last executing test programs: 16.250089055s ago: executing program 1: writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000003c0)={0x2, 0x100e}, 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0xb, &(0x7f00000007c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5153, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) creat(&(0x7f0000000280)='./file0\x00', 0x4a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1fffe}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0xfffffcca) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@generic={&(0x7f0000000500)='./file0\x00', 0x0, 0x10}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc020662a, &(0x7f0000000d40)=ANY=[]) 14.865480519s ago: executing program 1: syz_open_procfs$namespace(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000010000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x85, &(0x7f0000000340)=[{}, {}], 0x10, 0x10, &(0x7f0000000380), &(0x7f0000000440), 0x8, 0xe2, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000840)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f0000002480)={0x2020}, 0x2020) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000400)) unshare(0x64000600) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68) open(0x0, 0x60c2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000b00)=ANY=[], &(0x7f0000000080)='GPL\x00'}, 0x90) 12.517355724s ago: executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fanotify_init(0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, 0x0, 0x0) r2 = creat(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x64) madvise(&(0x7f00003c3000/0x4000)=nil, 0x4000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000000)=0x2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x801) syz_io_uring_submit(r5, 0x0, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) sendto(r3, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 10.76978803s ago: executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) futex_waitv(0x0, 0x0, 0x2, 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x33, &(0x7f0000001ac0)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x90) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0x80111500, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r2, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='htcp\x00', 0x5) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) syz_usb_connect(0x0, 0x57, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e3df3b40990435101256000000010902450001000000000904000001377ea3000a2406000105240000000d179ce9ffffff00000000000006241a000000042402000921000000012200000905"], 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) 8.385035828s ago: executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'ipvlan0\x00', 0x2}) preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) dup(0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigreturn() r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8902, 0x0) 8.036408664s ago: executing program 3: vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpid() r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000040)={0x0, 0x0}) kcmp(r3, r5, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 7.145773571s ago: executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) rename(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$sock_int(0xffffffffffffffff, 0x28, 0x2b, 0x0, &(0x7f0000000080)) socket$inet6(0xa, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_io_uring_setup(0xd79, &(0x7f00000035c0), &(0x7f0000000100)=0x0, &(0x7f0000003580)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0\x00'}) io_uring_enter(r4, 0x291c, 0x0, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(r2, &(0x7f0000002380)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) preadv2(r7, &(0x7f0000000280)=[{&(0x7f0000000340)=""/205, 0xcd}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r7, 0x810c9365, &(0x7f0000000580)={{0xd7, 0x10001}, 0x100, './file0\x00'}) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r8, 0x4b6a, 0x0) r9 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f00000006c0)={{0x5, 0x4}, 0x100, './file0\x00'}) ioctl$VIDIOC_SUBDEV_S_CROP(r9, 0xc038563c, &(0x7f0000000140)={0x0, 0x0, {0x1, 0xfff, 0x8001}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0xfffffffc, 0x0, 0x800000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 6.768697365s ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000640)=ANY=[@ANYRESHEX=r1, @ANYRESHEX], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_SET_CPUID(0x1e, r0, 0x1, 0x1012) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={0x60, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "f56b4a01f8e67721e4417795e731800bbab7c801"}}]}]}, 0x60}}, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r4 = syz_open_dev$evdev(0x0, 0x2, 0x862b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r7, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020d3"]) r8 = socket(0x10, 0x3, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x6}, @IFLA_IPTUN_TOS={0x5}]}}}]}, 0x44}}, 0x0) 6.239833206s ago: executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f00000003c0)=ANY=[@ANYRES8=r1, @ANYRESOCT, @ANYRESOCT, @ANYRES64=0x0, @ANYRESOCT=r0, @ANYRES8, @ANYBLOB="2c6e03d465636f6d706f73652c6769643d29ab72f4a2f73b811c7fd9bae7ecd520839bd791f81b6637f549a77ac6cb621635f9c08b2615964a3c43b727df50d049dc760465dea7349206240e6fb4756f276c72f20bab7d507fe4853b18ebe583cbf9009044b021249834326e80399ca072639251325e38177eef4f05093acfe76553919ecca99460ea4ebdbcef9c4e0ed3f10f86889116979b7aa52b38442546b806d6b8964f99a04195ad43adb611", @ANYRES16=r0, @ANYBLOB="4599"], 0x1, 0x701, &(0x7f00000009c0)="$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") ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.293645384s ago: executing program 1: r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x244, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x0, 0x8}}]}}}]}}]}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_DREG={0x8}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x20000000}, @NFTA_EXTHDR_LEN={0x8}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_TMR_STOP(r3, 0x5403) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @remote}}, [0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x400000]}, &(0x7f0000000040)=0x100) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x48}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000001640)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x5}, 0x7}, 0x80, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 5.267334691s ago: executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000000c0), 0x12) 5.145433508s ago: executing program 0: socket$inet6(0xa, 0x0, 0x7) r0 = socket(0x10, 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc491c6170000501d0000be7ba9bd"], 0x1c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) pwritev(0xffffffffffffffff, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)}], 0x3, 0x0, 0x6) recvmmsg$unix(r0, &(0x7f0000000400), 0x8, 0x0, 0x0) 5.023810556s ago: executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/138, 0x0}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000001480)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014001100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000416, &(0x7f00000002c0)={[{@data_err_abort}, {@noblock_validity}, {@dioread_lock}, {@dioread_nolock}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@usrquota}, {@grpid}], [], 0x2c}, 0x1, 0x4bf, &(0x7f0000000740)="$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") 4.835852619s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000080b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) 4.672614454s ago: executing program 2: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ptrace$ARCH_SET_CPUID(0x1e, r0, 0x0, 0x1012) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCGKEY(r2, 0x40084503, &(0x7f0000000140)=""/183) 4.003574433s ago: executing program 4: r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) 3.839425225s ago: executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1a0cc10, &(0x7f00000059c0)=ANY=[@ANYBLOB="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", @ANYBLOB="a93e1cbfeea088b9cb059ce91c144fd901b2d208e6ec16e9c0bdf78cda5604babe81021bae593d8bf404d46fe9ae1e8a141739e9717566c21648e8f46b4fc9d9eb0a646a28283f6f61bd31a6a5c909f53dcaf2e8a1914f6cbd8d230587ca11862216e1a7ea1aaca778c2b5eea4e08eeb7bbbfd55e1ba9fbcb378636cca2dcb46a029961a41e272c878b929b276ac2741c8f3b77e7850100e289c3b6edbf5d0377206c0bc212cf6a42ececcd4e98747c0423cc4b304569431e8b347fe68e9083d419f13de6e27d28126d9a4988919"], 0x1, 0x559f, &(0x7f0000000400)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setrlimit(0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setaffinity(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='block_split\x00', r5}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200)=0x3, 0x42400) chdir(0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 3.804397139s ago: executing program 3: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0], 0x1, 0x1a1, &(0x7f0000000140)="$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") r2 = getegid() syz_mount_image$hfsplus(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80000c, &(0x7f00000003c0)=ANY=[@ANYBLOB='nobarrier,decompose,gid=', @ANYRESHEX=0x0, @ANYBLOB=',barrier,gid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6c733d64656661756c742c001bb4a4447bd69aa8532125707aa318f1e60d28086a88ef2208cc30839fc1be7ad88539fad2c027aca664454d7bf988a9fa9f5f0cab42326f5c70febc7902ce02b8ec0adb23bef1c917d0bd"], 0x1, 0x6e3, &(0x7f00000009c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000001280)=""/4089, 0xff9) r4 = openat$cgroup_ro(r1, &(0x7f00000000c0)='memory.swap.current\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r7 = socket(0x10, 0x803, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@bridge_delneigh={0x24, 0x1e, 0x301, 0x0, 0x0, {}, [@NDA_IFINDEX={0x8, 0x8, r9}]}, 0x24}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r4, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000002020101000000000000180002801400018008000100ffffffff08000200"/44], 0x2c}}, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r11, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000900)=[{0x50}, {0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) accept4$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14, 0x80800) syz_emit_ethernet(0x5a, &(0x7f0000000440)=ANY=[], 0x0) iopl(0x3) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$eJzs3c1rXFUbAPDnTpKmb9r3TV4QbF0FBA2UTkyNrYKLigsRLBR0bTtMpqFmkimZSWlCoBYR3AhaXAi66dqPunPrx1b/Bd2ISEvVtFhxISN3PjqTZiadtvloze8Htz3n3jM595l77zln5h7mBrBjjab/ZCL2R8R7ScRwY30SEQO1VH/E0Xq5myvL+XRJolp99bekVubGynI+2l6T2tPI7IuIb96OOJBZW295cWkmVywW5hv58crsmfHy4tLB07O56cJ0Ye7wxOTkoSPPHBncuFj/+H5p79X3X3ry86N/vfXo5Xe/TeJo7G1sa49jo4zGaOM9GUjfwlVe3OjKtlmy3TvAPUkvzb76VR77Yzj6aqne9F4SAHiQnI+IKgCwwyT6fwDYYZrfA9xYWc6nS/X89n4fsdWuvRARu+vxN+9v1rf0N+7Z7a7dBx26kay635FExMgG1D8aER9/+fqn6RKbdB8SoJM3L0TEyZHRZvvfan+SNXMW6nqfkPFUD2VGb8tr/2DrfJWOf55tjf9a11/m1vgnOox/Bjtcu/diNGJXe37t9Z+5sgHVdJWO/54faM1tu9kWf8NIXyP339qYbyA5dbpYSNu2/0XEWAwMpvmJdeoYu/739VUr+lrJ9vHf7xff+CStP/2/VSJzpf+2JncqV8ndb9xN1y5EPNbfKf7k1vFPuox/j/dYx8vPvfNRt21p/Gm8zWV1/Js/q6x6KeKJ6Bx/U7Le/MTD47XTYbx5UnTwxU8fDnWrv/34p0taf/OzwFZIj//Q+vGPJO3zNct3X8d3l4a/7rbtzvF3Pv93Ja/V0s3G41yuUpmfiNiVvLJ2/aHWa5v5Zvk0/rHHO1//653/6WfCkz3G33/118/uPf7NlcY/dVfH/+4Tl2/O9HWrv7fjP1lLjTXW9NL+9bqD9/PeAQAAAAAAAAAAAAAAAAAAAAAAAECvMhGxN5JM9lY6k8lm68/wfiSGMsVSuXLgVGlhbipqz8oeiYFM86cuh9t+D3Wi8Xv4zfyh2/JPR8T/I+KDwf/U8tl8qTi13cEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMOeLs//T/0yuN17BwBsmt13LHG9sCU7AgBsmTv3/wDAv43+HwB2Hv0/AOw8+n8A2Hn0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGyy48eOpUv1z5XlfJqfOru4MFM6e3CqUJ7Jzi7ks/nS/JnsdKk0XSxk86XZtpf+0OnvFUulM5Mxt3BuvFIoV8bLi0snZksLc5UTp2dz04UThYEtiwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeldeXJrJFYuFeYmHJVEdrh+6B2V/Nj/x88Ef961X5qLTeOMT290yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwc/gkAAP//skMoxA==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) 3.145027853s ago: executing program 2: syz_mount_image$fuse(0x0, 0x0, 0x300210, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000dc0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d80)={0x0, 0xd8}, 0x1, 0x0, 0x0, 0x24040089}, 0x4008000) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={0x0, 0x0, 0x40}, 0x20) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000a00)=""/141, 0x8d}, {&(0x7f0000000ac0)=""/119, 0x77}, {&(0x7f0000000b40)=""/133, 0x85}], 0x4}}], 0x1, 0x0, &(0x7f00000002c0)={0x77359400}) lseek(r4, 0x401, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000000068000100000000000000000a000000000000000400040004000b00436274a344f77b1139d0529ff254a303293623ef6fe19604"], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) process_vm_readv(0x0, &(0x7f0000008400)=[{0x0}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x0) clock_getres(0xfffffffffffffff1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x1014800, &(0x7f00000029c0)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=0x0, @ANYBLOB="23ea354d55dcb3fbf7f036f3f27910e04a0728241007e3d26c04e2d882f1cfa9c3f93d9fea5a199f114d4ea413207106f15c2543536adc4b605802008db0bd0e8c87d8edad0f16f3152e57217af1d25fb6d4e968cf86a2aa62f79122", @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRES64, @ANYRES16], 0x1, 0xda6, &(0x7f0000003c80)="$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") ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc0186e86, &(0x7f0000000800)={@id={0x20000000, 0x0, @auto="060000001a04b9435da0352cc7411e9e"}}) 1.525564817s ago: executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) rename(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$sock_int(0xffffffffffffffff, 0x28, 0x2b, 0x0, &(0x7f0000000080)) socket$inet6(0xa, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_io_uring_setup(0xd79, &(0x7f00000035c0), &(0x7f0000000100)=0x0, &(0x7f0000003580)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0\x00'}) io_uring_enter(r4, 0x291c, 0x0, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(r2, &(0x7f0000002380)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) preadv2(r7, &(0x7f0000000280)=[{&(0x7f0000000340)=""/205, 0xcd}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r7, 0x810c9365, &(0x7f0000000580)={{0xd7, 0x10001}, 0x100, './file0\x00'}) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r8, 0x4b6a, 0x0) r9 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f00000006c0)={{0x5, 0x4}, 0x100, './file0\x00'}) ioctl$VIDIOC_SUBDEV_S_CROP(r9, 0xc038563c, &(0x7f0000000140)={0x0, 0x0, {0x1, 0xfff, 0x8001}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0xfffffffc, 0x0, 0x800000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 1.418020326s ago: executing program 3: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000100)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@mblk_io_submit}, {@nouid32}, {@barrier_val}, {@grpjquota}, {}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x20002}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) dup(r1) 1.356213805s ago: executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x10, 0x2}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000000)={0x0, 0x6}, 0xb) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000240)={0x0, 0x200}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000280)={0x0, 0x3d, 0x0}, 0x0) 1.027015534s ago: executing program 2: futex(&(0x7f000000cffc), 0x0, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0x1, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32, @ANYBLOB="0000000002000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098}, 0x90) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x8000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x597, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) read$FUSE(r3, &(0x7f0000002180)={0x2020}, 0x2020) sendfile(r3, r3, &(0x7f0000000080), 0xe0000000) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[], &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 994.728075ms ago: executing program 0: prctl$PR_SET_SECUREBITS(0x1c, 0x1f) setgroups(0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r3, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pselect6(0x0, 0x0, &(0x7f00000008c0)={0xfff}, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) bind$packet(r1, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x0) 800.887284ms ago: executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fanotify_init(0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, 0x0, 0x0) r2 = creat(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x64) madvise(&(0x7f00003c3000/0x4000)=nil, 0x4000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000000)=0x2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x801) syz_io_uring_submit(r5, 0x0, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) sendto(r3, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 540.071389ms ago: executing program 4: ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000000)={'veth0_to_bond\x00', {0x2, 0x0, @dev}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{}, 0x0, 0x0}, 0x20) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) mincore(&(0x7f0000465000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/219) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 390.273043ms ago: executing program 4: r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) 264.976669ms ago: executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f800000016000100000000000000000000000000000000000000000000000000ff0100000000000000000000000000014e2000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e00000010000000000000000000000000000000033000000ffffffff00000000000000000000000000000000e7ffffff00000000e2000000000000000000000000000000000004000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000005000000"], 0xf8}, 0x1, 0x0, 0x0, 0x94}, 0x0) r1 = dup(0xffffffffffffffff) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, 0x0) dup3(r0, r0, 0x80000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4084800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001440)=@security={'security\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x1a0, 0xd0, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ip={@loopback, @remote, 0x0, 0xff, 'veth1_to_batadv\x00', 'bond0\x00', {}, {0xff}, 0x84, 0x2}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x6, 0xc, 0x4, 0x0, 0x2], 0x3, 0x2}, {0x3, [0x2, 0x2, 0x6, 0x1, 0x1], 0x0, 0x1}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x7, 0x2, 0x5, 0x7, 0x6], 0x5, 0x2}, {0x0, [0x7, 0x2, 0x6, 0x6, 0x3, 0x7], 0x0, 0x2}}}}, {{@ip={@multicast2, @loopback, 0xff000000, 0xffffffff, 'batadv_slave_0\x00', 'wg0\x00', {}, {0xff}, 0x16, 0x1, 0x30}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@ah={{0x30}, {[0xed0, 0x1]}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0x10}, 'wg0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x20, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="b40000009b6afeaa0cfc283e000000016301fbffffffffff7e14b1cd070000007b60d63d00000000"], &(0x7f0000000280)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x9, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x19, &(0x7f0000000000)={0x5}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}, 0x10}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002c00)=ANY=[@ANYBLOB='8\x00\x00\x00.\x00%\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32, @ANYRESDEC], 0x38}, 0x1, 0xf00}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x400, 0x0, 0x0, 0x0, &(0x7f0000000b80)}, 0x50) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000738ff0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f00000000c0)=[@sack_perm, @mss, @sack_perm, @window={0x3, 0x200}, @window={0x3, 0x0, 0xfffc}, @mss, @timestamp, @window], 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3}, 0x14) shutdown(r6, 0x1) setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa010600ba9380d412000000000000002900000008000000", 0xfe60) 62.143156ms ago: executing program 4: creat(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10004}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') symlinkat(&(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') rename(0x0, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00000000000000014905d408cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000"], 0x1, 0x266, &(0x7f0000000340)="$eJzs281OE1EYxvGHDwVBmCqKgjG+0Y1uJlCvoCGQGJtokBo/EpNBptp0aEmnwdQYYefW6yAu3ZkYb4CNV+DCHRuXLIxjmKnQlhrDQiba/29zXnJ4mnP6njZn0dl58Ha1XAzdoldXf59pUNrUrpRRvwaU6GuO/XF9Uq02dWMi/+XyvYePbufy+flFs4Xc0s2smY1f+fji1burn+qj99+PfxjSdubJzrfs1+3J7amdH0vPS6GVQqtU6+bZcrVa95YD31ZKYdk1uxv4XuhbqRL6tbb5YlBdW2uYV1kZG1mr+WFoXqVhZb9h9arVaw3znnmlirmua2Mjwp8UthYXvVzaq8DfVavlvDlJ04dmClupLAgAAKSK+38v4/7fC/bu/4+bn9923P8BAAAAAAAAAAAAAAAAAAAAAPgX7EaRE0WR82s8IcVP+ETNv09JGpE0Kum0pDFJ45IcSRlJZySdlTQh6Zyk85ImJV2QdFHSVMtrpb1XHEb/exv97230v7e1PLg7LK2+WS+sF5Ixmc8VVVIgXzNy9D3uZVNSL9zKz89YLKNLqxvN/MZ6YaA9Pytn78B0y88meWvPD8Xnbj+flbN3wLrls13zw7p+rSXvytHnp6oq0Ep8Jg/yr2fN5u7kO/LT8f/971zb17V/rvu7+SR/hPPR8f4Oanow3b1DChsvy14Q+DUKCgqK/SLtbyYch4Omp70SAAAAAAAAAAAAAAAAAMBRHMfPCdPeIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnX4GAAD//5KSYE0=") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) 0s ago: executing program 0: socket$inet6(0xa, 0x0, 0x7) r0 = socket(0x10, 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc491c6170000501d0000be7ba9bd"], 0x1c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) pwritev(0xffffffffffffffff, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)}], 0x3, 0x0, 0x6) recvmmsg$unix(r0, &(0x7f0000000400), 0x8, 0x0, 0x0) kernel console output (not intermixed with test programs): , please check. [ 582.643822][T10227] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 582.732926][ T29] audit: type=1400 audit(1719093223.019:1592): avc: denied { unmount } for pid=5106 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 582.909065][T10238] loop1: detected capacity change from 0 to 128 [ 582.954049][T10242] fuse: Unknown parameter 'fd01777777777777777777777' [ 583.303724][T10246] loop1: detected capacity change from 0 to 512 [ 583.357684][T10246] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 583.413541][T10246] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 583.447115][T10246] ext4 filesystem being mounted at /root/syzkaller-testdir3009251191/syzkaller.wffHJW/243/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 583.467351][T10246] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 583.575247][T10246] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 584.063467][T10260] loop2: detected capacity change from 0 to 65536 [ 584.127926][T10260] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 584.226785][T10260] XFS (loop2): Ending clean mount [ 584.233552][T10260] XFS (loop2): Quotacheck needed: Please wait. [ 584.304530][ T5116] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.394558][T10260] XFS (loop2): Quotacheck: Done. [ 584.587996][T10258] Device name cannot be null; rc = [-22] [ 584.623336][T10277] tmpfs: Unknown parameter 'nr_blo' [ 585.528629][ T29] audit: type=1326 audit(1719093225.819:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10273 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a247d0a9 code=0x7fc00000 [ 585.561108][ T29] audit: type=1326 audit(1719093225.849:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10273 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb2a247d0a9 code=0x7fc00000 [ 585.767771][ T9421] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 585.856279][ T29] audit: type=1326 audit(1719093226.139:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10273 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a247d0a9 code=0x7fc00000 [ 585.883051][T10285] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 585.923185][ T29] audit: type=1326 audit(1719093226.139:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10273 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb2a247d0a9 code=0x7fc00000 [ 586.069306][T10285] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 587.229825][ T29] audit: type=1400 audit(1719093227.519:1597): avc: denied { execute } for pid=10319 comm="syz-executor.0" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B64202097F5479741C2D8F05571E62BA56C940BB607175CFB0421E4C4B1A21CFF433B94510DB67D9CEC430BCFEBE49A52E52C8203202864656C6574656429 dev="hugetlbfs" ino=25205 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 587.750129][T10324] loop3: detected capacity change from 0 to 65536 [ 588.422036][ T29] audit: type=1326 audit(1719093228.599:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10325 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb698a7d0a9 code=0x7fc00000 [ 588.643263][T10331] tmpfs: Unknown parameter 'nr_blo' [ 588.661854][ T29] audit: type=1326 audit(1719093228.599:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10325 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb698a7d0a9 code=0x7fc00000 [ 588.764269][ T29] audit: type=1326 audit(1719093228.879:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10325 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb698a7d0a9 code=0x7fc00000 [ 588.919659][T10333] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 588.934844][ T29] audit: type=1326 audit(1719093228.879:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10325 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb698a7d0a9 code=0x7fc00000 [ 589.006113][ T29] audit: type=1326 audit(1719093228.879:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10325 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb698a7d0a9 code=0x7fc00000 [ 589.037193][T10333] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 589.093012][ T29] audit: type=1326 audit(1719093228.889:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10325 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb698a7d0a9 code=0x7fc00000 [ 589.163659][ T29] audit: type=1326 audit(1719093228.889:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10325 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb698a7d0a9 code=0x7fc00000 [ 589.202325][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 589.244837][ T29] audit: type=1326 audit(1719093228.889:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10325 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb698a7d0a9 code=0x7fc00000 [ 589.629588][ T29] audit: type=1326 audit(1719093228.889:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10325 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb698a7d0a9 code=0x7fc00000 [ 590.064757][ T29] audit: type=1326 audit(1719093228.889:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10325 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb698a7d0a9 code=0x7fc00000 [ 592.340580][T10371] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 593.670190][T10381] loop1: detected capacity change from 0 to 65536 [ 593.710482][T10382] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 593.757479][T10381] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 594.021351][T10381] XFS (loop1): Ending clean mount [ 594.029573][T10381] XFS (loop1): Quotacheck needed: Please wait. [ 594.046409][T10382] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 594.115078][T10381] XFS (loop1): Quotacheck: Done. [ 594.447588][T10402] tmpfs: Unknown parameter 'nr_blo' [ 595.200588][ T5116] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 597.597764][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 597.597784][ T29] audit: type=1400 audit(1719093237.889:1611): avc: denied { create } for pid=10436 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 598.865615][T10453] fuse: Bad value for 'fd' [ 598.910820][ T29] audit: type=1804 audit(1719093239.189:1612): pid=10453 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1146847388/syzkaller.jdh25k/329/file0" dev="sda1" ino=1964 res=1 errno=0 [ 599.102387][T10446] loop3: detected capacity change from 0 to 65536 [ 600.198295][T10462] tmpfs: Unknown parameter 'nr_blo' [ 603.270069][T10476] loop3: detected capacity change from 0 to 32768 [ 603.356344][ T29] audit: type=1326 audit(1719093243.649:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10497 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137367d0a9 code=0x7fc00000 [ 604.176849][ T29] audit: type=1326 audit(1719093244.459:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10497 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f137367d0a9 code=0x7fc00000 [ 606.828676][T10527] fuse: Bad value for 'fd' [ 607.076397][T10539] IPv4: Oversized IP packet from 127.202.26.0 [ 607.174157][ T29] audit: type=1326 audit(1719093247.429:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10532 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb698a7d0a9 code=0x7fc00000 [ 607.248923][ T29] audit: type=1326 audit(1719093247.429:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10532 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb698a7d0a9 code=0x7fc00000 [ 607.394823][ T29] audit: type=1400 audit(1719093247.679:1617): avc: denied { mount } for pid=10544 comm="syz-executor.1" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 607.756944][ T29] audit: type=1800 audit(1719093248.039:1618): pid=10545 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 607.978838][ T29] audit: type=1326 audit(1719093248.189:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10532 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb698a7d0a9 code=0x7fc00000 [ 608.282202][T10549] overlayfs: failed to get inode (-116) [ 608.336459][T10549] overlayfs: failed to get inode (-116) [ 608.366398][T10549] overlayfs: failed to get inode (-116) [ 608.384920][ T29] audit: type=1326 audit(1719093248.659:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10550 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb698a7d0a9 code=0x7fc00000 [ 608.410488][T10549] overlayfs: failed to get inode (-116) [ 608.444560][ T29] audit: type=1326 audit(1719093248.699:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10550 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb698a7d0a9 code=0x7fc00000 [ 608.796744][ T29] audit: type=1326 audit(1719093248.719:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10550 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb698a7d0a9 code=0x7fc00000 [ 609.244159][ T29] audit: type=1326 audit(1719093248.719:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10550 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb698a7d0a9 code=0x7fc00000 [ 609.268710][ T29] audit: type=1326 audit(1719093248.719:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10550 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb698a7d0a9 code=0x7fc00000 [ 609.293027][ T29] audit: type=1326 audit(1719093248.719:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10550 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb698a7d0a9 code=0x7fc00000 [ 609.317310][ T29] audit: type=1326 audit(1719093248.719:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10550 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb698a7d0a9 code=0x7fc00000 [ 609.348345][ T29] audit: type=1326 audit(1719093248.719:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10550 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb698a7d0a9 code=0x7fc00000 [ 609.372503][ T29] audit: type=1326 audit(1719093248.719:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10550 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb698a7d0a9 code=0x7fc00000 [ 609.404082][ T29] audit: type=1326 audit(1719093248.719:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10550 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb698a7d0a9 code=0x7fc00000 [ 609.560292][T10562] fuse: Bad value for 'fd' [ 609.685196][T10536] loop2: detected capacity change from 0 to 32768 [ 609.722382][T10536] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 609.792242][T10536] XFS (loop2): Ending clean mount [ 610.047869][T10576] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 610.460830][ T9421] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 611.184418][T10586] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 611.193610][T10586] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 611.743954][T10595] loop3: detected capacity change from 0 to 1024 [ 611.815001][T10597] fuse: Bad value for 'fd' [ 612.110733][T10595] loop3: detected capacity change from 0 to 256 [ 612.118060][T10595] exfat: Unknown parameter 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 612.203629][T10592] 9pnet_fd: Insufficient options for proto=fd [ 612.211149][T10604] loop2: detected capacity change from 0 to 512 [ 612.232844][T10604] EXT4-fs error (device loop2): __ext4_fill_super:5447: inode #2: comm syz-executor.2: iget: special inode unallocated [ 612.261418][T10604] EXT4-fs (loop2): get root inode failed [ 612.291837][T10604] EXT4-fs (loop2): mount failed [ 613.882732][T10630] loop1: detected capacity change from 0 to 512 [ 614.946396][T10630] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 615.047321][T10630] ext4 filesystem being mounted at /root/syzkaller-testdir3009251191/syzkaller.wffHJW/263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 615.062841][T10639] fuse: Bad value for 'fd' [ 615.099524][T10624] loop3: detected capacity change from 0 to 32768 [ 615.469702][T10644] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.1'. [ 615.479290][T10644] nbd: must specify a device to reconfigure [ 616.438225][ T5116] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.275153][T10661] wg2: entered promiscuous mode [ 617.291449][T10661] wg2: entered allmulticast mode [ 617.302921][T10665] loop2: detected capacity change from 0 to 64 [ 617.342830][T10665] hfs: can't find a HFS filesystem on dev loop2 [ 617.496200][T10665] loop2: detected capacity change from 0 to 2048 [ 617.629568][T10665] udf: Bad value for 'anchor' [ 618.476194][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 618.476214][ T29] audit: type=1400 audit(1719093258.769:1670): avc: denied { read } for pid=10663 comm="syz-executor.2" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 618.538492][T10665] loop2: detected capacity change from 0 to 256 [ 618.564798][ T29] audit: type=1400 audit(1719093258.799:1671): avc: denied { open } for pid=10663 comm="syz-executor.2" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 618.619861][ T29] audit: type=1400 audit(1719093258.799:1672): avc: denied { ioctl } for pid=10663 comm="syz-executor.2" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 618.651632][ T29] audit: type=1400 audit(1719093258.799:1673): avc: denied { set_context_mgr } for pid=10663 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 618.706901][T10653] loop1: detected capacity change from 0 to 32768 [ 618.722918][T10665] FAT-fs (loop2): Directory bread(block 64) failed [ 618.740147][T10653] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (10653) [ 618.754218][T10665] FAT-fs (loop2): Directory bread(block 65) failed [ 618.774506][T10665] FAT-fs (loop2): Directory bread(block 66) failed [ 618.792679][T10665] FAT-fs (loop2): Directory bread(block 67) failed [ 618.803750][T10653] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 618.828988][T10665] FAT-fs (loop2): Directory bread(block 68) failed [ 618.869426][T10665] FAT-fs (loop2): Directory bread(block 69) failed [ 618.876289][T10653] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 618.879424][T10674] fuse: Bad value for 'fd' [ 618.911203][T10665] FAT-fs (loop2): Directory bread(block 70) failed [ 618.920452][T10653] BTRFS info (device loop1): using free-space-tree [ 618.927143][T10665] FAT-fs (loop2): Directory bread(block 71) failed [ 618.934336][T10665] FAT-fs (loop2): Directory bread(block 72) failed [ 618.941494][T10665] FAT-fs (loop2): Directory bread(block 73) failed [ 619.205198][ T29] audit: type=1400 audit(1719093259.489:1674): avc: denied { map } for pid=10663 comm="syz-executor.2" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 619.914612][T10699] loop2: detected capacity change from 0 to 512 [ 620.254462][T10699] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 620.271202][T10699] ext4 filesystem being mounted at /root/syzkaller-testdir503096648/syzkaller.ABY61d/38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 621.806738][ T9421] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.836841][T10714] loop3: detected capacity change from 0 to 256 [ 621.917504][ T29] audit: type=1400 audit(1719093262.189:1675): avc: denied { bind } for pid=10713 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 622.063324][ T29] audit: type=1400 audit(1719093262.189:1676): avc: denied { listen } for pid=10713 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 622.083558][T10721] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 622.083585][T10721] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 622.284098][ T29] audit: type=1400 audit(1719093262.189:1677): avc: denied { connect } for pid=10713 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 622.362447][ T29] audit: type=1400 audit(1719093262.319:1678): avc: denied { map } for pid=10713 comm="syz-executor.3" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 622.472750][ T29] audit: type=1400 audit(1719093262.349:1679): avc: denied { setopt } for pid=10713 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 623.993167][ T5116] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 624.160809][T10736] Process accounting resumed [ 624.239743][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 624.239762][ T29] audit: type=1400 audit(1719093264.529:1681): avc: denied { mount } for pid=10738 comm="syz-executor.4" name="/" dev="ramfs" ino=26993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 624.251956][T10741] loop3: detected capacity change from 0 to 512 [ 624.650758][T10745] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.3'. [ 624.660414][T10745] nbd: must specify a device to reconfigure [ 624.870735][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.880860][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.569902][ T29] audit: type=1400 audit(1719093265.829:1682): avc: denied { unmount } for pid=9649 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 626.863627][ T29] audit: type=1400 audit(1719093267.149:1683): avc: denied { append } for pid=10754 comm="syz-executor.3" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 626.948466][T10746] Bluetooth: hci4: command 0x0406 tx timeout [ 628.043295][T10769] loop2: detected capacity change from 0 to 1764 [ 628.288511][T10778] fuse: Bad value for 'fd' [ 628.306543][T10756] loop3: detected capacity change from 0 to 32768 [ 628.334001][T10756] XFS: noikeep mount option is deprecated. [ 628.578228][T10780] fuse: Bad value for 'fd' [ 629.724570][T10785] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.4'. [ 629.774378][T10790] loop1: detected capacity change from 0 to 512 [ 629.832969][T10785] overlayfs: failed to resolve 'cgroup': -2 [ 629.836239][T10790] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 629.865132][T10790] ext4 filesystem being mounted at /root/syzkaller-testdir3009251191/syzkaller.wffHJW/267/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 630.181988][T10798] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.1'. [ 630.191657][T10798] nbd: must specify a device to reconfigure [ 630.929124][ T5116] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.375294][T10805] block nbd3: shutting down sockets [ 634.078055][T10830] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 634.172269][T10830] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.4'. [ 635.082255][T10837] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 635.537697][T10837] loop1: detected capacity change from 0 to 32768 [ 636.125799][T10837] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (10837) [ 637.839999][T10837] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 637.850230][T10837] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 637.858988][T10837] BTRFS info (device loop1): using free-space-tree [ 638.085013][T10837] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 638.087210][T10837] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 638.097953][T10837] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 638.108433][T10837] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 638.282666][T10837] BTRFS error (device loop1): open_ctree failed [ 638.715344][ T45] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 639.066016][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 639.077799][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 161, changing to 11 [ 639.099455][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1097, setting to 1024 [ 639.135724][ T45] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 639.394781][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.414205][ T45] usb 4-1: config 0 descriptor?? [ 640.038104][ T45] usb 4-1: can't set config #0, error -71 [ 640.066130][ T45] usb 4-1: USB disconnect, device number 14 [ 640.298069][T10889] netlink: 408 bytes leftover after parsing attributes in process `syz-executor.1'. [ 640.312605][T10888] fuse: Bad value for 'fd' [ 641.125130][ T29] audit: type=1800 audit(1719093281.409:1684): pid=10894 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 641.130170][T10889] syz-executor.1: attempt to access beyond end of device [ 641.130170][T10889] loop1: rw=0, sector=6, nr_sectors = 2 limit=0 [ 641.193182][T10889] ADFS-fs (loop1): error: unable to read block 3, try 0 [ 641.202047][ T29] audit: type=1804 audit(1719093281.469:1685): pid=10892 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3009251191/syzkaller.wffHJW/271/bus" dev="sda1" ino=1966 res=1 errno=0 [ 641.327100][T10899] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 641.781739][T10899] loop2: detected capacity change from 0 to 32768 [ 641.890247][T10899] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (10899) [ 641.940775][T10904] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 643.113317][T10899] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 643.123627][T10899] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 643.134801][T10899] BTRFS info (device loop2): using free-space-tree [ 643.141919][ T29] audit: type=1800 audit(1719093283.419:1686): pid=10904 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1965 res=0 errno=0 [ 646.540820][T10939] loop3: detected capacity change from 0 to 2048 [ 646.582480][ T9421] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 647.142442][T10950] loop1: detected capacity change from 0 to 1024 [ 647.194249][T10956] kernel read not supported for file /rmdF¼ì (pid: 10956 comm: syz-executor.3) [ 647.276963][ T29] audit: type=1800 audit(1719093287.549:1687): pid=10956 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.3" name=726D64461716BCEC dev="mqueue" ino=27211 res=0 errno=0 [ 647.316754][T10956] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 647.341003][ T29] audit: type=1800 audit(1719093287.569:1688): pid=10950 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.1" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 647.364585][ T35] hfsplus: b-tree write err: -5, ino 4 [ 647.616674][T10970] loop3: detected capacity change from 0 to 24 [ 648.266466][T10970] overlayfs: overlapping lowerdir path [ 648.450460][ T5114] Bluetooth: hci0: command 0x0406 tx timeout [ 648.655309][ T29] audit: type=1400 audit(1719093288.939:1689): avc: denied { getopt } for pid=10968 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 651.614558][T10984] loop3: detected capacity change from 0 to 512 [ 651.622650][T10984] EXT4-fs: Ignoring removed mblk_io_submit option [ 651.629393][T10984] EXT4-fs: Invalid commit interval -1, must be smaller than 21474836 [ 651.881213][T10990] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure [ 652.933272][T10998] loop2: detected capacity change from 0 to 65536 [ 652.981036][T11002] bond0: entered promiscuous mode [ 652.994744][T11002] bond_slave_0: entered promiscuous mode [ 653.002344][T11002] bond_slave_1: entered promiscuous mode [ 653.020118][T10998] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 653.127119][ T29] audit: type=1400 audit(1719093293.419:1690): avc: denied { getopt } for pid=11003 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 653.204721][T10998] XFS (loop2): Ending clean mount [ 653.212335][T10998] XFS (loop2): Quotacheck needed: Please wait. [ 653.250575][ T29] audit: type=1400 audit(1719093293.439:1691): avc: denied { write } for pid=11003 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 653.291657][T11002] bond0: (slave bond_slave_0): Releasing backup interface [ 653.313255][T11002] bond_slave_0: left promiscuous mode [ 653.660455][T10998] XFS (loop2): Quotacheck: Done. [ 654.234683][T11001] bond0: left promiscuous mode [ 654.239505][T11001] bond_slave_1: left promiscuous mode [ 654.487475][T11022] tmpfs: Unknown parameter 'nr_blo' [ 654.517551][T11021] loop1: detected capacity change from 0 to 256 [ 654.530443][T11021] exfat: Deprecated parameter 'utf8' [ 654.544678][T11021] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 654.607067][ T29] audit: type=1400 audit(1719093294.889:1692): avc: denied { setattr } for pid=11020 comm="syz-executor.1" name="file0" dev="loop1" ino=1048664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 654.863987][ T9421] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 656.877069][T11049] loop2: detected capacity change from 0 to 128 [ 657.069557][T11049] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 657.159711][T11049] ext4 filesystem being mounted at /root/syzkaller-testdir503096648/syzkaller.ABY61d/51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 657.353945][ T29] audit: type=1326 audit(1719093297.629:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11054 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb698a7d0a9 code=0x0 [ 658.387102][ T29] audit: type=1326 audit(1719093298.499:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11058 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a247d0a9 code=0x7fc00000 [ 658.700916][T11064] xt_TCPMSS: Only works on TCP SYN packets [ 658.800447][ T29] audit: type=1326 audit(1719093298.499:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11058 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb2a247d0a9 code=0x7fc00000 [ 658.853541][ T29] audit: type=1326 audit(1719093298.999:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11058 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a247d0a9 code=0x7fc00000 [ 658.936494][T11067] bond0: entered promiscuous mode [ 658.944559][ T29] audit: type=1326 audit(1719093298.999:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11058 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb2a247d0a9 code=0x7fc00000 [ 658.979355][T11067] bond_slave_0: entered promiscuous mode [ 658.990250][T11067] bond_slave_1: entered promiscuous mode [ 659.024442][ T29] audit: type=1326 audit(1719093298.999:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11058 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a247d0a9 code=0x7fc00000 [ 659.081250][T11072] bond0: (slave bond_slave_0): Releasing backup interface [ 659.084800][ T29] audit: type=1326 audit(1719093298.999:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11058 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a247d0a9 code=0x7fc00000 [ 659.133416][ T29] audit: type=1326 audit(1719093298.999:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11058 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a247d0a9 code=0x7fc00000 [ 659.201483][T11072] bond_slave_0: left promiscuous mode [ 659.232814][ T29] audit: type=1326 audit(1719093298.999:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11058 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a247d0a9 code=0x7fc00000 [ 659.302135][ T9421] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 659.352866][T11066] bond0: left promiscuous mode [ 659.360419][ T29] audit: type=1326 audit(1719093298.999:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11058 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a247d0a9 code=0x7fc00000 [ 659.384464][T11066] bond_slave_1: left promiscuous mode [ 659.431172][ T29] audit: type=1326 audit(1719093298.999:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11058 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a247d0a9 code=0x7fc00000 [ 659.711734][T11081] loop2: detected capacity change from 0 to 512 [ 659.767293][T11081] EXT4-fs: Ignoring removed nobh option [ 659.802335][T11081] EXT4-fs: Ignoring removed bh option [ 659.829351][T11081] EXT4-fs: Mount option(s) incompatible with ext3 [ 660.010788][T11071] loop3: detected capacity change from 0 to 32768 [ 660.134598][T11081] loop2: detected capacity change from 0 to 128 [ 660.171472][T11081] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 660.289422][T11081] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 661.440409][T11097] loop2: detected capacity change from 0 to 65536 [ 661.533364][T11097] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 661.840912][T11097] XFS (loop2): Ending clean mount [ 661.848133][T11097] XFS (loop2): Quotacheck needed: Please wait. [ 662.426932][T11097] XFS (loop2): Quotacheck: Done. [ 662.779948][T11117] tmpfs: Unknown parameter 'nr_blo' [ 663.299291][ T9421] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 665.220561][T11136] loop2: detected capacity change from 0 to 128 [ 665.270684][T11136] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 665.308362][T11136] ext4 filesystem being mounted at /root/syzkaller-testdir503096648/syzkaller.ABY61d/55/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 665.652345][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 665.652362][ T29] audit: type=1804 audit(1719093305.939:1731): pid=11133 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4261878856/syzkaller.62kW7O/71/bus" dev="sda1" ino=1956 res=1 errno=0 [ 665.705151][T11146] xt_TCPMSS: Only works on TCP SYN packets [ 666.427664][ T9421] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 666.445372][T11151] loop3: detected capacity change from 0 to 512 [ 667.206919][T11153] loop1: detected capacity change from 0 to 65536 [ 667.341794][T11158] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.3'. [ 667.357659][T11158] nbd: must specify a device to reconfigure [ 668.045011][T11153] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 668.896648][ T29] audit: type=1326 audit(1719093309.089:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11164 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb698a7d0a9 code=0x0 [ 668.954722][T11153] XFS (loop1): Ending clean mount [ 668.961321][T11153] XFS (loop1): Quotacheck needed: Please wait. [ 669.083529][T11153] XFS (loop1): Quotacheck: Done. [ 669.691254][T11182] tmpfs: Unknown parameter 'nr_blo' [ 670.292882][ T5116] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 671.395205][ T29] audit: type=1326 audit(1719093311.059:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb698a7d0a9 code=0x7ffc0000 [ 671.534769][ T932] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 671.681374][ T29] audit: type=1326 audit(1719093311.059:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb698a7d0a9 code=0x7ffc0000 [ 671.707266][ T29] audit: type=1326 audit(1719093311.069:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb698a7d0a9 code=0x7ffc0000 [ 671.731415][ T29] audit: type=1326 audit(1719093311.069:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb698a7d0a9 code=0x7ffc0000 [ 671.759894][ T29] audit: type=1326 audit(1719093311.069:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb698a7d0a9 code=0x7ffc0000 [ 671.788782][ T29] audit: type=1326 audit(1719093311.069:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fb698a7d0a9 code=0x7ffc0000 [ 671.840511][ T29] audit: type=1326 audit(1719093311.069:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb698a7d0a9 code=0x7ffc0000 [ 671.884873][ T932] usb 4-1: Using ep0 maxpacket: 8 [ 671.892044][ T932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 161, changing to 11 [ 671.903998][ T29] audit: type=1326 audit(1719093311.069:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb698a7d0a9 code=0x7ffc0000 [ 671.934764][ T932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1097, setting to 1024 [ 671.982713][ T932] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 672.012525][ T932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.015012][ T29] audit: type=1326 audit(1719093311.069:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb698a7d0a9 code=0x7ffc0000 [ 672.094980][ T932] usb 4-1: config 0 descriptor?? [ 672.100842][T11186] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 672.119312][ T29] audit: type=1326 audit(1719093311.069:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb698a7d0a9 code=0x7ffc0000 [ 672.896029][ T932] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 672.926764][ T932] usb 4-1: USB disconnect, device number 15 [ 672.948159][ T932] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected [ 673.234167][T11205] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 673.356393][T11205] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 673.390186][T11209] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 673.410379][T11205] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 674.407127][T11208] fuse: Bad value for 'fd' [ 675.507379][T11223] dccp_close: ABORT with 32 bytes unread [ 676.236736][T11225] loop1: detected capacity change from 0 to 65536 [ 676.388128][T11225] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 676.464530][T11225] XFS (loop1): Ending clean mount [ 676.483488][T11225] XFS (loop1): Quotacheck needed: Please wait. [ 676.641839][T11225] XFS (loop1): Quotacheck: Done. [ 676.944313][T11251] tmpfs: Unknown parameter 'nr_blo' [ 677.228150][ T5116] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 677.793183][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 677.793200][ T29] audit: type=1326 audit(1719093318.079:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11270 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f137367d0a9 code=0x0 [ 678.927900][T11253] loop3: detected capacity change from 0 to 32768 [ 680.047857][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 680.120405][T11283] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 680.129114][T11283] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.0'. [ 680.260931][T11277] loop1: detected capacity change from 0 to 32768 [ 681.051208][T11277] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 681.081663][T11277] bcachefs (loop1): recovering from clean shutdown, journal seq 7 [ 681.139532][T11277] bcachefs (loop1): alloc_read... done [ 681.158639][T11277] bcachefs (loop1): stripes_read... done [ 681.187673][T11277] bcachefs (loop1): snapshots_read... done [ 681.220271][T11277] bcachefs (loop1): journal_replay... done [ 681.283320][T11277] bcachefs (loop1): resume_logged_ops... done [ 681.293943][T11277] bcachefs (loop1): going read-write [ 681.317899][T11277] bcachefs (loop1): bch2_copygc_start(): error creating copygc thread EINTR [ 681.425033][T11277] bcachefs (loop1): error starting copygc thread [ 681.473793][T11277] bcachefs (loop1): going read-only [ 681.479585][T11277] bcachefs (loop1): finished waiting for writes to stop [ 681.489910][ T29] audit: type=1804 audit(1719093321.749:1761): pid=11299 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4261878856/syzkaller.62kW7O/80/bus" dev="sda1" ino=1966 res=1 errno=0 [ 681.524251][T11277] bcachefs (loop1): flushing journal and stopping allocators, journal seq 7 [ 681.580066][T11277] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 7 [ 681.622786][T11277] bcachefs (loop1): shutdown complete, journal seq 8 [ 681.791696][T11277] bcachefs (loop1): marking filesystem clean [ 681.821697][T11277] bcachefs (loop1): bch2_fs_start(): error starting filesystem EINTR [ 681.854819][T11277] bcachefs (loop1): shutting down [ 681.931424][T11277] bcachefs (loop1): shutdown complete [ 682.074357][ T29] audit: type=1400 audit(1719093322.359:1762): avc: denied { mount } for pid=11317 comm="syz-executor.4" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 682.209941][ T29] audit: type=1400 audit(1719093322.499:1763): avc: denied { unmount } for pid=9649 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 682.713211][T11322] loop2: detected capacity change from 0 to 65536 [ 682.773350][T11322] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 682.857863][T11322] XFS (loop2): Ending clean mount [ 682.867316][T11322] XFS (loop2): Quotacheck needed: Please wait. [ 682.953106][T11322] XFS (loop2): Quotacheck: Done. [ 683.982236][T11342] tmpfs: Unknown parameter 'nr_blo' [ 684.327809][T11347] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 685.226543][T11347] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 685.254858][T11347] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.4'. [ 685.816242][T11355] loop1: detected capacity change from 0 to 4096 [ 685.916894][T11356] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 686.313647][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.320229][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.442736][ T29] audit: type=1804 audit(1719093326.729:1764): pid=11355 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3009251191/syzkaller.wffHJW/289/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 686.498192][T11355] 9pnet_fd: Insufficient options for proto=fd [ 686.511568][ T29] audit: type=1804 audit(1719093326.789:1765): pid=11355 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3009251191/syzkaller.wffHJW/289/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 686.562494][ T29] audit: type=1804 audit(1719093326.849:1766): pid=11355 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3009251191/syzkaller.wffHJW/289/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 686.709364][ T29] audit: type=1804 audit(1719093326.849:1767): pid=11355 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3009251191/syzkaller.wffHJW/289/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 686.881452][ T9421] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 686.998753][ T29] audit: type=1400 audit(1719093327.289:1768): avc: denied { ioctl } for pid=11361 comm="syz-executor.1" path="socket:[28806]" dev="sockfs" ino=28806 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 687.034442][T11362] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 687.132331][ T29] audit: type=1326 audit(1719093327.419:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11363 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb698a7d0a9 code=0x7fc00000 [ 687.195645][ T29] audit: type=1326 audit(1719093327.419:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11363 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb698a7d0a9 code=0x7fc00000 [ 687.230431][ T29] audit: type=1326 audit(1719093327.479:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11363 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb698a7d0a9 code=0x7fc00000 [ 687.324841][ T29] audit: type=1326 audit(1719093327.479:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11363 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb698a7d0a9 code=0x7fc00000 [ 687.411992][ T29] audit: type=1326 audit(1719093327.479:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11363 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb698a7d0a9 code=0x7fc00000 [ 688.785828][T11385] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 688.902411][T11385] team0: Port device bridge20 added [ 688.959957][T11388] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 689.016093][T11385] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 689.203466][T11375] loop1: detected capacity change from 0 to 32768 [ 689.247343][T11375] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (11375) [ 689.626562][T11394] loop2: detected capacity change from 0 to 65536 [ 689.685213][T11375] BTRFS info (device loop1): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 689.707521][T11396] 9pnet_fd: Insufficient options for proto=fd [ 689.718705][T11394] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 689.726030][T11375] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 689.804876][T11375] BTRFS info (device loop1): using free-space-tree [ 690.020661][T11394] XFS (loop2): Ending clean mount [ 690.028565][T11394] XFS (loop2): Quotacheck needed: Please wait. [ 690.781542][T11394] XFS (loop2): Quotacheck: Done. [ 690.939263][T11391] loop3: detected capacity change from 0 to 32768 [ 690.988118][T11375] BTRFS error (device loop1): open_ctree failed [ 691.008929][T11391] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 691.086153][T11424] tmpfs: Unknown parameter 'nr_blo' [ 691.385399][ T9421] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 693.116617][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 693.116635][ T29] audit: type=1400 audit(1719093333.399:1785): avc: denied { create } for pid=11429 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 693.210227][ T29] audit: type=1400 audit(1719093333.469:1786): avc: denied { setopt } for pid=11429 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 696.886753][T11467] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 700.553330][ T29] audit: type=1400 audit(1719093340.839:1787): avc: denied { mounton } for pid=11487 comm="syz-executor.0" path="/root/syzkaller-testdir1146847388/syzkaller.jdh25k/404/file0/bus" dev="tmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 700.579879][T11490] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 702.510284][T11514] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 702.633537][ T29] audit: type=1400 audit(1719093342.919:1788): avc: denied { ioctl } for pid=11512 comm="syz-executor.3" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x7c05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 702.854016][T11494] loop1: detected capacity change from 0 to 32768 [ 703.630037][T11494] syz-executor.1: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 703.667738][T11494] CPU: 1 PID: 11494 Comm: syz-executor.1 Not tainted 6.10.0-rc4-syzkaller-00217-g35bb670d65fc #0 [ 703.678250][T11494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 703.688289][T11494] Call Trace: [ 703.691553][T11494] [ 703.694468][T11494] dump_stack_lvl+0x16c/0x1f0 [ 703.699152][T11494] warn_alloc+0x24d/0x3a0 [ 703.703510][T11494] ? __pfx_warn_alloc+0x10/0x10 [ 703.708378][T11494] ? __bch2_darray_resize+0xd8/0x250 [ 703.713656][T11494] ? __get_vm_area_node+0x190/0x2d0 [ 703.718856][T11494] ? __get_vm_area_node+0x1bc/0x2d0 [ 703.724041][T11494] __vmalloc_node_range_noprof+0xff7/0x1520 [ 703.729928][T11494] ? __bch2_darray_resize+0xd8/0x250 [ 703.735201][T11494] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 703.741539][T11494] ? trace_kmalloc+0x2d/0xe0 [ 703.746156][T11494] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 703.751897][T11494] ? __bch2_darray_resize+0xd8/0x250 [ 703.757202][T11494] kvmalloc_node_noprof+0x14f/0x1a0 [ 703.762433][T11494] ? __bch2_darray_resize+0xd8/0x250 [ 703.767737][T11494] __bch2_darray_resize+0xd8/0x250 [ 703.772869][T11494] bch2_fs_btree_write_buffer_init+0x2a2/0x380 [ 703.779045][T11494] bch2_fs_alloc+0x1a50/0x2670 [ 703.783834][T11494] ? __pfx_bch2_fs_alloc+0x10/0x10 [ 703.788974][T11494] bch2_fs_open+0x7b5/0x1110 [ 703.793590][T11494] ? kasan_save_free_info+0x3b/0x60 [ 703.798812][T11494] ? __pfx_bch2_fs_open+0x10/0x10 [ 703.803857][T11494] ? bch2_mount+0x46e/0x1230 [ 703.808476][T11494] ? kasan_quarantine_put+0x10a/0x240 [ 703.813874][T11494] ? lockdep_hardirqs_on+0x7c/0x110 [ 703.819181][T11494] bch2_mount+0xe2c/0x1230 [ 703.823587][T11494] ? __pfx_bch2_mount+0x10/0x10 [ 703.828435][T11494] ? cred_has_capability.isra.0+0x192/0x2f0 [ 703.834406][T11494] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 703.840631][T11494] ? rcu_is_watching+0x12/0xc0 [ 703.845383][T11494] ? selinux_sb_eat_lsm_opts+0x594/0x700 [ 703.851007][T11494] ? cap_capable+0x1cf/0x240 [ 703.855597][T11494] ? __pfx_bch2_mount+0x10/0x10 [ 703.860455][T11494] legacy_get_tree+0x109/0x220 [ 703.865225][T11494] vfs_get_tree+0x8f/0x380 [ 703.869628][T11494] path_mount+0x14e6/0x1f20 [ 703.874120][T11494] ? kmem_cache_free+0x12f/0x3a0 [ 703.879054][T11494] ? __pfx_path_mount+0x10/0x10 [ 703.883890][T11494] ? putname+0x12e/0x170 [ 703.888119][T11494] __x64_sys_mount+0x297/0x320 [ 703.892870][T11494] ? __pfx___x64_sys_mount+0x10/0x10 [ 703.898154][T11494] do_syscall_64+0xcd/0x250 [ 703.902648][T11494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.908544][T11494] RIP: 0033:0x7ff67ba7e7aa [ 703.912949][T11494] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 703.932559][T11494] RSP: 002b:00007ff67c769ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 703.940967][T11494] RAX: ffffffffffffffda RBX: 00007ff67c769f80 RCX: 00007ff67ba7e7aa [ 703.948931][T11494] RDX: 0000000020005d80 RSI: 0000000020005dc0 RDI: 00007ff67c769f40 [ 703.956899][T11494] RBP: 0000000020005d80 R08: 00007ff67c769f80 R09: 0000000000000000 [ 703.964889][T11494] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020005dc0 [ 703.972874][T11494] R13: 00007ff67c769f40 R14: 0000000000005d5e R15: 0000000020005e00 [ 703.980835][T11494] [ 704.005080][T11494] Mem-Info: [ 704.008307][T11494] active_anon:38751 inactive_anon:28 isolated_anon:0 [ 704.008307][T11494] active_file:0 inactive_file:47245 isolated_file:0 [ 704.008307][T11494] unevictable:768 dirty:20 writeback:0 [ 704.008307][T11494] slab_reclaimable:12125 slab_unreclaimable:100359 [ 704.008307][T11494] mapped:22414 shmem:17800 pagetables:709 [ 704.008307][T11494] sec_pagetables:0 bounce:0 [ 704.008307][T11494] kernel_misc_reclaimable:0 [ 704.008307][T11494] free:1333937 free_pcp:7448 free_cma:0 [ 704.055134][T11494] Node 0 active_anon:155604kB inactive_anon:112kB active_file:0kB inactive_file:188908kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:89656kB dirty:76kB writeback:0kB shmem:70264kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10368kB pagetables:2836kB sec_pagetables:0kB all_unreclaimable? no [ 704.140875][T11494] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 704.334691][T11494] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 704.446004][T11494] lowmem_reserve[]: 0 2565 2567 0 0 [ 704.583044][T11494] Node 0 DMA32 free:1391680kB boost:0kB min:35052kB low:43812kB high:52572kB reserved_highatomic:0KB active_anon:164420kB inactive_anon:112kB active_file:0kB inactive_file:187092kB unevictable:1536kB writepending:76kB present:3129332kB managed:2654756kB mlocked:0kB bounce:0kB free_pcp:1488kB local_pcp:784kB free_cma:0kB [ 704.679062][T11494] lowmem_reserve[]: 0 0 1 0 0 [ 704.694761][T11494] Node 0 Normal free:24kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:1816kB unevictable:0kB writepending:0kB present:1048576kB managed:1896kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:28kB free_cma:0kB [ 704.774988][T11494] lowmem_reserve[]: 0 0 0 0 0 [ 704.790823][T11494] Node 1 Normal free:3947788kB boost:0kB min:54828kB low:68532kB high:82236kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 704.826389][T11511] loop2: detected capacity change from 0 to 32768 [ 704.975986][T11494] lowmem_reserve[]: 0 0 0 0 0 [ 704.984342][T11494] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 705.004291][T11494] Node 0 DMA32: 72*4kB (UME) 64*8kB (UME) 47*16kB (UME) 144*32kB (UME) 91*64kB (ME) 69*128kB (UME) 20*256kB (UM) 14*512kB (UM) 21*1024kB (UM) 6*2048kB (UM) 326*4096kB (ME) = 1402192kB [ 705.035530][T11494] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 705.055113][T11494] Node 1 Normal: 3*4kB (U) 8*8kB (U) 12*16kB (U) 4*32kB (U) 6*64kB (UM) 4*128kB (U) 4*256kB (UM) 2*512kB (UM) 2*1024kB (U) 1*2048kB (U) 962*4096kB (M) = 3947788kB [ 705.072449][T11494] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 705.077531][T11511] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 705.131521][T11494] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 705.148535][T11494] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 705.158305][T11494] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 705.168377][T11494] 65174 total pagecache pages [ 705.175523][T11494] 28 pages in swap cache [ 705.179951][T11494] Free swap = 124472kB [ 705.184265][T11494] Total swap = 124996kB [ 705.191737][T11494] 2097051 pages RAM [ 705.198951][T11494] 0 pages HighMem/MovableOnly [ 705.203793][T11494] 401768 pages reserved [ 705.208721][T11494] 0 pages cma reserved [ 705.227231][T11494] bcachefs (1e246536-b1b3-4f86-83c2-3dfcc2979a4c): shutdown complete [ 705.236485][T11551] fuse: Bad value for 'fd' [ 705.324745][T11511] XFS (loop2): Ending clean mount [ 705.353136][T11511] XFS (loop2): Quotacheck needed: Please wait. [ 705.442912][T11511] XFS (loop2): Quotacheck: Done. [ 706.415579][ T9421] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 707.041797][T11557] loop3: detected capacity change from 0 to 65536 [ 708.302507][T11569] tmpfs: Unknown parameter 'nr_blo' [ 710.187875][T11587] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 710.230809][T11591] loop2: detected capacity change from 0 to 1024 [ 710.252568][T11591] hfsplus: unable to parse mount options [ 712.428725][T11609] loop2: detected capacity change from 0 to 1024 [ 712.466788][T11609] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 712.484902][T11609] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 712.514923][T11609] EXT4-fs (loop2): invalid journal inode [ 712.534863][T11609] EXT4-fs (loop2): can't get journal size [ 713.324836][T11609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 714.180778][ T9421] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.418121][T11620] loop3: detected capacity change from 0 to 65536 [ 714.921948][T11630] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 715.029136][T11631] tmpfs: Unknown parameter 'nr_blo' [ 716.057251][T11641] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 718.174568][T11656] loop1: detected capacity change from 0 to 4096 [ 719.640775][ T29] audit: type=1804 audit(1719093359.909:1789): pid=11666 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1146847388/syzkaller.jdh25k/419/bus" dev="sda1" ino=1962 res=1 errno=0 [ 719.985510][T11648] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 720.951166][T11683] loop2: detected capacity change from 0 to 4096 [ 721.031283][T11685] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 721.128507][ T29] audit: type=1400 audit(1719093361.389:1790): avc: denied { ioctl } for pid=11682 comm="syz-executor.2" path="/root/syzkaller-testdir503096648/syzkaller.ABY61d/82/file0/memory.events" dev="loop2" ino=18 ioctlcmd=0x5839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 721.170343][T11681] loop3: detected capacity change from 0 to 4096 [ 722.545918][ T29] audit: type=1804 audit(1719093362.709:1791): pid=11689 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2668136040/syzkaller.daEYm2/211/bus" dev="sda1" ino=1955 res=1 errno=0 [ 722.890590][T11693] loop2: detected capacity change from 0 to 65536 [ 722.939231][T11689] 9pnet_fd: Insufficient options for proto=fd [ 722.945677][ T29] audit: type=1804 audit(1719093363.209:1792): pid=11689 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2668136040/syzkaller.daEYm2/211/bus" dev="sda1" ino=1955 res=1 errno=0 [ 723.349408][T11701] loop1: detected capacity change from 0 to 65536 [ 723.369298][T11693] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 723.440908][ T29] audit: type=1804 audit(1719093363.679:1793): pid=11689 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2668136040/syzkaller.daEYm2/211/bus" dev="sda1" ino=1955 res=1 errno=0 [ 723.509638][T11693] XFS (loop2): Ending clean mount [ 723.518054][T11693] XFS (loop2): Quotacheck needed: Please wait. [ 723.525781][T11701] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 723.533341][ T29] audit: type=1804 audit(1719093363.689:1794): pid=11689 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2668136040/syzkaller.daEYm2/211/bus" dev="sda1" ino=1955 res=1 errno=0 [ 723.614248][T11701] XFS (loop1): Ending clean mount [ 723.656374][T11701] XFS (loop1): Quotacheck needed: Please wait. [ 723.702821][T11693] XFS (loop2): Quotacheck: Done. [ 723.983531][T11701] XFS (loop1): Quotacheck: Done. [ 723.999424][T11719] tmpfs: Unknown parameter 'nr_blo' [ 725.233979][ T5116] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 725.287243][ T29] audit: type=1804 audit(1719093365.569:1795): pid=11717 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1146847388/syzkaller.jdh25k/422/bus" dev="sda1" ino=1961 res=1 errno=0 [ 725.334433][T11717] 9pnet_fd: Insufficient options for proto=fd [ 725.488205][ T29] audit: type=1804 audit(1719093365.609:1796): pid=11717 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1146847388/syzkaller.jdh25k/422/bus" dev="sda1" ino=1961 res=1 errno=0 [ 725.594729][ T29] audit: type=1804 audit(1719093365.669:1797): pid=11717 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1146847388/syzkaller.jdh25k/422/bus" dev="sda1" ino=1961 res=1 errno=0 [ 725.693462][ T29] audit: type=1400 audit(1719093365.839:1798): avc: denied { create } for pid=11727 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 725.846487][ T29] audit: type=1400 audit(1719093365.879:1799): avc: denied { ioctl } for pid=11727 comm="syz-executor.3" path="socket:[29260]" dev="sockfs" ino=29260 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 725.920824][ T29] audit: type=1400 audit(1719093365.919:1800): avc: denied { shutdown } for pid=11725 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 726.412881][T11737] loop1: detected capacity change from 0 to 1024 [ 726.470623][T11737] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 726.651250][T11743] netlink: 412 bytes leftover after parsing attributes in process `syz-executor.4'. [ 727.048213][T11742] EXT4-fs error (device loop1): ext4_xattr_ibody_get:653: inode #2: comm syz-executor.1: corrupted in-inode xattr: bad e_name length [ 727.083946][T11742] EXT4-fs (loop1): Remounting filesystem read-only [ 727.166445][ T9421] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 727.374537][ T29] audit: type=1400 audit(1719093367.659:1801): avc: denied { listen } for pid=11747 comm="syz-executor.4" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 727.451017][ T5116] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=11 [ 727.474055][ T29] audit: type=1400 audit(1719093367.759:1802): avc: denied { accept } for pid=11747 comm="syz-executor.4" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 727.512295][ T5116] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=11 [ 727.540998][ T5116] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=11 [ 727.579432][ T5116] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=11 [ 727.613411][T11753] tipc: Invalid UDP bearer configuration [ 727.613478][T11753] tipc: Enabling of bearer rejected, failed to enable media [ 727.638744][ T5116] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=11 [ 727.657578][ T5116] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=11 [ 727.712703][ T5116] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=11 [ 727.736028][ T5116] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=13 [ 727.751945][ T5116] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=13 [ 727.771477][ T5116] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=14 [ 727.774676][T11729] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 727.805194][ T5116] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=14 [ 728.113131][ T5116] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.184920][ T29] audit: type=1400 audit(1719093368.469:1803): avc: denied { create } for pid=11766 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 728.260424][T11769] ieee802154 phy0 wpan0: encryption failed: -22 [ 728.316330][ T29] audit: type=1400 audit(1719093368.543:1804): avc: denied { write } for pid=11766 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 728.389448][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.598474][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.602126][T11779] loop2: detected capacity change from 0 to 4096 [ 729.668767][T11780] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 729.878416][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.987168][T11785] 9pnet_fd: Insufficient options for proto=fd [ 730.138539][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.278307][T11786] loop3: detected capacity change from 0 to 4096 [ 730.625079][ T35] bridge_slave_1: left allmulticast mode [ 730.642727][ T35] bridge_slave_1: left promiscuous mode [ 730.665417][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.721999][ T35] bridge_slave_0: left allmulticast mode [ 730.728090][ T35] bridge_slave_0: left promiscuous mode [ 730.755981][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.778684][T11782] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 730.802686][ T5114] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 730.813724][ T5114] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 730.828701][ T5114] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 730.841824][ T5114] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 730.850231][ T5114] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 730.859182][ T5114] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 731.022655][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 731.022667][ T29] audit: type=1326 audit(1719093371.313:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11796 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f137367d0a9 code=0x0 [ 731.305845][T11802] loop3: detected capacity change from 0 to 2048 [ 731.505732][T11778] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 731.817996][ T35] team0: Port device bridge1 removed [ 731.933785][ T35] team0: Port device bridge2 removed [ 732.324736][ T5224] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 732.388284][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 732.401004][ T35] bond0 (unregistering): Released all slaves [ 732.416364][ T35] bond1 (unregistering): Released all slaves [ 732.482055][T11805] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 732.505186][T11810] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 732.532816][ T5224] usb 3-1: Using ep0 maxpacket: 16 [ 732.551336][ T5224] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 732.564153][ T5224] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD7 has an invalid bInterval 152, changing to 11 [ 732.599188][ T5224] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD7 has invalid maxpacket 8285, setting to 1024 [ 732.652298][ T5224] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 732.677743][ T5224] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 732.689404][ T5224] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.698773][ T5224] usb 3-1: Product: syz [ 732.703031][ T5224] usb 3-1: Manufacturer: syz [ 732.710992][ T5224] usb 3-1: SerialNumber: syz [ 732.766613][ T5224] usb 3-1: config 0 descriptor?? [ 732.776254][T11816] team0: Port device bridge21 added [ 732.975184][T10746] Bluetooth: hci3: command tx timeout [ 733.018506][ T5224] appledisplay: Apple Cinema Display connected [ 733.242424][T11820] loop3: detected capacity change from 0 to 65536 [ 733.307933][ T5224] usb 3-1: USB disconnect, device number 20 [ 733.313905][ C1] usb 3-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 733.356362][ T5224] appledisplay: Apple Cinema Display disconnected [ 734.234486][ T35] hsr_slave_0: left promiscuous mode [ 734.246743][ T35] hsr_slave_1: left promiscuous mode [ 734.257362][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 734.279727][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 734.312449][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 734.328360][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 734.391258][ T35] veth1_macvtap: left promiscuous mode [ 734.397244][ T35] veth0_macvtap: left promiscuous mode [ 734.403036][ T35] veth1_vlan: left promiscuous mode [ 734.408670][ T35] veth0_vlan: left promiscuous mode [ 734.534250][T11839] loop3: detected capacity change from 0 to 64 [ 735.034908][T10746] Bluetooth: hci3: command tx timeout [ 735.257942][ T29] audit: type=1326 audit(1719093375.553:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11853 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f137367d0a9 code=0x0 [ 735.503509][T11852] loop2: detected capacity change from 0 to 65536 [ 735.590507][T11852] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 735.644120][T11852] XFS (loop2): Ending clean mount [ 735.651628][T11852] XFS (loop2): Quotacheck needed: Please wait. [ 735.748189][T11852] XFS (loop2): Quotacheck: Done. [ 735.941119][ T35] team0 (unregistering): Port device team_slave_1 removed [ 736.057513][ T35] team0 (unregistering): Port device team_slave_0 removed [ 736.777736][ T9421] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 737.105214][T10746] Bluetooth: hci3: command tx timeout [ 737.119649][T11871] loop3: detected capacity change from 0 to 32768 [ 737.152278][T11871] btrfs: Unknown parameter 'pcr' [ 737.483633][T11871] trusted_key: encrypted_key: insufficient parameters specified [ 737.511182][ T29] audit: type=1800 audit(1719093377.803:1812): pid=11871 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1950 res=0 errno=0 [ 737.541976][T11871] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 737.548908][T11871] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 737.599553][ T29] audit: type=1400 audit(1719093377.803:1813): avc: denied { write } for pid=11872 comm="syz-executor.2" name="ppp" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 737.648755][T11871] vhci_hcd vhci_hcd.0: Device attached [ 737.695955][T11879] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 737.706993][T11874] vhci_hcd: connection closed [ 737.711957][ T7812] vhci_hcd: stop threads [ 737.734997][ T7812] vhci_hcd: release socket [ 737.834186][ T2534] vhci_hcd: vhci_device speed not set [ 737.845100][ T7812] vhci_hcd: disconnect device [ 737.863832][T11882] loop2: detected capacity change from 0 to 512 [ 738.014770][ T2534] usb 15-1: new full-speed USB device number 2 using vhci_hcd [ 738.022447][ T2534] usb 15-1: enqueue for inactive port 0 [ 738.121183][T11882] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 738.184935][ T2534] vhci_hcd: vhci_device speed not set [ 738.316272][T11882] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 738.330196][T11882] ext4 filesystem being mounted at /root/syzkaller-testdir503096648/syzkaller.ABY61d/89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 738.380222][T11793] chnl_net:caif_netlink_parms(): no params data found [ 739.216791][T10746] Bluetooth: hci3: command tx timeout [ 739.391366][T11873] EXT4-fs error (device loop2): __ext4_remount:6503: comm syz-executor.2: Abort forced by user [ 739.471722][T11873] EXT4-fs (loop2): Remounting filesystem read-only [ 739.540006][ T29] audit: type=1400 audit(1719093379.823:1814): avc: denied { read } for pid=11894 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 739.586592][T11793] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.604379][T11793] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.630043][T11793] bridge_slave_0: entered allmulticast mode [ 739.662441][T11793] bridge_slave_0: entered promiscuous mode [ 739.711743][T11793] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.731720][T11793] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.745909][T11793] bridge_slave_1: entered allmulticast mode [ 739.769774][T11793] bridge_slave_1: entered promiscuous mode [ 740.022891][T11793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 740.051838][T11793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 740.248375][T11793] team0: Port device team_slave_0 added [ 740.270899][T11793] team0: Port device team_slave_1 added [ 740.472308][T11793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 740.521837][T11793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 740.566094][T11793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 740.593194][T11918] loop3: detected capacity change from 0 to 512 [ 740.599959][T11793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 740.625655][T11793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 740.684357][ T9421] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 740.697711][T11793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 740.984818][T11925] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.3'. [ 740.994512][T11925] nbd: must specify a device to reconfigure [ 744.963737][T11933] loop3: detected capacity change from 0 to 256 [ 744.971846][T11933] exfat: Unknown parameter '01777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 745.389565][T11937] loop2: detected capacity change from 0 to 65536 [ 745.418402][T11793] hsr_slave_0: entered promiscuous mode [ 745.581709][T11793] hsr_slave_1: entered promiscuous mode [ 745.592905][T11945] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 745.601200][T11945] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.3'. [ 745.618414][T11937] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 746.538527][T11937] XFS (loop2): Ending clean mount [ 746.546234][T11937] XFS (loop2): Quotacheck needed: Please wait. [ 746.647176][T11937] XFS (loop2): Quotacheck: Done. [ 747.373859][ T29] audit: type=1400 audit(1719093387.663:1815): avc: denied { mount } for pid=11958 comm="syz-executor.0" name="/" dev="configfs" ino=1180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 747.384538][ T9421] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 747.415458][T11964] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 747.534840][ T29] audit: type=1400 audit(1719093387.703:1816): avc: denied { write } for pid=11958 comm="syz-executor.0" name="/" dev="configfs" ino=1180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 747.607665][ T29] audit: type=1400 audit(1719093387.803:1817): avc: denied { mounton } for pid=11958 comm="syz-executor.0" path="/root/syzkaller-testdir1146847388/syzkaller.jdh25k/432/file0" dev="configfs" ino=1180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 747.692501][ T29] audit: type=1400 audit(1719093387.863:1818): avc: denied { remount } for pid=11958 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 747.726722][ T29] audit: type=1400 audit(1719093387.933:1819): avc: denied { unmount } for pid=5106 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 747.760286][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.766920][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.140233][T11793] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 753.176979][T11793] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 754.311423][T11793] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 754.409829][T11793] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 754.475885][T11999] loop2: detected capacity change from 0 to 1024 [ 755.476705][T11793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 755.535870][T11793] 8021q: adding VLAN 0 to HW filter on device team0 [ 755.583326][ T932] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.590597][ T932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 755.614780][T10746] Bluetooth: hci4: unexpected subevent 0x1a length: 10 > 6 [ 755.629357][ T932] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.636619][ T932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 757.283754][T11793] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 757.452631][T11793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 757.961536][T12025] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.3'. [ 758.016716][ T29] audit: type=1400 audit(1719093398.313:1820): avc: denied { bind } for pid=12024 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 758.170589][ T29] audit: type=1800 audit(1719093398.313:1821): pid=12025 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1959 res=0 errno=0 [ 758.776437][T11793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 758.877691][T12034] loop3: detected capacity change from 0 to 64 [ 758.983843][T11793] veth0_vlan: entered promiscuous mode [ 760.260887][T11793] veth1_vlan: entered promiscuous mode [ 760.443539][T11793] veth0_macvtap: entered promiscuous mode [ 760.451809][T12045] loop3: detected capacity change from 0 to 256 [ 760.493714][T11793] veth1_macvtap: entered promiscuous mode [ 760.504157][T12045] exfat: Unknown parameter '01777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 760.629378][T11793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 760.639469][T12048] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 760.648021][T12048] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.3'. [ 760.653098][T11793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.775405][T11793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 760.788148][T11793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.801942][T11793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 760.812857][T11793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.909649][T11793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 760.967585][T11793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.002962][T11793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 761.078878][T11793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.122389][T11793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.150719][T11793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.171257][T11793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.202926][T11793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.259579][T11793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.293017][T11793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.318518][T11793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.357874][T11793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 761.427897][T11793] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.458666][T11793] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.527864][T11793] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.570516][T11793] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.211528][ T29] audit: type=1400 audit(1719093404.503:1822): avc: denied { bind } for pid=12065 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 764.333317][ T2427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.351777][ T2427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.469925][ T2427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.523075][ T2427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.597975][T12070] loop3: detected capacity change from 0 to 1024 [ 765.243564][T12075] loop1: detected capacity change from 0 to 65536 [ 765.343096][T12075] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 765.439339][T12075] XFS (loop1): Ending clean mount [ 765.450017][T12075] XFS (loop1): Quotacheck needed: Please wait. [ 765.571452][T12075] XFS (loop1): Quotacheck: Done. [ 765.655905][T12089] loop3: detected capacity change from 0 to 64 [ 765.857579][T11793] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 768.835227][T12111] loop2: detected capacity change from 0 to 1024 [ 770.285611][ T5114] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 770.308620][ T5114] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 770.319605][ T5114] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 770.328890][ T5114] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 770.348653][ T5114] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 770.360894][ T5114] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 770.390265][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.425505][T12122] loop1: detected capacity change from 0 to 256 [ 770.486892][T12122] exfat: Unknown parameter '01777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 770.615667][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.716965][T12127] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 770.731382][T12127] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.1'. [ 770.761191][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.684517][T12117] loop2: detected capacity change from 0 to 32768 [ 773.442870][ T5114] Bluetooth: hci2: command tx timeout [ 773.537278][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.842043][T12116] chnl_net:caif_netlink_parms(): no params data found [ 775.656838][ T5114] Bluetooth: hci2: command tx timeout [ 775.853544][T12116] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.878678][T12116] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.978746][T12116] bridge_slave_0: entered allmulticast mode [ 775.990798][T12116] bridge_slave_0: entered promiscuous mode [ 776.007416][T12116] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.015269][T12116] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.022841][T12116] bridge_slave_1: entered allmulticast mode [ 776.060950][T12116] bridge_slave_1: entered promiscuous mode [ 777.664809][ T5114] Bluetooth: hci2: command tx timeout [ 779.120559][ T29] audit: type=1400 audit(1719093419.403:1823): avc: denied { ioctl } for pid=12169 comm="syz-executor.4" path="socket:[32498]" dev="sockfs" ino=32498 ioctlcmd=0x450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 779.203244][T12116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 779.737362][ T51] bridge_slave_1: left allmulticast mode [ 779.745695][ T5114] Bluetooth: hci2: command tx timeout [ 779.751442][ T51] bridge_slave_1: left promiscuous mode [ 779.818421][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.858244][ T51] bridge_slave_0: left allmulticast mode [ 779.872444][T12179] loop1: detected capacity change from 0 to 256 [ 779.883851][ T51] bridge_slave_0: left promiscuous mode [ 779.999789][T12179] exfat: Unknown parameter '01777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 780.052145][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.864859][T12187] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 780.878652][T12187] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.1'. [ 781.449569][ T51] team0: Port device bridge1 removed [ 781.542389][ T51] team0: Port device bridge2 removed [ 782.050216][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 782.061589][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 782.073424][ T51] bond0 (unregistering): Released all slaves [ 782.098335][T12116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 782.902773][T12116] team0: Port device team_slave_0 added [ 784.313009][T12116] team0: Port device team_slave_1 added [ 784.663141][ T29] audit: type=1326 audit(1719093424.733:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12209 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137367d0a9 code=0x7fc00000 [ 784.722343][T12116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 784.814941][ T2534] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 785.270988][ T29] audit: type=1326 audit(1719093424.733:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12209 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f137367d0a9 code=0x7fc00000 [ 785.285010][T12116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 785.334828][ T29] audit: type=1326 audit(1719093424.753:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12209 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137367d0a9 code=0x7fc00000 [ 785.360976][T12116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 786.025825][ T2534] usb 2-1: device not accepting address 26, error -71 [ 786.890400][T12222] loop1: detected capacity change from 0 to 65536 [ 786.971280][T12222] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 787.012382][T12222] XFS (loop1): Ending clean mount [ 787.190404][T12222] XFS (loop1): Quotacheck needed: Please wait. [ 787.210284][T12116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 787.219853][T12116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 787.246010][T12116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 788.004203][T12222] XFS (loop1): Quotacheck: Done. [ 788.041790][T12116] hsr_slave_0: entered promiscuous mode [ 788.093885][T12243] tmpfs: Unknown parameter 'nr_blo' [ 788.206565][T12116] hsr_slave_1: entered promiscuous mode [ 788.239393][T12116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 788.243322][T11793] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 788.310678][ T45] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 788.780832][T12116] Cannot create hsr debugfs directory [ 789.295531][ T51] hsr_slave_0: left promiscuous mode [ 789.301429][T12251] fuse: Bad value for 'fd' [ 789.336156][ T51] hsr_slave_1: left promiscuous mode [ 789.412582][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 789.434708][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 789.489383][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 789.512335][ T29] audit: type=1804 audit(1719093429.803:1827): pid=12239 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1146847388/syzkaller.jdh25k/449/bus" dev="sda1" ino=1947 res=1 errno=0 [ 789.524661][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 789.612576][ T51] veth1_macvtap: left promiscuous mode [ 789.618662][ T51] veth0_macvtap: left promiscuous mode [ 789.625001][ T51] veth1_vlan: left promiscuous mode [ 789.630628][ T51] veth0_vlan: left promiscuous mode [ 789.703954][ T29] audit: type=1326 audit(1719093429.993:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12257 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137367d0a9 code=0x7fc00000 [ 789.756239][ T29] audit: type=1326 audit(1719093429.993:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12257 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f137367d0a9 code=0x7fc00000 [ 790.468436][ T29] audit: type=1326 audit(1719093430.703:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12257 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137367d0a9 code=0x7fc00000 [ 790.565121][T12266] loop1: detected capacity change from 0 to 64 [ 790.818776][ T29] audit: type=1326 audit(1719093430.723:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12257 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f137367d0a9 code=0x7fc00000 [ 790.934754][ T29] audit: type=1326 audit(1719093430.723:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12257 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137367d0a9 code=0x7fc00000 [ 790.959214][ T29] audit: type=1326 audit(1719093430.743:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12257 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137367d0a9 code=0x7fc00000 [ 791.004488][T12270] fuse: Bad value for 'fd' [ 791.012600][ T29] audit: type=1804 audit(1719093431.303:1834): pid=12270 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1146847388/syzkaller.jdh25k/451/file0" dev="sda1" ino=1955 res=1 errno=0 [ 791.692407][ T51] team0 (unregistering): Port device team_slave_1 removed [ 791.784329][ T51] team0 (unregistering): Port device team_slave_0 removed [ 794.501183][ T5165] IPVS: starting estimator thread 0... [ 794.627537][T12288] IPVS: using max 17 ests per chain, 40800 per kthread [ 795.220795][T12296] loop2: detected capacity change from 0 to 128 [ 795.276847][ T29] audit: type=1800 audit(1719093435.553:1835): pid=12296 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=1048671 res=0 errno=0 [ 795.432388][ T29] audit: type=1400 audit(1719093435.703:1836): avc: denied { getopt } for pid=12295 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 796.105182][T12302] netlink: 136 bytes leftover after parsing attributes in process `syz-executor.1'. [ 796.331904][T12304] kvm: user requested TSC rate below hardware speed [ 796.659518][T12116] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 796.688946][T12116] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 796.727598][T12116] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 796.797550][ T29] audit: type=1400 audit(1719093437.083:1837): avc: denied { accept } for pid=12318 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 796.841247][T12116] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 797.281011][T12116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 797.436620][T12116] 8021q: adding VLAN 0 to HW filter on device team0 [ 797.498309][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.505543][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 797.601956][ T5224] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.609205][ T5224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 798.957972][T12116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 799.120261][T12116] veth0_vlan: entered promiscuous mode [ 799.164441][T12116] veth1_vlan: entered promiscuous mode [ 799.286070][T12116] veth0_macvtap: entered promiscuous mode [ 799.321665][T12116] veth1_macvtap: entered promiscuous mode [ 799.389464][T12116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 799.429304][T12116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.455549][T12116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 799.481477][T12116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.516674][T12116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 799.554594][T12116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.585235][T12116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 799.614641][T12116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.651931][T12116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 799.720680][T12116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 799.761791][T12116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.784657][T12116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 799.811817][T12116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.834607][T12116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 799.855772][T12116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.876888][T12116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 799.899101][T12116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.947908][T12116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 799.993953][T12116] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.047045][T12116] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.067872][T12116] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.094697][T12116] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.342023][T12171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 801.396805][T12350] loop1: detected capacity change from 0 to 8192 [ 801.405383][T12171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 801.509783][ T2484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 801.533117][ T2484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 801.879693][T12360] loop2: detected capacity change from 0 to 2048 [ 804.812094][ T29] audit: type=1400 audit(1719093445.103:1838): avc: denied { write } for pid=12384 comm="syz-executor.1" name="ip_vs" dev="proc" ino=4026533804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 805.136839][ T5224] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 805.564995][ T5224] usb 3-1: Using ep0 maxpacket: 16 [ 805.588232][ T5224] usb 3-1: config 0 has no interfaces? [ 805.594230][ T5224] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 805.658225][ T5224] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.796569][ T5224] usb 3-1: config 0 descriptor?? [ 806.033655][T12383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.076588][T12383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.100918][ T9089] usb 3-1: USB disconnect, device number 22 [ 806.119059][T12402] Cannot find add_set index 0 as target [ 806.264371][T12407] loop3: detected capacity change from 0 to 2048 [ 807.966258][T12400] loop1: detected capacity change from 0 to 32768 [ 808.183795][T12442] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 808.318584][T12400] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 808.323719][T12442] team0: Port device bridge1 added [ 808.374887][T12442] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 808.379133][T12400] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 808.514930][T12400] bcachefs (loop1): alloc_read... done [ 808.520602][T12400] bcachefs (loop1): stripes_read... done [ 808.555125][T12400] bcachefs (loop1): snapshots_read... done [ 808.578300][T12454] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 808.593020][T12400] bcachefs (loop1): journal_replay... done [ 808.614751][T12400] bcachefs (loop1): resume_logged_ops... done [ 808.642920][T12400] bcachefs (loop1): going read-write [ 808.669177][T12454] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 808.680081][T12400] bcachefs (loop1): done starting filesystem [ 809.000295][T12462] loop3: detected capacity change from 0 to 2048 [ 809.235344][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.242400][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.127932][T11793] bcachefs (loop1): shutting down [ 810.133614][T11793] bcachefs (loop1): going read-only [ 810.149490][T11793] bcachefs (loop1): finished waiting for writes to stop [ 810.238131][T11793] bcachefs (loop1): flushing journal and stopping allocators, journal seq 12 [ 810.311721][T11793] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 15 [ 810.363067][T11793] bcachefs (loop1): shutdown complete, journal seq 16 [ 810.392060][T11793] bcachefs (loop1): marking filesystem clean [ 810.545054][T12478] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 810.553353][T12478] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 810.587947][T11793] bcachefs (loop1): shutdown complete [ 810.610944][T12480] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 810.722771][T12480] team0: Port device bridge22 added [ 810.732456][T12480] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 810.808180][ T29] audit: type=1326 audit(1719093451.103:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12481 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2ce7d0a9 code=0x7fc00000 [ 810.826225][T12491] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 810.843554][ T29] audit: type=1326 audit(1719093451.103:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12481 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9c2ce7d0a9 code=0x7fc00000 [ 811.072726][T12497] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 811.133859][T12497] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.2'. [ 811.478528][ T29] audit: type=1326 audit(1719093451.763:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12481 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2ce7d0a9 code=0x7fc00000 [ 811.504492][T12503] loop2: detected capacity change from 0 to 2048 [ 811.664370][T12510] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 811.854332][T12510] team0: Port device bridge1 added [ 811.864952][T12518] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 811.986131][T12524] dvmrp0: entered allmulticast mode [ 813.803079][T12552] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 813.897635][T12554] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 813.916264][T12554] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 813.956551][T12560] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 814.050065][ T29] audit: type=1400 audit(1719093454.343:1842): avc: denied { setattr } for pid=12557 comm="syz-executor.3" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 814.199290][T12570] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 814.226673][ T29] audit: type=1800 audit(1719093454.523:1843): pid=12558 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.3" name="/" dev="9p" ino=2 res=0 errno=0 [ 814.308100][ T29] audit: type=1400 audit(1719093454.603:1844): avc: denied { read } for pid=12572 comm="syz-executor.2" name="ptp0" dev="devtmpfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 814.367491][ T29] audit: type=1400 audit(1719093454.633:1845): avc: denied { open } for pid=12572 comm="syz-executor.2" path="/dev/ptp0" dev="devtmpfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 814.423101][ T29] audit: type=1400 audit(1719093454.643:1846): avc: denied { ioctl } for pid=12572 comm="syz-executor.2" path="/dev/ptp0" dev="devtmpfs" ino=1074 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 814.541011][T12576] loop1: detected capacity change from 0 to 2048 [ 814.576678][ T29] audit: type=1326 audit(1719093454.873:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12584 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb698a7d0a9 code=0x0 [ 814.664988][T12587] loop3: detected capacity change from 0 to 64 [ 814.803324][T12595] dccp_close: ABORT with 32 bytes unread [ 814.980212][T12604] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 815.488822][ T29] audit: type=1400 audit(1719093455.783:1848): avc: denied { setopt } for pid=12614 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 816.120415][T12635] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 817.023278][T12642] loop3: detected capacity change from 0 to 2048 [ 817.068700][T12649] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 817.092739][T12649] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 817.373660][T12657] loop1: detected capacity change from 0 to 4096 [ 817.392467][T12662] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 817.404450][T12657] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 817.756143][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 817.756162][ T29] audit: type=1326 audit(1719093458.043:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12666 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe83a47d0a9 code=0x0 [ 817.949228][T12670] loop2: detected capacity change from 0 to 1764 [ 818.671846][T12678] loop3: detected capacity change from 0 to 256 [ 818.705653][T12678] exfat: Deprecated parameter 'namecase' [ 818.739558][T12678] exfat: Deprecated parameter 'utf8' [ 818.754343][T12678] exfat: Deprecated parameter 'namecase' [ 818.945750][T12686] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 818.964488][T12680] loop2: detected capacity change from 0 to 4096 [ 818.984692][T12686] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 818.997293][T12680] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 819.231962][T12676] loop1: detected capacity change from 0 to 32768 [ 819.255038][T12676] btrfs: Deprecated parameter 'usebackuproot' [ 819.279767][T12676] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 819.309668][T12676] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (12676) [ 819.352755][T12676] BTRFS info (device loop1): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 819.375768][T12676] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 819.380077][T12693] loop3: detected capacity change from 0 to 512 [ 819.400074][T12676] BTRFS info (device loop1): using free-space-tree [ 819.492103][T12693] EXT4-fs: Ignoring removed nobh option [ 819.498000][T12693] EXT4-fs: Ignoring removed bh option [ 819.644175][T12676] BTRFS info (device loop1): rebuilding free space tree [ 819.689266][T12693] loop3: detected capacity change from 0 to 128 [ 819.925745][T11793] BTRFS info (device loop1): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 820.347768][ T29] audit: type=1804 audit(1719093460.643:1851): pid=12709 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4120415599/syzkaller.kgnVzS/29/bus" dev="sda1" ino=1967 res=1 errno=0 [ 823.573385][ T29] audit: type=1400 audit(1719093463.863:1852): avc: denied { getopt } for pid=12742 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 823.649637][ T29] audit: type=1400 audit(1719093463.913:1853): avc: denied { create } for pid=12739 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 823.681704][T12744] Bluetooth: MGMT ver 1.22 [ 823.732949][T12747] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 823.746652][ T29] audit: type=1400 audit(1719093463.923:1854): avc: denied { ioctl } for pid=12739 comm="syz-executor.1" path="socket:[34435]" dev="sockfs" ino=34435 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 824.117879][T12752] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.1'. [ 824.136386][T12762] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 824.144506][T12762] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 824.153520][T12752] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.1'. [ 824.199300][T12752] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.1'. [ 824.214860][T12760] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 824.240701][T12760] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. [ 824.272888][T12752] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.1'. [ 824.286401][T12752] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.1'. [ 824.306658][T12752] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.1'. [ 824.337069][T12752] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.1'. [ 824.405458][T12764] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12764 comm=syz-executor.2 [ 824.582894][T12767] loop3: detected capacity change from 0 to 2048 [ 824.603140][ T29] audit: type=1400 audit(1719093464.893:1855): avc: denied { ioctl } for pid=12768 comm="syz-executor.1" path="socket:[34494]" dev="sockfs" ino=34494 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 824.776686][ T29] audit: type=1400 audit(1719093465.073:1856): avc: denied { search } for pid=12770 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 824.822579][T12772] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 824.868143][ T29] audit: type=1400 audit(1719093465.113:1857): avc: denied { read } for pid=12773 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 825.005381][ T29] audit: type=1400 audit(1719093465.113:1858): avc: denied { open } for pid=12773 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 825.098350][ T29] audit: type=1400 audit(1719093465.113:1859): avc: denied { getattr } for pid=12773 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 825.181618][ T29] audit: type=1400 audit(1719093465.133:1860): avc: denied { getattr } for pid=12773 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1448 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 825.253997][ T29] audit: type=1400 audit(1719093465.263:1861): avc: denied { read } for pid=12776 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1448 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 828.793527][T12827] loop1: detected capacity change from 0 to 32768 [ 828.842340][T12827] btrfs: Deprecated parameter 'usebackuproot' [ 828.872805][T12827] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 828.908915][T12827] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (12827) [ 828.973841][T12827] BTRFS info (device loop1): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 829.010869][T12827] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 829.026981][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 829.026994][ T29] audit: type=1400 audit(1719093469.323:1872): avc: denied { watch watch_reads } for pid=12855 comm="syz-executor.0" path="pipe:[34855]" dev="pipefs" ino=34855 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 829.103026][T12827] BTRFS info (device loop1): using free-space-tree [ 829.654401][ T29] audit: type=1400 audit(1719093469.943:1873): avc: denied { bind } for pid=12876 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 829.690631][T12879] loop2: detected capacity change from 0 to 8 [ 829.724982][T12879] unable to read xattr id index table [ 829.763290][ T29] audit: type=1400 audit(1719093469.953:1874): avc: denied { node_bind } for pid=12876 comm="syz-executor.2" saddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 829.979476][T12827] BTRFS info (device loop1): rebuilding free space tree [ 830.084927][T12879] loop2: detected capacity change from 0 to 1024 [ 830.356979][T12892] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 831.127014][T11793] BTRFS info (device loop1): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 831.523076][ T2484] hfsplus: b-tree write err: -5, ino 4 [ 831.670522][ T29] audit: type=1400 audit(1719093471.963:1875): avc: denied { sqpoll } for pid=12908 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 831.794266][T12916] sctp: [Deprecated]: syz-executor.4 (pid 12916) Use of int in max_burst socket option deprecated. [ 831.794266][T12916] Use struct sctp_assoc_value instead [ 833.404204][ T29] audit: type=1400 audit(1719093473.693:1876): avc: denied { write } for pid=12931 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 835.144782][T12950] loop1: detected capacity change from 0 to 128 [ 837.068308][ T29] audit: type=1326 audit(1719093477.363:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12958 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb698a7d0a9 code=0x7ffc0000 [ 837.224348][ T29] audit: type=1326 audit(1719093477.393:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12958 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb698a7d0a9 code=0x7ffc0000 [ 837.248527][ C1] vkms_vblank_simulate: vblank timer overrun [ 837.299703][ T29] audit: type=1326 audit(1719093477.393:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12958 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fb698a7d0a9 code=0x7ffc0000 [ 837.383346][ T29] audit: type=1326 audit(1719093477.393:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12958 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb698a7d0a9 code=0x7ffc0000 [ 837.422225][T12963] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 837.509933][ T29] audit: type=1326 audit(1719093477.493:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12958 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fb698a7d0a9 code=0x7ffc0000 [ 837.533912][ C1] vkms_vblank_simulate: vblank timer overrun [ 837.772188][ T29] audit: type=1326 audit(1719093477.493:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12958 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb698a7d0a9 code=0x7ffc0000 [ 837.817903][ T29] audit: type=1326 audit(1719093477.513:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12958 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb698a7d0a9 code=0x7ffc0000 [ 838.664736][ T29] audit: type=1326 audit(1719093477.513:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12958 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fb698a7d0a9 code=0x7ffc0000 [ 838.774755][ T29] audit: type=1326 audit(1719093477.513:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12958 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb698a7d0a9 code=0x7ffc0000 [ 838.798769][ C1] vkms_vblank_simulate: vblank timer overrun [ 838.806361][T12964] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.2'. [ 838.896029][T12964] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.2'. [ 838.947081][ T29] audit: type=1326 audit(1719093477.513:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12958 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb698a7d0a9 code=0x7ffc0000 [ 839.304429][T12993] sctp: [Deprecated]: syz-executor.4 (pid 12993) Use of int in max_burst socket option deprecated. [ 839.304429][T12993] Use struct sctp_assoc_value instead [ 840.054790][ T5113] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 840.281032][ T5113] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 840.312056][ T5113] usb 2-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 840.340034][ T5113] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.441707][T13016] binder: 13012:13016 ioctl c0306201 0 returned -14 [ 840.451527][T13016] binder: 13012:13016 ioctl c00c620f 200003c0 returned -22 [ 841.248388][ T5113] usb 2-1: config 0 descriptor?? [ 841.608559][ T5113] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 841.844518][T13035] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.852301][T13035] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.963091][T13035] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.970278][T13035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 841.979470][T13035] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.986689][T13035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 842.016148][T13035] bridge0: entered promiscuous mode [ 842.026014][T13035] bridge0: entered allmulticast mode [ 842.917608][ T9089] usb 2-1: USB disconnect, device number 28 [ 843.714092][T13060] loop2: detected capacity change from 0 to 1024 [ 843.753465][T13060] hfsplus: unable to parse mount options [ 844.592776][T13058] kvm: vcpu 0: requested 78474 ns lapic timer period limited to 200000 ns [ 844.878830][ T9089] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 845.084641][ T9089] usb 2-1: Using ep0 maxpacket: 16 [ 845.109237][ T9089] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 845.156643][ T9089] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 845.188071][ T9089] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.226062][T13080] loop3: detected capacity change from 0 to 512 [ 845.233803][ T9089] usb 2-1: config 0 descriptor?? [ 845.277919][ T9089] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input14 [ 846.036570][T13096] loop3: detected capacity change from 0 to 8 [ 846.253136][T13096] loop3: detected capacity change from 0 to 1024 [ 846.287550][ T29] audit: type=1400 audit(1719093486.563:1887): avc: denied { read } for pid=13066 comm="syz-executor.1" name="mice" dev="devtmpfs" ino=832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 846.316812][ T4522] bcm5974 2-1:0.0: could not read from device [ 846.364678][ T29] audit: type=1400 audit(1719093486.593:1888): avc: denied { open } for pid=13066 comm="syz-executor.1" path="/dev/input/mice" dev="devtmpfs" ino=832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 846.448362][ T4522] bcm5974 2-1:0.0: could not read from device [ 846.623650][T13096] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 847.098352][T13101] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 847.350586][T13100] loop2: detected capacity change from 0 to 4096 [ 848.007747][T13100] NILFS (loop2): invalid segment: Checksum error in segment payload [ 848.015882][T13100] NILFS (loop2): trying rollback from an earlier position [ 848.047312][T13100] NILFS (loop2): recovery complete [ 848.054424][T13103] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 848.056921][T13102] loop3: detected capacity change from 0 to 2048 [ 848.449502][T13108] loop3: detected capacity change from 0 to 2048 [ 848.461403][T13108] EXT4-fs: Ignoring removed mblk_io_submit option [ 848.594421][ T29] audit: type=1400 audit(1719093488.883:1889): avc: denied { read } for pid=13111 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 849.542720][T13132] x_tables: duplicate underflow at hook 2 [ 849.576810][T13133] loop2: detected capacity change from 0 to 512 [ 849.591498][T13132] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 849.617714][T13133] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 849.808841][T13133] ------------[ cut here ]------------ [ 849.814958][T13133] WARNING: CPU: 1 PID: 13133 at fs/udf/truncate.c:204 udf_truncate_extents+0x77a/0xa00 [ 849.824749][T13133] Modules linked in: [ 849.828655][T13133] CPU: 1 PID: 13133 Comm: syz-executor.2 Not tainted 6.10.0-rc4-syzkaller-00217-g35bb670d65fc #0 [ 849.839308][T13133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 849.849582][T13133] RIP: 0010:udf_truncate_extents+0x77a/0xa00 [ 849.855721][T13133] Code: d8 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc e8 ab 0f 8c fe 31 ff 4c 89 ee e8 d1 0a 8c fe 4d 85 ed 74 86 e8 97 0f 8c fe 90 <0f> 0b 90 e9 78 ff ff ff c7 44 24 48 08 00 00 00 e9 5d fa ff ff e8 [ 849.875465][T13133] RSP: 0018:ffffc900033ff5b0 EFLAGS: 00010246 [ 849.882613][T13133] RAX: 0000000000040000 RBX: ffff88805c8647d0 RCX: ffffc9000a70d000 [ 849.891475][T13133] RDX: 0000000000040000 RSI: ffffffff8301d449 RDI: 0000000000000007 [ 849.899533][T13133] RBP: ffff88802dcfc000 R08: 0000000000000007 R09: 0000000000000000 [ 849.907778][T13133] R10: 0000000000000f50 R11: 0000000000000003 R12: 00000000000000ff [ 849.915902][T13133] R13: 0000000000000f50 R14: ffffc900033ff660 R15: ffffc900033ff6a0 [ 849.923880][T13133] FS: 00007fe839fbd6c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 849.933252][T13133] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 849.940027][T13133] CR2: 00007f13737b3f84 CR3: 000000001ed90000 CR4: 00000000003506f0 [ 849.948214][T13133] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 2024/06/22 21:58:10 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 849.956306][T13133] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 849.964345][T13133] Call Trace: [ 849.967780][T13133] [ 849.970748][T13133] ? show_regs+0x8c/0xa0 [ 849.975221][T13133] ? __warn+0xe5/0x3c0 [ 849.981560][T13133] ? udf_truncate_extents+0x77a/0xa00 [ 849.988957][T13133] ? report_bug+0x3c0/0x580 [ 849.994185][T13133] ? handle_bug+0x3d/0x70 [ 849.998744][T13133] ? exc_invalid_op+0x17/0x50 [ 850.003482][T13133] ? asm_exc_invalid_op+0x1a/0x20 [ 850.008615][T13133] ? udf_truncate_extents+0x779/0xa00 [ 850.014049][T13133] ? udf_truncate_extents+0x77a/0xa00 [ 850.019591][T13133] ? __pfx_udf_truncate_extents+0x10/0x10 [ 850.025424][T13133] ? find_held_lock+0x2d/0x110 [ 850.030274][T13133] ? udf_write_failed.isra.0+0x168/0x1c0 [ 850.036178][T13133] ? do_raw_spin_lock+0x12d/0x2c0 [ 850.041265][T13133] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 850.046719][T13133] ? __pfx___might_resched+0x10/0x10 [ 850.052010][T13133] udf_write_failed.isra.0+0x170/0x1c0 [ 850.057555][T13133] udf_write_begin+0x207/0x270 [ 850.062327][T13133] generic_perform_write+0x272/0x620 [ 850.068116][T13133] ? __pfx_generic_perform_write+0x10/0x10 [ 850.073944][T13133] ? __mark_inode_dirty+0x2a6/0xe70 [ 850.079261][T13133] ? generic_update_time+0xcf/0xf0 [ 850.085596][T13133] ? mnt_put_write_access_file+0x45/0xf0 [ 850.092159][T13133] __generic_file_write_iter+0x1fd/0x240 [ 850.097849][T13133] udf_file_write_iter+0x239/0x740 [ 850.102971][T13133] iter_file_splice_write+0x906/0x10b0 [ 850.108494][T13133] ? __pfx_iter_file_splice_write+0x10/0x10 [ 850.114398][T13133] ? __pfx_lock_acquire+0x10/0x10 [ 850.119493][T13133] ? __pfx_iter_file_splice_write+0x10/0x10 [ 850.125468][T13133] direct_splice_actor+0x19b/0x6d0 [ 850.130592][T13133] splice_direct_to_actor+0x346/0xa40 [ 850.136026][T13133] ? __pfx_direct_splice_actor+0x10/0x10 [ 850.141667][T13133] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 850.148055][T13133] ? __pfx___might_resched+0x10/0x10 [ 850.153349][T13133] ? __pfx_lock_release+0x10/0x10 [ 850.158447][T13133] do_splice_direct+0x17e/0x250 [ 850.163318][T13133] ? __pfx_do_splice_direct+0x10/0x10 [ 850.168754][T13133] ? avc_policy_seqno+0x9/0x20 [ 850.173523][T13133] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 850.179457][T13133] do_sendfile+0xb1e/0xe50 [ 850.185414][T13133] ? __pfx_do_sendfile+0x10/0x10 [ 850.191171][T13133] ? __might_fault+0xe3/0x190 [ 850.195961][T13133] __x64_sys_sendfile64+0x155/0x220 [ 850.201165][T13133] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 850.206938][T13133] do_syscall_64+0xcd/0x250 [ 850.211539][T13133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.217563][T13133] RIP: 0033:0x7fe83a47d0a9 [ 850.222000][T13133] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 850.242072][T13133] RSP: 002b:00007fe839fbd0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 850.250712][T13133] RAX: ffffffffffffffda RBX: 00007fe83a5b4120 RCX: 00007fe83a47d0a9 [ 850.258875][T13133] RDX: 0000000020000080 RSI: 0000000000000007 RDI: 0000000000000007 [ 850.267043][T13133] RBP: 00007fe83a4ec074 R08: 0000000000000000 R09: 0000000000000000 [ 850.275128][T13133] R10: 00000000e0000000 R11: 0000000000000246 R12: 0000000000000000 [ 850.283171][T13133] R13: 000000000000006e R14: 00007fe83a5b4120 R15: 00007ffe4fa3ab58 [ 850.293657][T13133] [ 850.298839][T13133] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 850.306139][T13133] CPU: 1 PID: 13133 Comm: syz-executor.2 Not tainted 6.10.0-rc4-syzkaller-00217-g35bb670d65fc #0 [ 850.316656][T13133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 850.326716][T13133] Call Trace: [ 850.329988][T13133] [ 850.332911][T13133] dump_stack_lvl+0x3d/0x1f0 [ 850.337504][T13133] panic+0x6f5/0x7a0 [ 850.341401][T13133] ? __pfx_panic+0x10/0x10 [ 850.345823][T13133] ? show_trace_log_lvl+0x363/0x500 [ 850.351136][T13133] ? udf_truncate_extents+0x77a/0xa00 [ 850.356506][T13133] check_panic_on_warn+0xab/0xb0 [ 850.361450][T13133] __warn+0xf1/0x3c0 [ 850.365347][T13133] ? udf_truncate_extents+0x77a/0xa00 [ 850.370716][T13133] report_bug+0x3c0/0x580 [ 850.375057][T13133] handle_bug+0x3d/0x70 [ 850.379218][T13133] exc_invalid_op+0x17/0x50 [ 850.383724][T13133] asm_exc_invalid_op+0x1a/0x20 [ 850.388581][T13133] RIP: 0010:udf_truncate_extents+0x77a/0xa00 [ 850.394570][T13133] Code: d8 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc e8 ab 0f 8c fe 31 ff 4c 89 ee e8 d1 0a 8c fe 4d 85 ed 74 86 e8 97 0f 8c fe 90 <0f> 0b 90 e9 78 ff ff ff c7 44 24 48 08 00 00 00 e9 5d fa ff ff e8 [ 850.414273][T13133] RSP: 0018:ffffc900033ff5b0 EFLAGS: 00010246 [ 850.420336][T13133] RAX: 0000000000040000 RBX: ffff88805c8647d0 RCX: ffffc9000a70d000 [ 850.428298][T13133] RDX: 0000000000040000 RSI: ffffffff8301d449 RDI: 0000000000000007 [ 850.436259][T13133] RBP: ffff88802dcfc000 R08: 0000000000000007 R09: 0000000000000000 [ 850.444220][T13133] R10: 0000000000000f50 R11: 0000000000000003 R12: 00000000000000ff [ 850.452183][T13133] R13: 0000000000000f50 R14: ffffc900033ff660 R15: ffffc900033ff6a0 [ 850.460151][T13133] ? udf_truncate_extents+0x779/0xa00 [ 850.465527][T13133] ? __pfx_udf_truncate_extents+0x10/0x10 [ 850.471241][T13133] ? find_held_lock+0x2d/0x110 [ 850.476003][T13133] ? udf_write_failed.isra.0+0x168/0x1c0 [ 850.481633][T13133] ? do_raw_spin_lock+0x12d/0x2c0 [ 850.486661][T13133] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 850.492030][T13133] ? __pfx___might_resched+0x10/0x10 [ 850.497315][T13133] udf_write_failed.isra.0+0x170/0x1c0 [ 850.502774][T13133] udf_write_begin+0x207/0x270 [ 850.507537][T13133] generic_perform_write+0x272/0x620 [ 850.512970][T13133] ? __pfx_generic_perform_write+0x10/0x10 [ 850.518772][T13133] ? __mark_inode_dirty+0x2a6/0xe70 [ 850.523970][T13133] ? generic_update_time+0xcf/0xf0 [ 850.529080][T13133] ? mnt_put_write_access_file+0x45/0xf0 [ 850.534710][T13133] __generic_file_write_iter+0x1fd/0x240 [ 850.540337][T13133] udf_file_write_iter+0x239/0x740 [ 850.545445][T13133] iter_file_splice_write+0x906/0x10b0 [ 850.550902][T13133] ? __pfx_iter_file_splice_write+0x10/0x10 [ 850.556794][T13133] ? __pfx_lock_acquire+0x10/0x10 [ 850.561822][T13133] ? __pfx_iter_file_splice_write+0x10/0x10 [ 850.567713][T13133] direct_splice_actor+0x19b/0x6d0 [ 850.572821][T13133] splice_direct_to_actor+0x346/0xa40 [ 850.578193][T13133] ? __pfx_direct_splice_actor+0x10/0x10 [ 850.583820][T13133] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 850.589710][T13133] ? __pfx___might_resched+0x10/0x10 [ 850.595008][T13133] ? __pfx_lock_release+0x10/0x10 [ 850.600138][T13133] do_splice_direct+0x17e/0x250 [ 850.604983][T13133] ? __pfx_do_splice_direct+0x10/0x10 [ 850.610347][T13133] ? avc_policy_seqno+0x9/0x20 [ 850.615110][T13133] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 850.621006][T13133] do_sendfile+0xb1e/0xe50 [ 850.625422][T13133] ? __pfx_do_sendfile+0x10/0x10 [ 850.630356][T13133] ? __might_fault+0xe3/0x190 [ 850.635058][T13133] __x64_sys_sendfile64+0x155/0x220 [ 850.640257][T13133] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 850.645970][T13133] do_syscall_64+0xcd/0x250 [ 850.650478][T13133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.656380][T13133] RIP: 0033:0x7fe83a47d0a9 [ 850.660787][T13133] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 850.680388][T13133] RSP: 002b:00007fe839fbd0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 850.688883][T13133] RAX: ffffffffffffffda RBX: 00007fe83a5b4120 RCX: 00007fe83a47d0a9 [ 850.696853][T13133] RDX: 0000000020000080 RSI: 0000000000000007 RDI: 0000000000000007 [ 850.704820][T13133] RBP: 00007fe83a4ec074 R08: 0000000000000000 R09: 0000000000000000 [ 850.712809][T13133] R10: 00000000e0000000 R11: 0000000000000246 R12: 0000000000000000 [ 850.720774][T13133] R13: 000000000000006e R14: 00007fe83a5b4120 R15: 00007ffe4fa3ab58 [ 850.728741][T13133] [ 850.731966][T13133] Kernel Offset: disabled [ 850.736378][T13133] Rebooting in 86400 seconds..