: failed to resolve './file2': -2 [ 859.518952][ T9226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2400'. [ 859.535439][ T9226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2400'. [ 859.554974][ T9226] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2400'. [ 859.566187][ T9226] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2400'. [ 859.823870][ T356] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 861.585577][ T356] usb 4-1: unable to get BOS descriptor or descriptor too short [ 861.639394][ T356] usb 4-1: not running at top speed; connect to a high speed hub [ 861.853390][ T356] usb 4-1: config index 0 descriptor too short (expected 65442, got 162) [ 861.882537][ T356] usb 4-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 861.897946][ T356] usb 4-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 861.919065][ T356] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 255 [ 861.970312][ T356] usb 4-1: language id specifier not provided by device, defaulting to English [ 862.953819][ T356] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 862.963059][ T356] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.986246][ T9272] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2415'. [ 862.999829][ T9274] overlayfs: failed to resolve './file2': -2 [ 863.010386][ T9272] netlink: 'syz.3.2415': attribute type 1 has an invalid length. [ 863.771039][ T356] usb 4-1: can't set config #1, error -71 [ 863.777685][ T356] usb 4-1: USB disconnect, device number 12 [ 863.819171][ T9297] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2423'. [ 864.883414][ T9310] overlayfs: missing 'lowerdir' [ 866.112396][ T9327] loop4: detected capacity change from 0 to 512 [ 866.417954][ T9333] overlayfs: failed to resolve './file2': -2 [ 866.479215][ T374] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 867.310790][ T9351] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2442'. [ 867.763709][ T374] usb 4-1: unable to get BOS descriptor or descriptor too short [ 867.826316][ T9363] loop4: detected capacity change from 0 to 512 [ 869.041935][ T9371] loop4: detected capacity change from 0 to 256 [ 869.407712][ T9371] exfat: Deprecated parameter 'utf8' [ 869.420916][ T9371] exfat: Deprecated parameter 'utf8' [ 869.428583][ T374] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 869.566267][ T374] usb 4-1: can't read configurations, error -71 [ 869.580497][ T9371] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 869.644536][ T9371] fuse: Bad value for 'fd' [ 870.506068][ T30] audit: type=1400 audit(1769731776.056:1626): avc: denied { ioctl } for pid=9392 comm="syz.2.2454" path="socket:[43203]" dev="sockfs" ino=43203 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 870.693831][ T9400] loop3: detected capacity change from 0 to 512 [ 870.894402][ T9400] EXT4-fs (loop3): orphan cleanup on readonly fs [ 870.904505][ T6] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 870.913557][ T9400] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2456: bg 0: block 248: padding at end of block bitmap is not set [ 870.929372][ T9400] Quota error (device loop3): write_blk: dquota write failed [ 870.937037][ T9400] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 870.947182][ T9400] EXT4-fs error (device loop3): ext4_acquire_dquot:6201: comm syz.3.2456: Failed to acquire dquot type 1 [ 870.961163][ T9400] EXT4-fs (loop3): 1 truncate cleaned up [ 870.968049][ T9400] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 871.383981][ T6] usb 5-1: unable to get BOS descriptor or descriptor too short [ 871.561378][ T6] usb 5-1: not running at top speed; connect to a high speed hub [ 872.975790][ T6] usb 5-1: config index 0 descriptor too short (expected 65442, got 162) [ 873.266406][ T6] usb 5-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 873.290098][ T6] usb 5-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 874.289888][ T6] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 255 [ 874.343340][ T6] usb 5-1: string descriptor 0 read error: -71 [ 874.352961][ T6] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 874.516323][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.599837][ T6] usb 5-1: can't set config #1, error -71 [ 875.458276][ T6] usb 5-1: USB disconnect, device number 15 [ 875.559528][ T9447] loop4: detected capacity change from 0 to 256 [ 876.761016][ T9447] FAT-fs (loop4): Directory bread(block 64) failed [ 876.767718][ T9447] FAT-fs (loop4): Directory bread(block 65) failed [ 876.803945][ T9447] FAT-fs (loop4): Directory bread(block 66) failed [ 880.190787][ T9447] FAT-fs (loop4): Directory bread(block 67) failed [ 880.225303][ T9447] FAT-fs (loop4): Directory bread(block 68) failed [ 880.232674][ T9447] FAT-fs (loop4): Directory bread(block 69) failed [ 880.239365][ T9447] FAT-fs (loop4): Directory bread(block 70) failed [ 880.246124][ T9447] FAT-fs (loop4): Directory bread(block 71) failed [ 880.253669][ T9447] FAT-fs (loop4): Directory bread(block 72) failed [ 880.647548][ T9447] FAT-fs (loop4): Directory bread(block 73) failed [ 884.291011][ T559] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 884.932109][ T559] usb 4-1: unable to get BOS descriptor or descriptor too short [ 884.985644][ T559] usb 4-1: not running at top speed; connect to a high speed hub [ 885.112419][ T559] usb 4-1: config index 0 descriptor too short (expected 65442, got 162) [ 885.121106][ T559] usb 4-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 885.129957][ T559] usb 4-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 885.140613][ T559] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 255 [ 886.289216][ T559] usb 4-1: string descriptor 0 read error: -71 [ 886.296479][ T559] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 886.326737][ T559] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.418761][ T9541] loop4: detected capacity change from 0 to 512 [ 887.897940][ T9548] loop3: detected capacity change from 0 to 512 [ 888.166148][ T9548] EXT4-fs (loop3): orphan cleanup on readonly fs [ 888.175787][ T9548] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2497: bg 0: block 248: padding at end of block bitmap is not set [ 888.191747][ T9548] Quota error (device loop3): write_blk: dquota write failed [ 888.199360][ T9548] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 888.209454][ T9548] EXT4-fs error (device loop3): ext4_acquire_dquot:6201: comm syz.3.2497: Failed to acquire dquot type 1 [ 888.223512][ T9548] EXT4-fs (loop3): 1 truncate cleaned up [ 888.230215][ T9548] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 888.317875][ T9556] overlayfs: missing 'workdir' [ 888.554379][ T559] usb 4-1: can't set config #1, error -71 [ 888.562059][ T559] usb 4-1: USB disconnect, device number 15 [ 893.928371][ T9608] netlink: 'syz.3.2519': attribute type 32 has an invalid length. [ 893.971503][ T30] audit: type=1400 audit(1769731798.003:1627): avc: denied { nlmsg_tty_audit } for pid=9609 comm="syz.2.2520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 894.054901][ T9614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2522'. [ 894.078995][ T9619] usb usb8: usbfs: process 9619 (syz.4.2523) did not claim interface 0 before use [ 894.101843][ T9614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2522'. [ 894.146387][ T9621] binder: 9620:9621 ioctl c0046209 0 returned -22 [ 896.809851][ T9645] loop4: detected capacity change from 0 to 512 [ 896.993708][ T9645] EXT4-fs (loop4): orphan cleanup on readonly fs [ 897.003364][ T9645] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2529: bg 0: block 248: padding at end of block bitmap is not set [ 897.019411][ T9645] Quota error (device loop4): write_blk: dquota write failed [ 897.027013][ T9645] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 897.037087][ T9645] EXT4-fs error (device loop4): ext4_acquire_dquot:6201: comm syz.4.2529: Failed to acquire dquot type 1 [ 897.051192][ T9645] EXT4-fs (loop4): 1 truncate cleaned up [ 897.057883][ T9645] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 898.332098][ T9656] ------------[ cut here ]------------ [ 898.356062][ T9656] trace type BPF program uses run-time allocation [ 898.382378][ T9656] WARNING: CPU: 1 PID: 9656 at kernel/bpf/verifier.c:11722 check_map_prog_compatibility+0x6cd/0x870 [ 898.429329][ T9656] Modules linked in: [ 898.447428][ T9656] CPU: 1 PID: 9656 Comm: syz.3.2534 Tainted: G W syzkaller #0 [ 898.476574][ T9656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 898.637470][ T9656] RIP: 0010:check_map_prog_compatibility+0x6cd/0x870 [ 898.668192][ T9656] Code: ee ff 48 c7 c6 20 42 48 85 4c 8b 65 d0 e9 fd fc ff ff e8 a6 1c ee ff c6 05 34 75 6a 05 01 48 c7 c7 80 3e 48 85 e8 a3 f1 2e 03 <0f> 0b e9 88 fb ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ac f9 ff [ 898.699116][ T9656] RSP: 0018:ffffc90001417428 EFLAGS: 00010246 [ 898.709909][ T9656] RAX: 4c42b356dd154600 RBX: 0000000000000001 RCX: 0000000000080000 [ 898.731443][ T9656] RDX: ffffc90000fa9000 RSI: 00000000000027af RDI: 00000000000027b0 [ 898.744466][ T9656] RBP: ffffc90001417470 R08: ffff8881f7132f3f R09: 1ffff1103ee265e7 [ 898.755367][ T9656] R10: dffffc0000000000 R11: ffffed103ee265e8 R12: ffff88811e650000 [ 898.763761][ T9656] R13: 0000000000000002 R14: dffffc0000000000 R15: ffff88811687e000 [ 898.772012][ T9656] FS: 00007f554a6b86c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 898.791263][ T9656] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 898.805528][ T9656] CR2: 000000110c2a53b7 CR3: 000000013de62000 CR4: 00000000003506b0 [ 898.829295][ T9656] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 898.871684][ T9656] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 898.891602][ T9656] Call Trace: [ 898.903979][ T9656] [ 898.907039][ T9656] resolve_pseudo_ldimm64+0x656/0x1180 [ 898.928605][ T9656] ? check_attach_btf_id+0xd70/0xd70 [ 898.944994][ T9656] ? __mark_reg_known+0x1b0/0x1b0 [ 898.950286][ T9656] ? security_capable+0x87/0xb0 [ 898.961007][ T9656] bpf_check+0x32c7/0xf370 [ 898.965940][ T9656] ? 0xffffffffa002a000 [ 898.970167][ T9656] ? is_bpf_text_address+0x177/0x190 [ 899.029840][ T9656] ? bpf_get_btf_vmlinux+0x60/0x60 [ 899.042943][ T9656] ? unwind_get_return_address+0x4d/0x90 [ 899.049854][ T9656] ? stack_trace_save+0xf0/0xf0 [ 899.054845][ T9656] ? arch_stack_walk+0xee/0x140 [ 899.060000][ T9656] ? stack_trace_save+0xa6/0xf0 [ 899.064956][ T9656] ? __stack_depot_save+0x34/0x480 [ 899.070183][ T9656] ? __kasan_slab_alloc+0x69/0xf0 [ 899.075282][ T9656] ? __kasan_kmalloc+0xec/0x110 [ 899.080268][ T9656] ? __kasan_kmalloc+0xda/0x110 [ 899.085442][ T9656] ? kmem_cache_alloc_trace+0x119/0x270 [ 899.091089][ T9656] ? selinux_bpf_prog_alloc+0x51/0x140 [ 899.096615][ T9656] ? security_bpf_prog_alloc+0x62/0x90 [ 899.117466][ T9656] ? bpf_prog_load+0x9f4/0x1640 [ 899.124769][ T9656] ? __sys_bpf+0x51d/0x7d0 [ 899.179188][ T9656] ? __x64_sys_bpf+0x7c/0x90 [ 899.183925][ T9656] ? x64_sys_call+0x4b9/0x9a0 [ 899.188810][ T9656] ? do_syscall_64+0x4c/0xa0 [ 899.193541][ T9656] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 899.199815][ T9656] ? check_stack_object+0x81/0x140 [ 899.205018][ T9656] ? memset+0x35/0x40 [ 899.209109][ T9656] ? bpf_obj_name_cpy+0x193/0x1e0 [ 899.239912][ T9656] bpf_prog_load+0x10c4/0x1640 [ 899.255911][ T9656] ? __anon_inode_getfd+0x35c/0x3d0 [ 899.261263][ T9656] ? map_freeze+0x360/0x360 [ 899.265809][ T9656] ? selinux_bpf+0xc7/0xf0 [ 899.270263][ T9656] ? security_bpf+0x82/0xa0 [ 899.275061][ T9656] __sys_bpf+0x51d/0x7d0 [ 899.279497][ T9656] ? bpf_link_show_fdinfo+0x330/0x330 [ 899.285026][ T9656] ? __kasan_check_write+0x14/0x20 [ 899.290403][ T9656] ? switch_fpu_return+0x15d/0x2c0 [ 899.300800][ T9656] __x64_sys_bpf+0x7c/0x90 [ 899.305513][ T9656] x64_sys_call+0x4b9/0x9a0 [ 899.310210][ T9656] do_syscall_64+0x4c/0xa0 [ 899.314798][ T9656] ? clear_bhb_loop+0x50/0xa0 [ 899.319633][ T9656] ? clear_bhb_loop+0x50/0xa0 [ 899.433987][ T9656] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 899.584541][ T9656] RIP: 0033:0x7f554bc5beb9 [ 899.614300][ T9656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 899.637399][ T9656] RSP: 002b:00007f554a6b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 899.660145][ T9656] RAX: ffffffffffffffda RBX: 00007f554bed6fa0 RCX: 00007f554bc5beb9 [ 899.679268][ T9656] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 899.688009][ T9656] RBP: 00007f554bcc9c1f R08: 0000000000000000 R09: 0000000000000000 [ 899.702987][ T9656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 899.724233][ T9656] R13: 00007f554bed7038 R14: 00007f554bed6fa0 R15: 00007ffe65506fd8 [ 899.744800][ T9656] [ 899.752010][ T9656] ---[ end trace c857b2393c068715 ]--- [ 899.994911][ T9708] loop4: detected capacity change from 0 to 512 [ 901.639214][ T9747] loop3: detected capacity change from 0 to 128 [ 901.925483][ T9747] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 901.983328][ T9747] ext4 filesystem being mounted at /160/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 902.503701][ T9767] loop3: detected capacity change from 0 to 128 [ 903.193080][ T9775] loop4: detected capacity change from 0 to 512 [ 903.687074][ T9775] EXT4-fs (loop4): orphan cleanup on readonly fs [ 903.697421][ T9775] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2572: bg 0: block 248: padding at end of block bitmap is not set [ 903.712932][ T9775] Quota error (device loop4): write_blk: dquota write failed [ 903.720575][ T9775] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 903.730616][ T9775] EXT4-fs error (device loop4): ext4_acquire_dquot:6201: comm syz.4.2572: Failed to acquire dquot type 1 [ 903.744784][ T9775] EXT4-fs (loop4): 1 truncate cleaned up [ 903.751459][ T9775] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 904.073201][ T9787] overlayfs: failed to resolve './file2': -2 [ 906.033287][ T60] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 906.718759][ T60] usb 1-1: unable to get BOS descriptor or descriptor too short [ 906.772055][ T60] usb 1-1: not running at top speed; connect to a high speed hub [ 906.868256][ T60] usb 1-1: config index 0 descriptor too short (expected 65442, got 162) [ 906.886262][ T60] usb 1-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 906.929659][ T60] usb 1-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 906.981006][ T60] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 255 [ 907.049917][ T60] usb 1-1: language id specifier not provided by device, defaulting to English [ 907.459214][ T9814] loop3: detected capacity change from 0 to 1024 [ 907.499717][ T9814] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 907.508250][ T9814] EXT4-fs (loop3): orphan cleanup on readonly fs [ 907.515289][ T9814] Quota error (device loop3): v2_read_file_info: Can't read info structure [ 907.524137][ T9814] EXT4-fs warning (device loop3): ext4_enable_quotas:6453: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 907.538822][ T9814] EXT4-fs (loop3): Cannot turn on quotas: error -5 [ 907.547557][ T9814] EXT4-fs (loop3): 1 truncate cleaned up [ 907.553302][ T9814] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,resgid=0x000000000000ee00,init_itable,,errors=continue. Quota mode: writeback. [ 907.680262][ T60] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 907.718154][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.733930][ T9824] overlayfs: failed to resolve './file2': -2 [ 907.744290][ T60] usb 1-1: SerialNumber: ц [ 908.347527][ T9829] overlayfs: failed to resolve './file2': -2 [ 909.149827][ T9843] loop3: detected capacity change from 0 to 512 [ 909.594956][ T60] usb 1-1: 0:2 : does not exist [ 909.693063][ T60] usb 1-1: USB disconnect, device number 11 [ 909.728017][ T9843] EXT4-fs (loop3): orphan cleanup on readonly fs [ 909.737527][ T9843] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2590: bg 0: block 248: padding at end of block bitmap is not set [ 909.753648][ T9843] Quota error (device loop3): write_blk: dquota write failed [ 909.761264][ T9843] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 909.771325][ T9843] EXT4-fs error (device loop3): ext4_acquire_dquot:6201: comm syz.3.2590: Failed to acquire dquot type 1 [ 909.785234][ T9843] EXT4-fs (loop3): 1 truncate cleaned up [ 909.926217][ T9850] overlayfs: failed to resolve './file2': -2 [ 909.985456][ T9843] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 910.523635][ T9546] udevd[9546]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 911.861489][ T9885] loop3: detected capacity change from 0 to 512 [ 912.933568][ T9885] EXT4-fs (loop3): orphan cleanup on readonly fs [ 912.943519][ T9885] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2599: bg 0: block 248: padding at end of block bitmap is not set [ 912.959792][ T9885] Quota error (device loop3): write_blk: dquota write failed [ 912.967423][ T9885] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 912.977652][ T9885] EXT4-fs error (device loop3): ext4_acquire_dquot:6201: comm syz.3.2599: Failed to acquire dquot type 1 [ 912.992100][ T9885] EXT4-fs (loop3): 1 truncate cleaned up [ 912.999907][ T9885] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 913.375247][ T30] audit: type=1400 audit(1769731816.084:1628): avc: denied { read } for pid=9882 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 913.756167][ T9900] overlayfs: failed to resolve './file2': -2 [ 913.772032][ T30] audit: type=1400 audit(1769731816.552:1629): avc: denied { create } for pid=9901 comm="syz.2.2605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 913.801182][ T30] audit: type=1400 audit(1769731816.571:1630): avc: denied { write } for pid=9901 comm="syz.2.2605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 916.400027][ T30] audit: type=1400 audit(1769731816.571:1631): avc: denied { nlmsg_read } for pid=9901 comm="syz.2.2605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 916.641753][ T9928] loop4: detected capacity change from 0 to 512 [ 916.657186][ T30] audit: type=1400 audit(1769731816.571:1632): avc: denied { execmem } for pid=9899 comm="syz.3.2602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 916.704645][ T30] audit: type=1400 audit(1769731818.218:1633): avc: denied { module_request } for pid=9893 comm="syz.0.2604" kmod="nfnetlink-subsys-10" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 919.685466][ T30] audit: type=1400 audit(1769731822.084:1634): avc: denied { search } for pid=9952 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 919.849005][ T30] audit: type=1400 audit(1769731822.233:1635): avc: denied { read write } for pid=9961 comm="ip" path="/dev/console" dev="rootfs" ino=31 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 919.897303][ T30] audit: type=1400 audit(1769731822.261:1636): avc: denied { write } for pid=140 comm="dhcpcd" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 919.946476][ T30] audit: type=1400 audit(1769731822.261:1637): avc: denied { remove_name } for pid=140 comm="dhcpcd" name="sock" dev="tmpfs" ino=484 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 920.048120][ T30] audit: type=1400 audit(1769731822.261:1638): avc: denied { unlink } for pid=140 comm="dhcpcd" name="sock" dev="tmpfs" ino=484 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 920.108577][ T30] audit: type=1400 audit(1769731822.271:1639): avc: denied { unlink } for pid=140 comm="dhcpcd" name="pid" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 921.155669][ T30] audit: type=1400 audit(1769731823.469:1640): avc: denied { read write } for pid=9983 comm="iptables" path="/dev/console" dev="rootfs" ino=31 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 921.446628][ T9992] overlayfs: failed to resolve './file2': -2 [ 922.359857][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 922.359876][ T30] audit: type=1400 audit(1769731824.536:1647): avc: denied { read write } for pid=6318 comm="syz-executor" name="loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 922.396748][ T30] audit: type=1400 audit(1769731824.536:1648): avc: denied { open } for pid=6318 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 922.421173][ T30] audit: type=1400 audit(1769731824.536:1649): avc: denied { ioctl } for pid=6318 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=119 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 923.138310][ T30] audit: type=1400 audit(1769731825.312:1650): avc: denied { nlmsg_write } for pid=10010 comm="syz.2.2626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 923.246017][ T30] audit: type=1400 audit(1769731825.415:1651): avc: denied { map_create } for pid=10023 comm="syz.1.2627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 923.621499][ T30] audit: type=1400 audit(1769731825.415:1652): avc: denied { map_read map_write } for pid=10023 comm="syz.1.2627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 923.680906][ T30] audit: type=1400 audit(1769731825.827:1653): avc: denied { write } for pid=86 comm="acpid" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 923.718499][ T30] audit: type=1400 audit(1769731825.827:1654): avc: denied { remove_name } for pid=86 comm="acpid" name="acpid.pid" dev="tmpfs" ino=7 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 923.766986][ T30] audit: type=1400 audit(1769731825.827:1655): avc: denied { unlink } for pid=86 comm="acpid" name="acpid.pid" dev="tmpfs" ino=7 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 924.585988][T10060] loop4: detected capacity change from 0 to 1024 [ 924.633680][T10060] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 924.655552][T10060] EXT4-fs (loop4): orphan cleanup on readonly fs [ 924.710043][T10060] Quota error (device loop4): v2_read_file_info: Can't read info structure [ 924.772426][T10060] EXT4-fs warning (device loop4): ext4_enable_quotas:6453: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 924.808138][T10060] EXT4-fs (loop4): Cannot turn on quotas: error -5 [ 924.830461][T10060] EXT4-fs (loop4): 1 truncate cleaned up [ 924.904465][T10060] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,resgid=0x000000000000ee00,init_itable,,errors=continue. Quota mode: writeback. Connection to 10.128.0.19 closed by remote host. [ 927.457269][ T482] tipc: Disabling bearer [ 927.462874][ T482] tipc: Left network mode [ 927.470348][ T482] tipc: Left network mode [ 928.100840][ T482] bridge0: port 4(gretap0) entered disabled state [ 928.110737][ T482] device gretap0 left promiscuous mode [ 928.116211][ T482] bridge0: port 4(gretap0) entered disabled state [ 928.354158][ T482] device bridge_slave_1 left promiscuous mode [ 928.360367][ T482] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.368184][ T482] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.376362][ T482] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.383956][ T482] device bridge_slave_0 left promiscuous mode [ 928.390235][ T482] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.398565][ T482] device bridge_slave_1 left promiscuous mode [ 928.404905][ T482] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.412549][ T482] device bridge_slave_0 left promiscuous mode [ 928.418708][ T482] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.427063][ T482] device vlan2 left promiscuous mode [ 928.432508][ T482] bridge0: port 3(vlan2) entered disabled state [ 928.439111][ T482] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.446935][ T482] device bridge_slave_0 left promiscuous mode [ 928.453207][ T482] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.461781][ T482] device veth1_macvtap left promiscuous mode [ 928.467966][ T482] device veth0_vlan left promiscuous mode [ 928.473928][ T482] device veth1_macvtap left promiscuous mode [ 928.479920][ T482] device veth0_vlan left promiscuous mode [ 928.485856][ T482] device veth1_macvtap left promiscuous mode [ 928.491856][ T482] device veth0_vlan left promiscuous mode [ 928.497762][ T482] device veth1_macvtap left promiscuous mode [ 928.503767][ T482] device veth0_vlan left promiscuous mode [ 928.612466][T10092] kvm: exiting hardware virtualization [ 928.621403][T10092] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 928.629438][T10092] ACPI: PM: Preparing to enter system sleep state S5 [ 928.636948][T10092] reboot: Power down serialport: VM disconnected.