last executing test programs: 48.080149858s ago: executing program 2 (id=428): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x800092, &(0x7f0000000bc0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c756e695f786c6174653d312c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d302c757466383d312c696f636861727365743d69736f383835392d31332c636865636b3d7374726963742c726f6469722c757466383d302c756e695f786c6174653d312c636f6465706167653d3836362c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c646d61736b3d30303030303030303030303030303030303030303030312c646d61736b3d30303030303030303030303030303030303030303030362c756e695f786c6174653d302c696f636861727365743d63703835352c73686f72746e616d653d77696e39352c726f6469722c6e6e6f6e756d7461696c3d312c73686f72746e616d653d6d697865642c73686f72746e616d653d6d697865642c757466383d312c757466383d302c756e695f786c6174653d302c0500695f786c6174653d312c696f636861727365743d6370313235352c757466383d302c646566636f6e7465010000006e636f6e66696e65645f752c00", @ANYRESDEC], 0x46, 0x2d1, &(0x7f0000000740)="$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") capset(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r5, 0x6, 0x8, 0x0, &(0x7f0000001040)) writev(r4, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="4dff000013001118680907070000000f0000ff3f04000000170a001700000000040014001000030001302564aa58b9a64411f6bbf44dc48f57", 0xff4d}], 0x1) pread64(r0, &(0x7f00000003c0)=""/179, 0xb3, 0x40) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000080a000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\\}+*-\x00') 45.294794266s ago: executing program 2 (id=446): r0 = syz_io_uring_setup(0xea8, &(0x7f0000000480), &(0x7f0000000080), &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unshare(0x20000400) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000080)=r6) fcntl$setstatus(r1, 0x4, 0x40800) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7ffff004) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5b7c2aee}, 0x1c) write(0xffffffffffffffff, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x3f80) io_uring_enter(r0, 0x0, 0x464f, 0x1, 0x0, 0x0) 44.101271541s ago: executing program 2 (id=459): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000280), &(0x7f0000000000)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x5bc, &(0x7f00000004c0)={@local, @random="a6e286036e89", @void, {@mpls_uc={0x8847, {[], @llc={@snap={0x1, 0x1, "8b", "d3d9e4"}}}}}}, 0x0) 43.114024319s ago: executing program 2 (id=461): socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c1, &(0x7f0000001880)="$eJzs3T+LI2UcB/DfZLOTUYuksBLhBrzC6nCvE5sscgfiVh4p1EIX7w5kE4Q7WPAPxqtsbSwsfAWC4Au5xncg2Ap2rrAwMpOZzWSNMZHNyu1+Ps0++8zznfk9k4fsbJEnH748Obqfx8MnX/wSWZZEZxjDOEliEJ1ofBULht8EAPAsOymK+L2Y2SSXRES2vbIAgC1a7+9/d9786VLKAgC26N677729f3Bw550ssrg7+fp4VP5nX/6cHd9/GB/HOB7Ea9GP04jqQWE3qqeFsnm3KIppNy8N4uZkejwqk5MPntbn3/8tosrvRT8GVdfZ00aVf+vgzl4+08pPyzqer68/LPO3ox8vnoUX8reX5GOUxquvtOq/Ff34+aP4JMZxvypinv9yL8/fLL794/P3y/LKfDI9HvWqcXPFziW/NAAAAAAAAAAAAAAAAAAAAAAAXGG36r1zepHfiJuTsqvef2fnNNLy17wxWNyfZ5ZPmhO19wcqimJaxPetLQXzoh44z3fjpW57Y0EAAAAAAAAAAAAAAAAAAAC4vh5/+tnR4Xj84NGFNJrdALoR8ee9iP96nmGr50asHtyrr3k4Hnfq5sKYp2m7J3aaMUnEyjLKSVzQbfm3xnPna24aP/xYTnCTE2atnteXT3B3+/NqVtfRYbL8Wr1oerJ6kXyXRszHpLHmtdJ/OlTEJssvXXqov/Hc0xeqxnTFmEhWFfbGr7M7V/ck52eRVnd1aXy3brTi59bGWq97ZLP4398rkmq3jt723owAAAAAAAAAAAAAAAAAAOCam3/6d8nBJyujncJHgQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4Iubf/79BY1qH1xicxqPH//MUAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuAb+CgAA//8HIVi7") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8000000000000001, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4, 0xfffffffffffffffc]}) 42.028927886s ago: executing program 2 (id=468): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000180)={0x1d, r4}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_raw(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x2, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "00000300"}, 0x10}, 0x1, 0x0, 0x0, 0x20048010}, 0xd209f6d814827b13) recvmmsg(r3, &(0x7f0000004340)=[{{0x0, 0x0, &(0x7f0000004300)=[{&(0x7f0000000900)=""/10, 0xa}], 0x1}, 0xe}], 0x1, 0x10023, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x2, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) nanosleep(&(0x7f00000025c0)={0xffffffffefff8002}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) unshare(0x22020600) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000005c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [{@uid_gt}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@smackfshat={'smackfshat', 0x3d, 'vlan1\x00'}}, {@subj_role={'subj_role', 0x3d, 'vlan1\x00'}}, {@hash}, {@obj_role={'obj_role', 0x3d, '&\x1c}'}}, {@euid_gt}], 0x2f}) r5 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000280)={'vlan1\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x6, 0x1, 0x80, 0xff, 0x3f, 0x0, 0x7, [0x20, 0x0, 0x10, 0xc, 0x5, 0x0, 0x0, 0x8], [0x8f1, 0xcdbc, 0x401]}}) chdir(&(0x7f00000004c0)='./file0\x00') lseek(0xffffffffffffffff, 0xffffffffffdffffe, 0x1) write(0xffffffffffffffff, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) 41.719959163s ago: executing program 2 (id=476): setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x8, 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r1, 0x501, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) 41.624373721s ago: executing program 32 (id=476): setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x8, 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r1, 0x501, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) 26.089874082s ago: executing program 4 (id=603): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000001c00)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x9, 0xfffff00c}, {0x6, 0xff, 0x0, 0x400}]}, 0x10) syz_emit_ethernet(0x11, 0x0, 0x0) 25.925365417s ago: executing program 4 (id=606): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000040)) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000540)={{0x10, 0x17a}, 0x100, './file0\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) 24.013255587s ago: executing program 4 (id=611): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x1, 0xfffd, 0x4, 0x9, 0x5}, {0x12, 0x2, 0x3, 0x7, 0x8001, 0x10001}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2e, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x6, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) 23.097429977s ago: executing program 4 (id=615): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000400)='./file2\x00', 0x8002, &(0x7f0000000040)=ANY=[], 0x1, 0x1f3, &(0x7f0000000700)="$eJzslc+L00AUx78zU5PsrvgHePHgguvBNElVvCysF08eBNHFg2Bx02U160qbgy2I+Bd49+bBP0OoV/8IqYIoiF7U88j8SDLG+KO21YLvA/vyfZnJmzdvtm9AEMR/y+tXXyby8+bbAMBhrMO3798JZQOtuTP/ZfDx/vOLF7YfXX/6wp+EK99G86devwVgfF4gV84qIKWU7vi6fR7R+qTWV8CtArbBEFp9AxxXrU7BcM3qW44+UPPDsLeXpeHNg2ynJ7I0Ul6sTKJMp57fh4cMO9ZX+TFnfDAc3e5mWdpfoGiu3Pg9IEx+AbDp5OeeVwiTbQRe1jIGR2x1BwyXrT4Hv6iNKYmz/6OtKr746f49zLjtNwCqN7351dH/LmdPLfVHAQH2V85+wUJAi+JEZwi4pNWAOuL5BJQ+MM1XXIu1X64uZi/dsy1zfmWqD4w/XZytoHnIQz9AEfC3/0mq/imfMJxw+pNpJY/1z7Gd799tD4ajU3v73d10N72TJJ2z0ekoOpO0dSMytrkF6vgruj+tVvH1ndSSAKvN9ZiHe90878fGln5ibFPH5br/cWwcxyHlq5heLe4nAMVFyOwf10+lNsQPkycIgviHHAPTPVn35ULY26QckHLtUuPX9Q5LEARBEARBEARBEMQy8jUAAP//3LtTfQ==") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000149000/0x1000)=nil, 0x1000, 0xa, 0x4000010, 0xffffffffffffffff, 0xf4585000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xb, 0x825, 0xfffffffffffffff9, 0x2000000000009, 0x7, 0x43, 0x52e6ac5d, 0x2000ffffffff, 0x9655, 0xfffffffffffffffe, 0x9, 0x9, 0x5, 0x8000000b, 0x80000000000000, 0xcc3, 0xfffffffffffffffe, 0x85, 0x17, 0x3, 0x100000000, 0x5, 0x200000005, 0xfffffffffffffffc, 0x3, 0xa}) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) 22.95869723s ago: executing program 4 (id=618): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') unshare(0x6020400) r0 = socket(0x2b, 0x80801, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x20, 0x0, 0x1, 0x200000, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0x4}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x20000}]}, 0x20}, 0x1, 0x0, 0x0, 0x4080001}, 0x4048806) bind$tipc(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) getpid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c25000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0xa}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r4, &(0x7f0000000300)="989f850dd518", &(0x7f00000005c0)=""/104}, 0x20) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) write$cgroup_int(r6, &(0x7f0000000100)=0x1, 0x12) socket(0x1, 0x803, 0x0) 22.717312131s ago: executing program 4 (id=620): r0 = syz_io_uring_setup(0xea8, &(0x7f0000000480), &(0x7f0000000080), &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unshare(0x20000400) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f0000000080)=r5) fcntl$setstatus(r1, 0x4, 0x40800) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7ffff004) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5b7c2aee}, 0x1c) write(0xffffffffffffffff, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x3f80) io_uring_enter(r0, 0x0, 0x464f, 0x1, 0x0, 0x0) 22.716909662s ago: executing program 33 (id=620): r0 = syz_io_uring_setup(0xea8, &(0x7f0000000480), &(0x7f0000000080), &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTqhfYCQlUlRMWJQxsSN4pi11Hsiib0kB65V6ISJ+A/4MYBqScO3LjBjUs5IBWoQA0SB6MZT1I3sZNAnbiJfz9pMvPeTP29F/e953mR5wUwtC5ExGZEnImIOxExlecn+RbX2lt63csXDxe2XjxcSKLVuvX3JDuf5kXHv0m9k7/meER8/zsRP0r2xm2sb6zMV6uVtTw93aytTjfWNy4vF/Kc8tzs3MynVz4p962uH9R+/fzbyzd+8NvffOnZHza/+ZO0WJM/PZed66xHP7WrXozJjrzRiLhxFMEGZDT//8PJk7a2z0TEh1n7n4qR7N0EAE6zVmsqWlOdaQDgtEvv/ycjKZTyuYDJKBRKpfYc3vsxUajWG81LU/X79xYjm8M6H8XC3eVqZSafKzwfxSRNz2bHr9Ll19KPK1ci4r2IeDx2NjtfWqhXFwf5wQcAhtg7u8b/f421x/9OxUEVDgA4OuODLgAAcOyM/wAwfIz/ADB8/ofx37cDAeCUcP8PAMPH+A8Aw+fA8f/R8ZQDADgW37t5M91aW+3nX28/qfvyYqWxUqrdXygt1NdWS0v1+lK1UlpotQ56vWq9vjr78U6ysb5xu1a/f695e7k2v1S5XfEsAQAYvPc+ePqndNDfvHo226JjLQdjNZxuhUEXABiYkUEXABgY3+eB4XWIe3zTAHDKdVmity2fIEh6XfDE4q9wUl38vPl/GFZvMv9v7gBOtv9v/v9bfS8HcPyM4TC8Wq3Emv8AMGTM8QM9//6f6/mIkCf9LwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFJPZlhRK2Vrgm+nPQqkUcS4izkcxubtcrcxExLsR8cex4lianh10oQGAN1T4a5Kv/3Vx6qPJ3WfPJP8ey/YR8eOf3/rZg/lmc202zf/HTn7zSZp/trlWPjOICgAAna7tzcrG73K+77iRf/ni4cL2dpxFfH69vbhoGncr39pnRmM0249HMSIm/pnk6bb088pIH+JvPoqIz23XfzwedESYzOZA2iuf7o6fxj7X9/idv//d8Quv1beQnUv3xex38dnYVTjgQE+vt/vJvO2lTTxvf4W4kO27t//xrId6c2n/lzbXrT39X2Gn/xvZEz/J2vyFnfT+JXn+8e++uyezNdU+9yjiC6Pd4ic78ZPu/W/xo0PW8c9f/PKHvc61fhFxsWv9t1ekrmXd7HSztjrdWN+4vFybX6osVe6Vy3OzczOfXvmkPJ3NUbd//r5bjL9dvfRur/hp/Sd6xB/fv/7xtUPW/5f/ufPDr+wT/xtf7f7+v79P/HRM/Poh489PXOu5fHcaf7FH/Q94/+PSIeM/+8vG4iEvBQCOQWN9Y2W+Wq2sHXCQftY86BoHhz9I7+3fgmJkB7EZ0a8XzCYlIqLrNekn6rejykd1kAws+q/6/YKD7pmAo/aq0Q+6JAAAAAAAAAAAAAAAQC+N9Y2Vse7f1urbwaDrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn13wAAAP//KHnENg==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unshare(0x20000400) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f0000000080)=r5) fcntl$setstatus(r1, 0x4, 0x40800) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7ffff004) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5b7c2aee}, 0x1c) write(0xffffffffffffffff, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x3f80) io_uring_enter(r0, 0x0, 0x464f, 0x1, 0x0, 0x0) 6.52917358s ago: executing program 3 (id=713): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000280), &(0x7f0000000000)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x5bc, &(0x7f00000004c0)={@local, @random="a6e286036e89", @void, {@mpls_uc={0x8847, {[], @llc={@snap={0x1, 0x1, "8b", "d3d9e4"}}}}}}, 0x0) 6.494389383s ago: executing program 3 (id=715): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r1, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}]}, 0x30}}, 0x0) 6.389397842s ago: executing program 3 (id=718): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000040)) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000540)={{0x10, 0x17a}, 0x100, './file0\x00'}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) 6.351185296s ago: executing program 6 (id=720): connect$inet6(0xffffffffffffffff, 0x0, 0x0) gettid() getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r2, 0xfffffffffffffc01, 0x0) 5.487707052s ago: executing program 6 (id=724): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010300"/56, @ANYRES32=0x0, @ANYBLOB="0000000000008d00fffffff00000000008000300"], 0x54}}, 0x0) 4.155067991s ago: executing program 0 (id=733): socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) writev(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) recvmmsg(r3, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.873426235s ago: executing program 0 (id=734): connect$inet6(0xffffffffffffffff, 0x0, 0x0) gettid() getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r2, 0xfffffffffffffc01, 0x0) 2.500044598s ago: executing program 6 (id=736): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001080)=ANY=[@ANYBLOB="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"/2282], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 2.467177841s ago: executing program 6 (id=737): r0 = socket$unix(0x1, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f00000003c0)={[{@nogrpid}, {@noinit_itable}, {@orlov}, {@usrquota}, {@data_err_ignore}, {@debug}, {@noauto_da_alloc}]}, 0x4, 0x501, &(0x7f0000000f40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.396114937s ago: executing program 1 (id=739): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(r3, 0x11, 0xa, &(0x7f0000000000)=0x5, 0x4) 2.395678767s ago: executing program 5 (id=740): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f00000001c0)) 2.384628788s ago: executing program 1 (id=741): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x8, 0x0) sendfile(r3, r4, 0x0, 0x2) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x100000, '\x00', 0x0, 0x0, 0x0, 0x4000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0x3, &(0x7f0000000940)=@framed={{0x18, 0x9}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 2.282450987s ago: executing program 5 (id=742): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') unshare(0x6020400) r0 = socket(0x2b, 0x80801, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x20, 0x0, 0x1, 0x200000, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0x4}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x20000}]}, 0x20}, 0x1, 0x0, 0x0, 0x4080001}, 0x4048806) bind$tipc(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) getpid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0xa}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r4, &(0x7f0000000300)="989f850dd518", &(0x7f00000005c0)=""/104}, 0x20) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) write$cgroup_int(r6, &(0x7f0000000100)=0x1, 0x12) socket(0x1, 0x803, 0x0) 2.282118297s ago: executing program 5 (id=743): mkdir(0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) mount$incfs(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000040), 0x0, 0x0) lsetxattr(0x0, &(0x7f0000000200)=@random={'security.', 'syzkaller\x00'}, &(0x7f0000000300)='\')\x00', 0x3, 0x3) mkdir(&(0x7f0000000280)='./file0\x00', 0x120) mkdirat(0xffffffffffffff9c, 0x0, 0xa7210e10bc3c9de9) rename(&(0x7f0000000440)='./file0\x00', &(0x7f00000002c0)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x80, 0x140) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f19}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.905336591s ago: executing program 0 (id=744): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000180)={0x1d, r4}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_raw(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x2, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "00000300"}, 0x10}, 0x1, 0x0, 0x0, 0x20048010}, 0xd209f6d814827b13) recvmmsg(r3, &(0x7f0000004340)=[{{0x0, 0x0, &(0x7f0000004300)=[{&(0x7f0000000900)=""/10, 0xa}], 0x1}, 0xe}], 0x1, 0x10023, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x2, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) nanosleep(&(0x7f00000025c0)={0xffffffffefff8002}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000280)={'vlan1\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x6, 0x1, 0x80, 0xff, 0x3f, 0x0, 0x7, [0x20, 0x0, 0x10, 0xc, 0x5, 0x0, 0x0, 0x8], [0x8f1, 0xcdbc, 0x401]}}) chdir(&(0x7f00000004c0)='./file0\x00') lseek(0xffffffffffffffff, 0xffffffffffdffffe, 0x1) write(0xffffffffffffffff, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) 1.905066051s ago: executing program 6 (id=745): socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) writev(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) recvmmsg(r3, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.598211048s ago: executing program 3 (id=746): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x800092, &(0x7f0000000bc0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c756e695f786c6174653d312c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d302c757466383d312c696f636861727365743d69736f383835392d31332c636865636b3d7374726963742c726f6469722c757466383d302c756e695f786c6174653d312c636f6465706167653d3836362c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c646d61736b3d30303030303030303030303030303030303030303030312c646d61736b3d30303030303030303030303030303030303030303030362c756e695f786c6174653d302c696f636861727365743d63703835352c73686f72746e616d653d77696e39352c726f6469722c6e6e6f6e756d7461696c3d312c73686f72746e616d653d6d697865642c73686f72746e616d653d6d697865642c757466383d312c757466383d302c756e695f786c6174653d302c0500695f786c6174653d312c696f636861727365743d6370313235352c757466383d302c646566636f6e7465010000006e636f6e66696e65645f752c00", @ANYRESDEC], 0x46, 0x2d1, &(0x7f0000000740)="$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") capset(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r5, 0x6, 0x8, 0x0, &(0x7f0000001040)) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000484100100000000004e438d2fd00000000004a7b72000000000000000000f900", 0x38}], 0x1) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="4dff000013001118680907070000000f0000ff3f04000000170a001700000000040014001000030001302564aa58b9a64411f6bbf44dc48f57", 0xff4d}], 0x1) pread64(r0, &(0x7f00000003c0)=""/179, 0xb3, 0x40) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000080a000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\\}+*-\x00') 1.456336221s ago: executing program 1 (id=747): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010300"/56, @ANYBLOB="0000000000008d00fffffff0000000000800030011"], 0x54}}, 0x0) 941.470006ms ago: executing program 0 (id=748): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000003800070127bd7000fedb9f2503"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 941.141726ms ago: executing program 6 (id=749): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000040)) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000540)={{0x10, 0x17a}, 0x100, './file0\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) 898.09206ms ago: executing program 5 (id=750): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="610233"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 894.83259ms ago: executing program 3 (id=751): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7ff}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0xa}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c8016}, 0x94) 889.908241ms ago: executing program 1 (id=752): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001) 845.576605ms ago: executing program 5 (id=753): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') unshare(0x6020400) r0 = socket(0x2b, 0x80801, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x20, 0x0, 0x1, 0x200000, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0x4}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x20000}]}, 0x20}, 0x1, 0x0, 0x0, 0x4080001}, 0x4048806) bind$tipc(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) getpid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0xa}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r4, &(0x7f0000000300)="989f850dd518", &(0x7f00000005c0)=""/104}, 0x20) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) write$cgroup_int(r6, &(0x7f0000000100)=0x1, 0x12) socket(0x1, 0x803, 0x0) 845.427835ms ago: executing program 0 (id=754): connect$inet6(0xffffffffffffffff, 0x0, 0x0) gettid() getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r3, 0xfffffffffffffc01, 0x0) 845.384705ms ago: executing program 1 (id=755): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000002540)={0x84}, 0x8) 845.168135ms ago: executing program 5 (id=756): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000040)) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000540)={{0x10, 0x17a}, 0x100, './file0\x00'}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) 33.657267ms ago: executing program 1 (id=757): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x8, 0x0) sendfile(r3, r4, 0x0, 0x2) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x100000, '\x00', 0x0, 0x0, 0x0, 0x4000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0x3, &(0x7f0000000940)=@framed={{0x18, 0x9}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 33.231707ms ago: executing program 3 (id=758): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000740), 0x41, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 0s ago: executing program 0 (id=759): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x4000000) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000200000000fbdbdf257f000001000000000000000000000000fe8000000000000000000000100000aa00000004000000000a006080"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) kernel console output (not intermixed with test programs): 27614][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.734778][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.742365][ T284] device bridge_slave_0 entered promiscuous mode [ 25.749104][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.756257][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.763826][ T283] device bridge_slave_1 entered promiscuous mode [ 25.790185][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.797340][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.804847][ T284] device bridge_slave_1 entered promiscuous mode [ 25.858754][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.865922][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.873540][ T285] device bridge_slave_0 entered promiscuous mode [ 25.880514][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.887562][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.895056][ T285] device bridge_slave_1 entered promiscuous mode [ 25.987065][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.994155][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.001469][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.008514][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.055644][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.062746][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.070099][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.077175][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.087155][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.094228][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.101536][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.108619][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.118813][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.125878][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.133179][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.140229][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.158177][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.165350][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.172654][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.179696][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.207622][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.215128][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.222639][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.229879][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.236996][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.244765][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.252217][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.259500][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.266654][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.274673][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.282082][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.308806][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.316996][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.324064][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.331648][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.340126][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.347181][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.354600][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.362054][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.369660][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.392458][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.400463][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.408926][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.415954][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.423492][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.432390][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.439473][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.446813][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.455120][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.462174][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.469757][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.478014][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.485050][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.493339][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.508143][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.517694][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.525861][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.534110][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.542684][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.550923][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.557984][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.592568][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.600221][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.607647][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.616114][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.624501][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.631680][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.639231][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.647477][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.655708][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.662752][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.670183][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.678530][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.686789][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.694845][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.702999][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.711223][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.719552][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.727418][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.735886][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.744278][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.752795][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.761072][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.768156][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.778401][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.786789][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.799222][ T281] device veth0_vlan entered promiscuous mode [ 26.805967][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.814283][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.822453][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.830864][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.838429][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.846359][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.854464][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.870457][ T283] device veth0_vlan entered promiscuous mode [ 26.877266][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.884867][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.892313][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.901063][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.913521][ T284] device veth0_vlan entered promiscuous mode [ 26.921684][ T281] device veth1_macvtap entered promiscuous mode [ 26.930164][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.938216][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.946082][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.954354][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.962618][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.971268][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.979555][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.987578][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.995183][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.016122][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.025189][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.033553][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.042629][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.051149][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.062524][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.070994][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.082530][ T283] device veth1_macvtap entered promiscuous mode [ 27.092527][ T285] device veth0_vlan entered promiscuous mode [ 27.101926][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.110424][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.118898][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.126528][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.134844][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.142479][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.155727][ T281] request_module fs-gadgetfs succeeded, but still no fs? [ 27.165281][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.175851][ T282] device veth0_vlan entered promiscuous mode [ 27.185021][ T284] device veth1_macvtap entered promiscuous mode [ 27.194814][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.203322][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.224140][ T282] device veth1_macvtap entered promiscuous mode [ 27.311622][ T342] loop3: detected capacity change from 0 to 1024 [ 27.320124][ T342] ======================================================= [ 27.320124][ T342] WARNING: The mand mount option has been deprecated and [ 27.320124][ T342] and is ignored by this kernel. Remove the mand [ 27.320124][ T342] option from the mount to silence this warning. [ 27.320124][ T342] ======================================================= [ 27.359707][ T285] device veth1_macvtap entered promiscuous mode [ 27.368488][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.376767][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.379229][ T342] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 27.386550][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.407446][ T342] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.413413][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.431012][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.554701][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.602955][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.625217][ T343] EXT4-fs error (device loop3): ext4_map_blocks:740: inode #15: comm kworker/u4:4: lblock 0 mapped to illegal pblock 0 (length 1) [ 27.641657][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.651972][ T343] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 27.667833][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.677502][ T343] EXT4-fs (loop3): This should not happen!! Data will be lost [ 27.677502][ T343] [ 27.689831][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.704907][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.715906][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.726590][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.737678][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.745542][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.754028][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.762525][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.771001][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.806823][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.815503][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.824447][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.833551][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.356661][ T360] loop1: detected capacity change from 0 to 512 [ 28.425128][ T363] capability: warning: `syz.4.5' uses 32-bit capabilities (legacy support in use) [ 28.490169][ T360] EXT4-fs (loop1): 1 truncate cleaned up [ 28.495873][ T360] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 28.579598][ T374] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2: bg 0: block 465: padding at end of block bitmap is not set [ 28.624036][ T374] EXT4-fs (loop1): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 28 [ 28.706431][ T376] loop2: detected capacity change from 0 to 512 [ 28.731767][ T374] EXT4-fs (loop1): This should not happen!! Data will be lost [ 28.731767][ T374] [ 28.768046][ T26] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 28.788897][ T374] EXT4-fs (loop1): Total free blocks count 0 [ 28.795352][ T374] EXT4-fs (loop1): Free/Dirty block details [ 28.802311][ T376] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 28.810777][ T376] System zones: 1-12 [ 28.815299][ T376] EXT4-fs error (device loop2): ext4_iget_extra_inode:4597: inode #15: comm syz.2.11: corrupted in-inode xattr [ 28.827717][ T376] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.11: couldn't read orphan inode 15 (err -117) [ 28.844679][ T374] EXT4-fs (loop1): free_blocks=0 [ 28.850143][ T374] EXT4-fs (loop1): dirty_blocks=2 [ 28.855217][ T376] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,minixdf,noblock_validity,lazytime,noauto_da_alloc,block_validity,init_itable=0x0000000000000009,debug,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 28.867242][ T374] EXT4-fs (loop1): Block reservation details [ 28.917081][ T374] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 28.928742][ T376] syz.2.11 (376) used greatest stack depth: 22304 bytes left [ 28.987522][ T381] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 29.055257][ T383] loop2: detected capacity change from 0 to 2048 [ 29.082787][ T385] loop4: detected capacity change from 0 to 1024 [ 29.095799][ T378] loop3: detected capacity change from 0 to 40427 [ 29.128155][ T26] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 29.133058][ T385] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 29.136391][ T26] usb 1-1: config 0 has no interface number 0 [ 29.156735][ T385] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.164532][ T26] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 29.176411][ T378] F2FS-fs (loop3): invalid crc value [ 29.196616][ T389] loop1: detected capacity change from 0 to 256 [ 29.216289][ T26] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.226829][ T343] EXT4-fs error (device loop4): ext4_map_blocks:740: inode #15: comm kworker/u4:4: lblock 0 mapped to illegal pblock 0 (length 1) [ 29.247849][ T343] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 29.288386][ T343] EXT4-fs (loop4): This should not happen!! Data will be lost [ 29.288386][ T343] [ 29.300304][ T378] F2FS-fs (loop3): Found nat_bits in checkpoint [ 29.347434][ T26] usb 1-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 29.361082][ T26] usb 1-1: config 0 interface 1 has no altsetting 0 [ 29.367714][ T26] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 29.370356][ T378] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 29.377141][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.439955][ T26] usb 1-1: config 0 descriptor?? [ 29.451419][ T398] netlink: 25 bytes leftover after parsing attributes in process `syz.1.15'. [ 29.460721][ T398] device gretap0 entered promiscuous mode [ 29.479129][ T398] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.15'. [ 29.488603][ T398] 0猉功D龌: renamed from gretap0 [ 29.498152][ T398] device 00猉功D龌 left promiscuous mode [ 29.649181][ T398] attempt to access beyond end of device [ 29.649181][ T398] loop1: rw=2049, want=544, limit=256 [ 29.660371][ T398] attempt to access beyond end of device [ 29.660371][ T398] loop1: rw=2049, want=800, limit=256 [ 29.738747][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 29.738763][ T30] audit: type=1400 audit(1771391851.803:134): avc: denied { setattr } for pid=377 comm="syz.3.12" name="/" dev="loop3" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 29.767061][ T30] audit: type=1400 audit(1771391851.803:135): avc: denied { wake_alarm } for pid=402 comm="syz.4.17" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 29.788098][ T30] audit: type=1400 audit(1771391851.813:136): avc: denied { setattr } for pid=377 comm="syz.3.12" name=".pending_reads" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 29.790776][ T282] attempt to access beyond end of device [ 29.790776][ T282] loop3: rw=2049, want=45104, limit=40427 [ 29.869957][ T30] audit: type=1400 audit(1771391851.933:137): avc: denied { write } for pid=405 comm="syz.2.18" name="001" dev="devtmpfs" ino=184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 30.035188][ T398] syz.1.15 (398) used greatest stack depth: 21832 bytes left [ 30.050186][ T30] audit: type=1400 audit(1771391852.113:138): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 30.146567][ T413] loop3: detected capacity change from 0 to 40427 [ 30.218524][ T413] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 30.221400][ T26] uclogic 0003:145F:0212.0001: failed retrieving string descriptor #100: -71 [ 30.235337][ T26] uclogic 0003:145F:0212.0001: failed retrieving pen parameters: -71 [ 30.236862][ T413] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 30.243498][ T26] uclogic 0003:145F:0212.0001: pen probing failed: -71 [ 30.258585][ T26] uclogic 0003:145F:0212.0001: failed probing parameters: -71 [ 30.266077][ T26] uclogic: probe of 0003:145F:0212.0001 failed with error -71 [ 30.276428][ T26] usb 1-1: USB disconnect, device number 2 [ 30.475274][ T413] F2FS-fs (loop3): Found nat_bits in checkpoint [ 30.538546][ T413] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 30.546042][ T413] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 30.649865][ T432] loop4: detected capacity change from 0 to 512 [ 30.697202][ T432] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 30.712429][ T432] ext4 filesystem being mounted at /5/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.851693][ T30] audit: type=1400 audit(1771391852.863:139): avc: denied { create } for pid=429 comm="syz.2.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.253568][ T30] audit: type=1400 audit(1771391852.863:140): avc: denied { write } for pid=429 comm="syz.2.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.586005][ T441] loop1: detected capacity change from 0 to 1024 [ 31.613579][ T30] audit: type=1400 audit(1771391852.863:141): avc: denied { read } for pid=429 comm="syz.2.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.668374][ T441] EXT4-fs (loop1): Ignoring removed bh option [ 31.678878][ T443] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 31.708994][ T441] EXT4-fs (loop1): dax option not supported [ 31.728061][ T443] ext4 filesystem being mounted at /4/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.767941][ T30] audit: type=1400 audit(1771391852.863:142): avc: denied { create } for pid=429 comm="syz.2.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 32.251314][ T30] audit: type=1400 audit(1771391852.863:143): avc: denied { connect } for pid=429 comm="syz.2.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 32.459331][ T478] set_capacity_and_notify: 1 callbacks suppressed [ 32.459349][ T478] loop4: detected capacity change from 0 to 256 [ 32.709636][ T485] process 'syz.0.39' launched './file0' with NULL argv: empty string added [ 32.929776][ T494] netlink: 25 bytes leftover after parsing attributes in process `syz.4.40'. [ 32.939109][ T494] device gretap0 entered promiscuous mode [ 32.956721][ T494] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.40'. [ 32.966163][ T494] 0猉功D龌: renamed from gretap0 [ 32.975250][ T494] device 00猉功D龌 left promiscuous mode [ 33.171551][ T494] attempt to access beyond end of device [ 33.171551][ T494] loop4: rw=2049, want=544, limit=256 [ 33.183167][ T494] attempt to access beyond end of device [ 33.183167][ T494] loop4: rw=2049, want=1024, limit=256 [ 33.195103][ T494] attempt to access beyond end of device [ 33.195103][ T494] loop4: rw=2049, want=1184, limit=256 [ 33.316111][ T500] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 33.372333][ T489] loop1: detected capacity change from 0 to 40427 [ 33.402103][ T489] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 33.415342][ T489] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 33.424873][ T489] F2FS-fs (loop1): invalid crc value [ 33.453720][ T489] F2FS-fs (loop1): Found nat_bits in checkpoint [ 33.469775][ T513] loop2: detected capacity change from 0 to 512 [ 33.532968][ T489] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 33.540320][ T489] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 33.729194][ T513] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 33.890910][ T513] ext4 filesystem being mounted at /8/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.437914][ C0] sched: RT throttling activated [ 34.442013][ T528] loop3: detected capacity change from 0 to 512 [ 34.920362][ T538] loop4: detected capacity change from 0 to 256 [ 34.935926][ T528] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,norecovery,,errors=continue. Quota mode: writeback. [ 34.955456][ T528] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.292448][ T547] netlink: 25 bytes leftover after parsing attributes in process `syz.4.56'. [ 35.301971][ T547] device 00猉功D龌 entered promiscuous mode [ 35.320062][ T547] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.56'. [ 35.329628][ T547] 1猉功D龌: renamed from 00猉功D龌 [ 35.339394][ T547] device 01猉功D龌 left promiscuous mode [ 35.487237][ T547] attempt to access beyond end of device [ 35.487237][ T547] loop4: rw=2049, want=544, limit=256 [ 35.498685][ T547] attempt to access beyond end of device [ 35.498685][ T547] loop4: rw=2049, want=1024, limit=256 [ 35.509959][ T547] attempt to access beyond end of device [ 35.509959][ T547] loop4: rw=2049, want=1224, limit=256 [ 35.548222][ T549] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #12: comm syz.3.50: corrupted xattr block 6 [ 35.581577][ T549] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 35.591098][ T551] Zero length message leads to an empty skb [ 35.605457][ T549] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #12: comm syz.3.50: corrupted xattr block 6 [ 35.650509][ T549] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 35.659929][ T549] EXT4-fs error (device loop3): ext4_xattr_block_list:713: inode #12: comm syz.3.50: corrupted xattr block 6 [ 35.733332][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 35.733347][ T30] audit: type=1400 audit(1771391857.793:169): avc: denied { create } for pid=560 comm="syz.2.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 35.765906][ T30] audit: type=1400 audit(1771391857.803:170): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 35.793464][ T567] loop1: detected capacity change from 0 to 512 [ 35.881945][ T567] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 35.896737][ T30] audit: type=1400 audit(1771391857.953:171): avc: denied { mount } for pid=565 comm="syz.1.63" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 35.981339][ T573] netlink: 104 bytes leftover after parsing attributes in process `syz.2.62'. [ 36.013026][ T573] netlink: 12 bytes leftover after parsing attributes in process `syz.2.62'. [ 36.049302][ T567] ext4 filesystem being mounted at /9/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.732543][ T30] audit: type=1400 audit(1771391858.033:172): avc: denied { write } for pid=560 comm="syz.2.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 36.844383][ T30] audit: type=1400 audit(1771391858.043:173): avc: denied { nlmsg_write } for pid=560 comm="syz.2.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 36.884319][ T579] loop3: detected capacity change from 0 to 512 [ 36.902939][ T30] audit: type=1400 audit(1771391858.063:174): avc: denied { create } for pid=560 comm="syz.2.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 36.984201][ T30] audit: type=1400 audit(1771391858.073:175): avc: denied { write } for pid=560 comm="syz.2.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 37.074080][ T579] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 37.091751][ T579] System zones: 1-12 [ 37.108557][ T579] EXT4-fs error (device loop3): ext4_iget_extra_inode:4597: inode #15: comm syz.3.64: corrupted in-inode xattr [ 37.161830][ T579] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.64: couldn't read orphan inode 15 (err -117) [ 37.188738][ T579] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,minixdf,noblock_validity,lazytime,noauto_da_alloc,block_validity,init_itable=0x0000000000000009,debug,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 37.219854][ T593] loop4: detected capacity change from 0 to 256 [ 37.365293][ T590] loop1: detected capacity change from 0 to 40427 [ 37.385321][ T529] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 37.403519][ T590] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 37.417499][ T598] loop3: detected capacity change from 0 to 256 [ 37.430241][ T590] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 37.443717][ T598] FAT-fs (loop3): Directory bread(block 64) failed [ 37.450533][ T598] FAT-fs (loop3): Directory bread(block 65) failed [ 37.457351][ T598] FAT-fs (loop3): Directory bread(block 66) failed [ 37.467584][ T590] F2FS-fs (loop1): invalid crc value [ 37.483119][ T598] FAT-fs (loop3): Directory bread(block 67) failed [ 37.490829][ T598] FAT-fs (loop3): Directory bread(block 68) failed [ 37.497598][ T598] FAT-fs (loop3): Directory bread(block 69) failed [ 37.507244][ T601] netlink: 25 bytes leftover after parsing attributes in process `syz.4.68'. [ 37.516431][ T601] device 01猉功D龌 entered promiscuous mode [ 37.533592][ T601] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.68'. [ 37.543051][ T601] 0猉功D龌: renamed from 01猉功D龌 [ 37.552563][ T601] device 00猉功D龌 left promiscuous mode [ 37.701096][ T601] attempt to access beyond end of device [ 37.701096][ T601] loop4: rw=2049, want=544, limit=256 [ 37.712511][ T601] attempt to access beyond end of device [ 37.712511][ T601] loop4: rw=2049, want=1024, limit=256 [ 37.723722][ T601] attempt to access beyond end of device [ 37.723722][ T601] loop4: rw=2049, want=1096, limit=256 [ 37.755916][ T598] FAT-fs (loop3): Directory bread(block 70) failed [ 37.763804][ T590] F2FS-fs (loop1): Found nat_bits in checkpoint [ 37.770334][ T529] usb 3-1: Using ep0 maxpacket: 16 [ 37.776974][ T598] FAT-fs (loop3): Directory bread(block 71) failed [ 37.818475][ T598] FAT-fs (loop3): Directory bread(block 72) failed [ 37.825210][ T598] FAT-fs (loop3): Directory bread(block 73) failed [ 37.867259][ T590] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 37.875214][ T590] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 37.928042][ T529] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.950194][ T529] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 38.069064][ T30] audit: type=1400 audit(1771391860.123:176): avc: denied { map_read map_write } for pid=614 comm="syz.3.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.437969][ T529] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 38.451781][ T529] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.466077][ T529] usb 3-1: Product: syz [ 38.472448][ T529] usb 3-1: Manufacturer: syz [ 38.480193][ T529] usb 3-1: SerialNumber: syz [ 38.635062][ T638] loop1: detected capacity change from 0 to 512 [ 38.656516][ T638] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 38.664671][ T638] System zones: 1-12 [ 38.670134][ T638] EXT4-fs error (device loop1): ext4_iget_extra_inode:4597: inode #15: comm syz.1.80: corrupted in-inode xattr [ 38.682185][ T638] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.80: couldn't read orphan inode 15 (err -117) [ 38.694751][ T638] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,minixdf,noblock_validity,lazytime,noauto_da_alloc,block_validity,init_itable=0x0000000000000009,debug,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 38.808074][ T529] usb 3-1: 0:2 : does not exist [ 38.817688][ T529] usb 3-1: USB disconnect, device number 2 [ 39.058527][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.279495][ T30] audit: type=1400 audit(1771391861.343:177): avc: denied { read } for pid=652 comm="syz.4.85" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 39.304636][ T30] audit: type=1400 audit(1771391861.363:178): avc: denied { open } for pid=652 comm="syz.4.85" path="/dev/cpu/1/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 39.591554][ T667] loop0: detected capacity change from 0 to 128 [ 39.629915][ T667] EXT4-fs (loop0): Test dummy encryption mode enabled [ 39.660286][ T667] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 39.708782][ T667] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 39.764118][ T660] loop2: detected capacity change from 0 to 40427 [ 39.777718][ T667] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 39.783378][ T660] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 39.796091][ T660] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 39.869650][ T660] F2FS-fs (loop2): invalid crc value [ 39.932128][ T660] F2FS-fs (loop2): Found nat_bits in checkpoint [ 39.943252][ T678] loop1: detected capacity change from 0 to 512 [ 40.141871][ T660] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 40.195786][ T660] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 40.210639][ T678] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 40.228371][ T678] System zones: 1-12 [ 40.254190][ T678] EXT4-fs error (device loop1): ext4_iget_extra_inode:4597: inode #15: comm syz.1.92: corrupted in-inode xattr [ 40.268244][ T678] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.92: couldn't read orphan inode 15 (err -117) [ 40.280451][ T678] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,minixdf,noblock_validity,lazytime,noauto_da_alloc,block_validity,init_itable=0x0000000000000009,debug,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 40.381166][ T686] loop1: detected capacity change from 0 to 256 [ 40.395431][ T686] exfat: Deprecated parameter 'namecase' [ 40.406673][ T686] exfat: Unknown parameter 'keep_last_dots' [ 40.993437][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 40.993512][ T30] audit: type=1400 audit(1771391862.843:182): avc: denied { setopt } for pid=702 comm="syz.1.101" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.500151][ T711] loop3: detected capacity change from 0 to 256 [ 41.521683][ T712] loop1: detected capacity change from 0 to 512 [ 41.753425][ T712] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 41.763524][ T712] System zones: 1-12 [ 41.779055][ T712] EXT4-fs error (device loop1): ext4_iget_extra_inode:4597: inode #15: comm syz.1.103: corrupted in-inode xattr [ 41.791418][ T712] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.103: couldn't read orphan inode 15 (err -117) [ 41.803475][ T712] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,minixdf,noblock_validity,lazytime,noauto_da_alloc,block_validity,init_itable=0x0000000000000009,debug,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 41.861132][ T713] netlink: 25 bytes leftover after parsing attributes in process `syz.3.102'. [ 41.880469][ T713] device gretap0 entered promiscuous mode [ 41.902468][ T713] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.102'. [ 41.911987][ T713] 0猉功D龌: renamed from gretap0 [ 41.919926][ T713] device 00猉功D龌 left promiscuous mode [ 42.003973][ T730] loop1: detected capacity change from 0 to 512 [ 42.013289][ T713] attempt to access beyond end of device [ 42.013289][ T713] loop3: rw=2049, want=544, limit=256 [ 42.054473][ T730] EXT4-fs (loop1): #blocks per group too big: 33562624 [ 42.075564][ T713] attempt to access beyond end of device [ 42.075564][ T713] loop3: rw=2049, want=1024, limit=256 [ 42.111029][ T713] attempt to access beyond end of device [ 42.111029][ T713] loop3: rw=2049, want=2592, limit=256 [ 42.263617][ T30] audit: type=1400 audit(1771391864.323:183): avc: denied { name_bind } for pid=735 comm="syz.1.110" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 42.313533][ T30] audit: type=1400 audit(1771391864.363:184): avc: denied { node_bind } for pid=735 comm="syz.1.110" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 42.351108][ T713] syz.3.102 (713) used greatest stack depth: 21240 bytes left [ 42.433802][ T740] loop4: detected capacity change from 0 to 512 [ 42.487171][ T30] audit: type=1400 audit(1771391864.543:185): avc: denied { connect } for pid=743 comm="syz.3.113" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 42.527793][ T30] audit: type=1400 audit(1771391864.543:186): avc: denied { write } for pid=743 comm="syz.3.113" laddr=fe80::6c1c:d1ff:fee6:1b0e lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 42.547248][ T746] loop3: detected capacity change from 0 to 512 [ 42.594591][ T740] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 42.613200][ T740] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.645237][ T746] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 42.681783][ T746] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.701541][ T30] audit: type=1400 audit(1771391864.763:187): avc: denied { remount } for pid=739 comm="syz.4.112" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 42.721702][ T740] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 42.817243][ T758] EXT4-fs (loop4): re-mounted. Opts: . Quota mode: writeback. [ 43.005113][ T764] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 43.014537][ T764] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 43.024207][ T764] syz.3.114 (764) used greatest stack depth: 19352 bytes left [ 43.274226][ T779] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 43.282430][ T779] System zones: 1-12 [ 43.302066][ T779] EXT4-fs error (device loop2): ext4_iget_extra_inode:4597: inode #15: comm syz.2.125: corrupted in-inode xattr [ 43.336637][ T779] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.125: couldn't read orphan inode 15 (err -117) [ 43.384914][ T779] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,minixdf,noblock_validity,lazytime,noauto_da_alloc,block_validity,init_itable=0x0000000000000009,debug,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 43.671250][ T793] set_capacity_and_notify: 1 callbacks suppressed [ 43.671267][ T793] loop4: detected capacity change from 0 to 128 [ 43.713636][ T795] loop2: detected capacity change from 0 to 1024 [ 43.729298][ T793] EXT4-fs (loop4): Test dummy encryption mode enabled [ 43.745267][ T793] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 43.776733][ T795] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 43.778334][ T793] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 43.830184][ T795] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.939479][ T795] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.129: bg 0: block 112: padding at end of block bitmap is not set [ 43.957384][ T795] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 43.970228][ T795] EXT4-fs (loop2): This should not happen!! Data will be lost [ 43.970228][ T795] [ 43.980385][ T795] EXT4-fs (loop2): Total free blocks count 0 [ 43.986416][ T795] EXT4-fs (loop2): Free/Dirty block details [ 43.992585][ T795] EXT4-fs (loop2): free_blocks=0 [ 43.997605][ T795] EXT4-fs (loop2): dirty_blocks=16 [ 44.003293][ T795] EXT4-fs (loop2): Block reservation details [ 44.011075][ T795] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 44.246315][ T804] loop0: detected capacity change from 0 to 512 [ 44.345607][ T808] loop2: detected capacity change from 0 to 256 [ 44.763560][ T813] loop4: detected capacity change from 0 to 512 [ 44.784618][ T813] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 44.799194][ T813] ext4 filesystem being mounted at /26/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.907667][ T822] netlink: 25 bytes leftover after parsing attributes in process `syz.2.132'. [ 44.917188][ T822] device gretap0 entered promiscuous mode [ 44.925463][ T822] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.132'. [ 44.934744][ T822] 0猉功D龌: renamed from gretap0 [ 44.940602][ T822] device 00猉功D龌 left promiscuous mode [ 46.124716][ T832] loop4: detected capacity change from 0 to 512 [ 46.192178][ T832] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 46.202095][ T835] loop3: detected capacity change from 0 to 512 [ 46.208531][ T832] System zones: 1-12 [ 46.213109][ T832] EXT4-fs error (device loop4): ext4_iget_extra_inode:4597: inode #15: comm syz.4.139: corrupted in-inode xattr [ 46.244554][ T835] EXT4-fs (loop3): Ignoring removed orlov option [ 46.252820][ T835] EXT4-fs (loop3): Test dummy encryption mode enabled [ 46.260176][ T832] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.139: couldn't read orphan inode 15 (err -117) [ 46.272307][ T835] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 46.286183][ T832] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,minixdf,noblock_validity,lazytime,noauto_da_alloc,block_validity,init_itable=0x0000000000000009,debug,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 46.310044][ T835] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 46.321489][ T835] EXT4-fs (loop3): 1 truncate cleaned up [ 46.327165][ T835] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,quota,barrier=0x0000000000000003,orlov,test_dummy_encryption=v1,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 46.555235][ T840] loop0: detected capacity change from 0 to 1024 [ 46.656983][ T848] tmpfs: Bad value for 'huge' [ 46.722724][ T30] audit: type=1400 audit(1771391868.713:188): avc: denied { mounton } for pid=834 comm="syz.3.140" path="/27/bus/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.869310][ T840] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 46.918735][ T30] audit: type=1326 audit(1771391868.733:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=834 comm="syz.3.140" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc25d030629 code=0x0 [ 46.945943][ T840] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.061877][ T859] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.142: bg 0: block 112: padding at end of block bitmap is not set [ 47.108119][ T859] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 24 with max blocks 1384 with error 117 [ 47.162506][ T859] EXT4-fs (loop0): This should not happen!! Data will be lost [ 47.162506][ T859] [ 47.238705][ T8] EXT4-fs error (device loop0): ext4_map_blocks:740: inode #15: comm kworker/u4:0: lblock 0 mapped to illegal pblock 0 (length 6) [ 47.267571][ T8] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 47.319239][ T8] EXT4-fs (loop0): This should not happen!! Data will be lost [ 47.319239][ T8] [ 47.364417][ T8] EXT4-fs error (device loop0): ext4_map_blocks:740: inode #15: block 8: comm kworker/u4:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 47.394046][ T8] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 47.505578][ T8] EXT4-fs (loop0): This should not happen!! Data will be lost [ 47.505578][ T8] [ 47.544497][ T863] loop2: detected capacity change from 0 to 40427 [ 47.560753][ T863] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 47.572273][ T863] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 47.700146][ T30] audit: type=1400 audit(1771391869.763:190): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 47.702076][ T863] F2FS-fs (loop2): invalid crc value [ 47.727543][ T863] F2FS-fs (loop2): Found nat_bits in checkpoint [ 48.100635][ T863] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 48.122068][ T863] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 48.695189][ T889] loop0: detected capacity change from 0 to 1024 [ 48.709802][ T30] audit: type=1400 audit(1771391870.773:191): avc: denied { mounton } for pid=886 comm="syz.3.154" path="/29/file0" dev="tmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 48.765523][ T889] EXT4-fs (loop0): Ignoring removed orlov option [ 48.811581][ T889] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nodelalloc,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 48.901916][ T30] audit: type=1400 audit(1771391870.963:192): avc: denied { setattr } for pid=887 comm="syz.0.153" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.071450][ T900] loop3: detected capacity change from 0 to 4096 [ 49.175685][ T900] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 49.223742][ T900] EXT4-fs (loop3): Test dummy encryption mode enabled [ 49.248200][ T900] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 49.260548][ T915] device ip6erspan0 entered promiscuous mode [ 49.377553][ T900] EXT4-fs (loop3): Mount option "dax=never" incompatible with ext2 [ 50.490122][ T30] audit: type=1400 audit(1771391872.553:193): avc: denied { setopt } for pid=899 comm="syz.3.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.572696][ T30] audit: type=1400 audit(1771391872.553:194): avc: denied { read } for pid=899 comm="syz.3.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.759873][ T933] 9pnet: Insufficient options for proto=fd [ 52.341164][ T963] device ip6erspan0 entered promiscuous mode [ 53.391753][ T970] 9pnet: Insufficient options for proto=fd [ 53.401209][ T971] loop0: detected capacity change from 0 to 512 [ 53.479042][ T971] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 53.517443][ T971] System zones: 1-12 [ 53.538569][ T971] EXT4-fs error (device loop0): ext4_iget_extra_inode:4597: inode #15: comm syz.0.178: corrupted in-inode xattr [ 53.604537][ T971] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.178: couldn't read orphan inode 15 (err -117) [ 53.651679][ T971] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,minixdf,noblock_validity,lazytime,noauto_da_alloc,block_validity,init_itable=0x0000000000000009,debug,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 55.259531][ T992] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=992 comm=syz.0.182 [ 56.041481][ T1002] loop4: detected capacity change from 0 to 128 [ 57.288857][ T1016] 9pnet: Insufficient options for proto=fd [ 57.341945][ T1021] netlink: 36 bytes leftover after parsing attributes in process `syz.3.192'. [ 58.558373][ T30] audit: type=1400 audit(1771391880.623:195): avc: denied { write } for pid=1037 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 58.641245][ T1053] loop4: detected capacity change from 0 to 4096 [ 58.651565][ T1053] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 58.659009][ T1053] EXT4-fs (loop4): Test dummy encryption mode enabled [ 58.665986][ T1053] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 58.673559][ T1053] EXT4-fs (loop4): Mount option "dax=never" incompatible with ext2 [ 58.695101][ T1066] 9pnet: Insufficient options for proto=fd [ 58.867960][ T60] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 60.013945][ T1079] loop3: detected capacity change from 0 to 512 [ 60.092835][ T1079] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 60.133393][ T1079] ext4 filesystem being mounted at /36/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.507949][ T60] usb 1-1: Using ep0 maxpacket: 16 [ 60.627969][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.645147][ T60] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 60.661570][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.678547][ T60] usb 1-1: config 0 descriptor?? [ 61.578656][ T30] audit: type=1326 audit(1771391883.633:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1108 comm="syz.4.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7ae12c629 code=0x7ffc0000 [ 61.658549][ T60] magicmouse 0003:05AC:0269.0002: hidraw0: USB HID v0.00 Device [HID 05ac:0269] on usb-dummy_hcd.0-1/input0 [ 61.923580][ T30] audit: type=1326 audit(1771391883.663:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1108 comm="syz.4.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7ae12c629 code=0x7ffc0000 [ 61.996530][ T30] audit: type=1326 audit(1771391883.663:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1108 comm="syz.4.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd7ae12c629 code=0x7ffc0000 [ 62.096635][ T60] usb 1-1: USB disconnect, device number 3 [ 62.106373][ T30] audit: type=1326 audit(1771391883.663:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1108 comm="syz.4.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7ae12c629 code=0x7ffc0000 [ 62.188593][ T30] audit: type=1326 audit(1771391883.673:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1108 comm="syz.4.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fd7ae12c629 code=0x7ffc0000 [ 62.290898][ T30] audit: type=1326 audit(1771391883.673:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1108 comm="syz.4.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7ae12c629 code=0x7ffc0000 [ 62.971417][ T1137] fido_id[1137]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 63.024426][ T30] audit: type=1326 audit(1771391883.673:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1108 comm="syz.4.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd7ae12c629 code=0x7ffc0000 [ 63.048793][ T1144] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1144 comm=syz.1.224 [ 63.152088][ T30] audit: type=1326 audit(1771391883.673:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1108 comm="syz.4.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7ae12c629 code=0x7ffc0000 [ 63.181049][ T1146] binder: 1145:1146 ioctl 4018620d 0 returned -22 [ 63.225958][ T30] audit: type=1326 audit(1771391883.673:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1108 comm="syz.4.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd7ae12c629 code=0x7ffc0000 [ 63.474396][ T1154] loop2: detected capacity change from 0 to 16 [ 63.552165][ T1154] erofs: (device loop2): mounted with root inode @ nid 36. [ 63.690454][ T1159] 9pnet: Insufficient options for proto=fd [ 63.871041][ T1166] loop0: detected capacity change from 0 to 256 [ 64.512807][ T1175] netlink: 25 bytes leftover after parsing attributes in process `syz.0.232'. [ 64.521960][ T1175] device gretap0 entered promiscuous mode [ 64.530343][ T1175] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.232'. [ 64.539603][ T1175] 0猉功D龌: renamed from gretap0 [ 64.545461][ T1175] device 00猉功D龌 left promiscuous mode [ 64.673044][ T1175] attempt to access beyond end of device [ 64.673044][ T1175] loop0: rw=2049, want=544, limit=256 [ 64.684548][ T1175] attempt to access beyond end of device [ 64.684548][ T1175] loop0: rw=2049, want=1024, limit=256 [ 64.700162][ T1175] attempt to access beyond end of device [ 64.700162][ T1175] loop0: rw=2049, want=3936, limit=256 [ 64.856710][ T1189] 9pnet: Insufficient options for proto=fd [ 65.083142][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 65.084178][ T30] audit: type=1400 audit(1771391887.143:206): avc: denied { create } for pid=1193 comm="syz.3.241" dev="anon_inodefs" ino=19738 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 65.979617][ T1209] loop3: detected capacity change from 0 to 512 [ 66.201464][ T30] audit: type=1400 audit(1771391887.143:207): avc: denied { ioctl } for pid=1193 comm="syz.3.241" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=19738 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 66.229323][ T30] audit: type=1400 audit(1771391887.463:208): avc: denied { read } for pid=1193 comm="syz.3.241" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=19738 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 66.405092][ T1209] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 66.478267][ T1209] ext4 filesystem being mounted at /45/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.197330][ T30] audit: type=1400 audit(1771391889.203:209): avc: denied { execute } for pid=1218 comm="syz.2.248" name="file0" dev="tmpfs" ino=295 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.244236][ T30] audit: type=1400 audit(1771391889.203:210): avc: denied { execute_no_trans } for pid=1218 comm="syz.2.248" path="/51/file0" dev="tmpfs" ino=295 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.282815][ T30] audit: type=1400 audit(1771391889.343:211): avc: denied { read } for pid=1224 comm="syz.0.249" path="socket:[19808]" dev="sockfs" ino=19808 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.405019][ T1227] loop4: detected capacity change from 0 to 256 [ 67.415912][ T1229] 9pnet: Insufficient options for proto=fd [ 67.772614][ T1238] netlink: 25 bytes leftover after parsing attributes in process `syz.4.250'. [ 67.781715][ T1238] device 00猉功D龌 entered promiscuous mode [ 67.790641][ T1238] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.250'. [ 67.799882][ T1238] 1猉功D龌: renamed from 00猉功D龌 [ 67.806227][ T1238] device 01猉功D龌 left promiscuous mode [ 67.904756][ T1238] attempt to access beyond end of device [ 67.904756][ T1238] loop4: rw=2049, want=544, limit=256 [ 67.916109][ T1238] attempt to access beyond end of device [ 67.916109][ T1238] loop4: rw=2049, want=1024, limit=256 [ 67.935935][ T1238] attempt to access beyond end of device [ 67.935935][ T1238] loop4: rw=2049, want=3840, limit=256 [ 70.476963][ T1267] 9pnet: Insufficient options for proto=fd [ 70.543854][ T1273] loop0: detected capacity change from 0 to 256 [ 70.665090][ T1276] device ip6erspan0 entered promiscuous mode [ 70.718545][ T1273] netlink: 25 bytes leftover after parsing attributes in process `syz.0.265'. [ 70.727584][ T1273] device 00猉功D龌 entered promiscuous mode [ 70.736568][ T1273] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.265'. [ 70.745928][ T1273] 1猉功D龌: renamed from 00猉功D龌 [ 70.752219][ T1273] device 01猉功D龌 left promiscuous mode [ 70.874316][ T1273] attempt to access beyond end of device [ 70.874316][ T1273] loop0: rw=2049, want=544, limit=256 [ 70.885697][ T1273] attempt to access beyond end of device [ 70.885697][ T1273] loop0: rw=2049, want=1024, limit=256 [ 70.899583][ T1273] attempt to access beyond end of device [ 70.899583][ T1273] loop0: rw=2049, want=3136, limit=256 [ 71.118338][ T1286] loop1: detected capacity change from 0 to 256 [ 72.780388][ T1298] netlink: 25 bytes leftover after parsing attributes in process `syz.1.269'. [ 72.789638][ T1298] device 00猉功D龌 entered promiscuous mode [ 72.797767][ T1298] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.269'. [ 72.807019][ T1298] 1猉功D龌: renamed from 00猉功D龌 [ 72.813155][ T1298] device 01猉功D龌 left promiscuous mode [ 72.881516][ T1298] attempt to access beyond end of device [ 72.881516][ T1298] loop1: rw=2049, want=544, limit=256 [ 72.892876][ T1298] attempt to access beyond end of device [ 72.892876][ T1298] loop1: rw=2049, want=1024, limit=256 [ 72.906192][ T1298] attempt to access beyond end of device [ 72.906192][ T1298] loop1: rw=2049, want=4584, limit=256 [ 73.121395][ T1308] loop3: detected capacity change from 0 to 256 [ 74.247401][ T1319] loop0: detected capacity change from 0 to 1024 [ 74.312368][ T1308] netlink: 25 bytes leftover after parsing attributes in process `syz.3.277'. [ 74.321502][ T1308] device 00猉功D龌 entered promiscuous mode [ 74.329531][ T1308] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.277'. [ 74.338828][ T1308] 1猉功D龌: renamed from 00猉功D龌 [ 74.345045][ T1308] device 01猉功D龌 left promiscuous mode [ 74.361511][ T1319] EXT4-fs (loop0): Ignoring removed oldalloc option [ 74.374288][ T1319] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 75.025994][ T1308] attempt to access beyond end of device [ 75.025994][ T1308] loop3: rw=2049, want=544, limit=256 [ 75.037373][ T1308] attempt to access beyond end of device [ 75.037373][ T1308] loop3: rw=2049, want=1024, limit=256 [ 75.049268][ T1308] attempt to access beyond end of device [ 75.049268][ T1308] loop3: rw=2049, want=2112, limit=256 [ 75.069419][ T1329] 9pnet: Insufficient options for proto=fd [ 75.094204][ T1319] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,bsddf,usrquota,data_err=ignore,init_itable,oldalloc,grpquota,bsdgroups,nodelalloc,grpquota,dioread_nolock,,errors=continue. Quota mode: writeback. [ 75.129497][ T1334] loop1: detected capacity change from 0 to 256 [ 75.336510][ T1344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.285'. [ 75.951182][ T1354] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1354 comm=syz.0.286 [ 76.227247][ T1345] netlink: 25 bytes leftover after parsing attributes in process `syz.1.284'. [ 76.246427][ T1345] device 01猉功D龌 entered promiscuous mode [ 76.310529][ T1358] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.284'. [ 76.319801][ T1358] 0猉功D龌: renamed from 01猉功D龌 [ 76.326085][ T1358] device 00猉功D龌 left promiscuous mode [ 76.417380][ T1350] loop4: detected capacity change from 0 to 40427 [ 76.440125][ T1350] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 76.449427][ T1366] loop1: detected capacity change from 0 to 256 [ 76.459836][ T1350] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 76.469755][ T1350] F2FS-fs (loop4): invalid crc value [ 76.499147][ T1350] F2FS-fs (loop4): Found nat_bits in checkpoint [ 76.596165][ T1366] netlink: 25 bytes leftover after parsing attributes in process `syz.1.292'. [ 76.605360][ T1366] device 00猉功D龌 entered promiscuous mode [ 76.613324][ T1366] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.292'. [ 76.622569][ T1366] 1猉功D龌: renamed from 00猉功D龌 [ 76.626831][ T1350] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 76.635226][ T1350] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 76.636740][ T1366] device 01猉功D龌 left promiscuous mode [ 76.757886][ T1366] attempt to access beyond end of device [ 76.757886][ T1366] loop1: rw=2049, want=544, limit=256 [ 76.769840][ T1366] attempt to access beyond end of device [ 76.769840][ T1366] loop1: rw=2049, want=1024, limit=256 [ 76.783069][ T1366] attempt to access beyond end of device [ 76.783069][ T1366] loop1: rw=2049, want=2656, limit=256 [ 77.300037][ T1381] loop2: detected capacity change from 0 to 512 [ 77.336092][ T1381] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 77.340031][ T1386] 9pnet: Insufficient options for proto=fd [ 77.370631][ T1381] ext4 filesystem being mounted at /61/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.497219][ T1393] loop0: detected capacity change from 0 to 512 [ 78.321102][ T1399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.297'. [ 79.041115][ T1406] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 79.085929][ T1406] SELinux: duplicate or incompatible mount options [ 79.135635][ T30] audit: type=1400 audit(1771391901.193:212): avc: denied { create } for pid=1408 comm="syz.0.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 79.362177][ T30] audit: type=1400 audit(1771391901.213:213): avc: denied { write } for pid=1408 comm="syz.0.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 79.590402][ T1414] loop4: detected capacity change from 0 to 4096 [ 79.629072][ T1414] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 79.648584][ T1414] EXT4-fs (loop4): Test dummy encryption mode enabled [ 79.663093][ T1414] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 79.679203][ T1414] EXT4-fs (loop4): Mount option "dax=never" incompatible with ext2 [ 79.813429][ T1419] loop3: detected capacity change from 0 to 256 [ 80.039377][ T1424] netlink: 25 bytes leftover after parsing attributes in process `syz.3.306'. [ 80.050411][ T1424] device 01猉功D龌 entered promiscuous mode [ 80.059046][ T1424] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.306'. [ 80.068283][ T1424] 0猉功D龌: renamed from 01猉功D龌 [ 80.218250][ T1424] device 00猉功D龌 left promiscuous mode [ 80.362404][ T1423] attempt to access beyond end of device [ 80.362404][ T1423] loop3: rw=2049, want=320, limit=256 [ 80.385190][ T1429] 9pnet: Insufficient options for proto=fd [ 81.001698][ T1444] loop4: detected capacity change from 0 to 512 [ 81.188220][ T1444] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 81.208134][ T1444] ext4 filesystem being mounted at /63/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.249040][ T1433] loop0: detected capacity change from 0 to 40427 [ 81.329739][ T1433] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 81.338176][ T1433] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 81.351345][ T1433] F2FS-fs (loop0): invalid crc value [ 81.373374][ T1433] F2FS-fs (loop0): Found nat_bits in checkpoint [ 81.412683][ T1433] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 81.419964][ T1433] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 82.399959][ T30] audit: type=1326 audit(1771391904.463:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1463 comm="syz.2.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6794fb629 code=0x7ffc0000 [ 82.481118][ T1467] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 82.501106][ T30] audit: type=1326 audit(1771391904.483:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1463 comm="syz.2.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7fe6794fb629 code=0x7ffc0000 [ 82.548134][ T1467] SELinux: duplicate or incompatible mount options [ 82.669049][ T30] audit: type=1326 audit(1771391904.483:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1463 comm="syz.2.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6794fb629 code=0x7ffc0000 [ 82.695283][ T30] audit: type=1326 audit(1771391904.483:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1463 comm="syz.2.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6794fb629 code=0x7ffc0000 [ 82.731344][ T1473] loop2: detected capacity change from 0 to 256 [ 82.769304][ T1479] loop1: detected capacity change from 0 to 4096 [ 82.788173][ T1474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.314'. [ 82.929821][ T1479] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 82.992407][ T1484] netlink: 25 bytes leftover after parsing attributes in process `syz.2.320'. [ 83.001502][ T1484] device 00猉功D龌 entered promiscuous mode [ 83.010318][ T1484] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.320'. [ 83.019559][ T1484] 1猉功D龌: renamed from 00猉功D龌 [ 83.025774][ T1484] device 01猉功D龌 left promiscuous mode [ 83.071355][ T1479] EXT4-fs (loop1): shut down requested (1) [ 83.094735][ T1484] attempt to access beyond end of device [ 83.094735][ T1484] loop2: rw=2049, want=544, limit=256 [ 83.104802][ T1479] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 83.107125][ T1484] attempt to access beyond end of device [ 83.107125][ T1484] loop2: rw=2049, want=1024, limit=256 [ 83.126729][ T1484] attempt to access beyond end of device [ 83.126729][ T1484] loop2: rw=2049, want=3976, limit=256 [ 83.137979][ T30] audit: type=1400 audit(1771391905.173:218): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 83.188558][ T30] audit: type=1400 audit(1771391905.173:219): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.223806][ T30] audit: type=1400 audit(1771391905.173:220): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.245173][ T30] audit: type=1400 audit(1771391905.173:221): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.276350][ T1490] loop3: detected capacity change from 0 to 512 [ 83.345361][ T1490] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 83.451623][ T1490] ext4 filesystem being mounted at /59/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.976815][ T1492] loop1: detected capacity change from 0 to 40427 [ 84.001702][ T1492] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 84.023129][ T1492] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 84.044016][ T1492] F2FS-fs (loop1): invalid crc value [ 84.050898][ T1492] F2FS-fs (loop1): Found nat_bits in checkpoint [ 84.090171][ T1492] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 84.097317][ T1492] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 84.268330][ T1526] loop3: detected capacity change from 0 to 256 [ 84.349554][ T1529] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 84.369584][ T1529] SELinux: duplicate or incompatible mount options [ 84.462461][ T1539] netlink: 25 bytes leftover after parsing attributes in process `syz.3.335'. [ 84.471605][ T1539] device 00猉功D龌 entered promiscuous mode [ 84.479776][ T1539] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.335'. [ 84.489062][ T1539] 1猉功D龌: renamed from 00猉功D龌 [ 84.495295][ T1539] device 01猉功D龌 left promiscuous mode [ 84.573064][ T1539] attempt to access beyond end of device [ 84.573064][ T1539] loop3: rw=2049, want=544, limit=256 [ 84.585289][ T1539] attempt to access beyond end of device [ 84.585289][ T1539] loop3: rw=2049, want=1024, limit=256 [ 84.598923][ T1539] attempt to access beyond end of device [ 84.598923][ T1539] loop3: rw=2049, want=4480, limit=256 [ 84.611595][ T1539] attempt to access beyond end of device [ 84.611595][ T1539] loop3: rw=2049, want=5400, limit=256 [ 84.680631][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 84.680655][ T30] audit: type=1400 audit(1771391906.743:225): avc: denied { sys_admin } for pid=1537 comm="syz.1.338" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 84.728341][ T30] audit: type=1400 audit(1771391906.793:226): avc: denied { unmount } for pid=1537 comm="syz.1.338" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 84.955999][ T30] audit: type=1400 audit(1771391907.013:227): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 86.102830][ T1588] loop0: detected capacity change from 0 to 256 [ 86.188409][ T1590] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 86.198660][ T1590] SELinux: duplicate or incompatible mount options [ 86.345931][ T1585] loop4: detected capacity change from 0 to 40427 [ 86.356045][ T1585] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 86.364109][ T1585] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 86.382653][ T1585] F2FS-fs (loop4): invalid crc value [ 86.423871][ T1585] F2FS-fs (loop4): Found nat_bits in checkpoint [ 86.452070][ T1608] netlink: 25 bytes leftover after parsing attributes in process `syz.0.354'. [ 86.461640][ T1608] device 01猉功D龌 entered promiscuous mode [ 86.469858][ T1608] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.354'. [ 86.479206][ T1608] 0猉功D龌: renamed from 01猉功D龌 [ 86.485812][ T1608] device 00猉功D龌 left promiscuous mode [ 86.668623][ T1608] attempt to access beyond end of device [ 86.668623][ T1608] loop0: rw=2049, want=544, limit=256 [ 86.679961][ T1608] attempt to access beyond end of device [ 86.679961][ T1608] loop0: rw=2049, want=1024, limit=256 [ 86.691789][ T1608] attempt to access beyond end of device [ 86.691789][ T1608] loop0: rw=2049, want=2208, limit=256 [ 86.703659][ T1585] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 86.720523][ T1585] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 86.786135][ T1614] loop3: detected capacity change from 0 to 512 [ 86.872234][ T1614] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 86.886979][ T1614] ext4 filesystem being mounted at /66/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.030515][ T30] audit: type=1400 audit(1771391909.093:228): avc: denied { read } for pid=1620 comm="syz.0.363" dev="nsfs" ino=4026532289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 87.196081][ T30] audit: type=1400 audit(1771391909.093:229): avc: denied { open } for pid=1620 comm="syz.0.363" path="net:[4026532289]" dev="nsfs" ino=4026532289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 87.242771][ T30] audit: type=1400 audit(1771391909.233:230): avc: denied { create } for pid=1620 comm="syz.0.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 87.320314][ T30] audit: type=1400 audit(1771391909.233:231): avc: denied { write } for pid=1620 comm="syz.0.363" path="socket:[19372]" dev="sockfs" ino=19372 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 87.431874][ T1642] 9pnet: Insufficient options for proto=fd [ 87.646691][ T1647] loop0: detected capacity change from 0 to 256 [ 88.061985][ T1654] netlink: 25 bytes leftover after parsing attributes in process `syz.0.374'. [ 88.071625][ T1654] device 00猉功D龌 entered promiscuous mode [ 88.114088][ T1654] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.374'. [ 88.124809][ T1654] 1猉功D龌: renamed from 00猉功D龌 [ 88.143258][ T1654] device 01猉功D龌 left promiscuous mode [ 88.336445][ T1654] attempt to access beyond end of device [ 88.336445][ T1654] loop0: rw=2049, want=544, limit=256 [ 88.347818][ T1654] attempt to access beyond end of device [ 88.347818][ T1654] loop0: rw=2049, want=840, limit=256 [ 88.450238][ T30] audit: type=1400 audit(1771391910.513:232): avc: denied { write } for pid=1664 comm="syz.2.380" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 88.483898][ T1665] loop2: detected capacity change from 0 to 2048 [ 88.490441][ T30] audit: type=1400 audit(1771391910.543:233): avc: denied { read } for pid=1666 comm="syz.0.378" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 88.513889][ T30] audit: type=1400 audit(1771391910.543:234): avc: denied { create } for pid=1666 comm="syz.0.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 88.976843][ T1670] netlink: 'syz.0.378': attribute type 4 has an invalid length. [ 88.984683][ T1670] netlink: 17 bytes leftover after parsing attributes in process `syz.0.378'. [ 89.237206][ T1677] loop2: detected capacity change from 0 to 512 [ 89.264721][ T1679] 9pnet: Insufficient options for proto=fd [ 89.289433][ T1677] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 89.304370][ T1677] ext4 filesystem being mounted at /78/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.394154][ T1694] 9pnet: Could not find request transport: fd0x0000000000000003 [ 90.524872][ T1708] 9pnet: Insufficient options for proto=fd [ 90.560653][ T1710] loop3: detected capacity change from 0 to 512 [ 90.757991][ T1710] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 90.848016][ T1710] ext4 filesystem being mounted at /74/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.584943][ T1739] loop0: detected capacity change from 0 to 256 [ 91.593261][ T1741] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 91.628800][ T529] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 91.668235][ T1743] 9pnet: Could not find request transport: fd0x0000000000000003 [ 91.772525][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 91.772540][ T30] audit: type=1400 audit(1771391913.833:237): avc: denied { mount } for pid=1747 comm="syz.3.408" name="/" dev="configfs" ino=14546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 91.878264][ T1749] netlink: 25 bytes leftover after parsing attributes in process `syz.0.404'. [ 91.891482][ T1749] device 01猉功D龌 entered promiscuous mode [ 91.909422][ T1749] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.404'. [ 91.919048][ T1749] 0猉功D龌: renamed from 01猉功D龌 [ 91.928300][ T1749] device 00猉功D龌 left promiscuous mode [ 92.396101][ T30] audit: type=1400 audit(1771391914.053:238): avc: denied { search } for pid=1747 comm="syz.3.408" name="/" dev="configfs" ino=14546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 92.419443][ T30] audit: type=1400 audit(1771391914.053:239): avc: denied { setattr } for pid=1747 comm="syz.3.408" name="/" dev="configfs" ino=14546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 92.441845][ T1749] attempt to access beyond end of device [ 92.441845][ T1749] loop0: rw=2049, want=264, limit=256 [ 92.533753][ T1754] loop0: detected capacity change from 0 to 1024 [ 92.688018][ T529] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 92.699267][ T1754] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 92.728034][ T1754] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.785663][ T529] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.795166][ T529] usb 3-1: config 0 descriptor?? [ 92.808240][ T30] audit: type=1400 audit(1771391914.873:240): avc: denied { ioctl } for pid=1753 comm="syz.0.409" path="socket:[21780]" dev="sockfs" ino=21780 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 92.848409][ T1770] 9pnet: Insufficient options for proto=fd [ 92.868071][ T30] audit: type=1400 audit(1771391914.893:241): avc: denied { write } for pid=1753 comm="syz.0.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 93.188910][ T1774] loop0: detected capacity change from 0 to 512 [ 93.240921][ T1778] loop4: detected capacity change from 0 to 512 [ 93.258633][ T1774] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 93.275003][ T1781] 9pnet: Could not find request transport: fd0x0000000000000003 [ 93.282945][ T1774] ext4 filesystem being mounted at /83/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.302080][ T1778] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 93.347617][ T1778] EXT4-fs (loop4): mounted filesystem without journal. Opts: nomblk_io_submit,inode_readahead_blks=0x0000000000000800,discard,,errors=continue. Quota mode: writeback. [ 93.380156][ T1778] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.693773][ T1798] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.420'. [ 94.408002][ T529] usbhid 3-1:0.0: can't add hid device: -71 [ 94.414022][ T529] usbhid: probe of 3-1:0.0 failed with error -71 [ 94.422470][ T529] usb 3-1: USB disconnect, device number 3 [ 94.458021][ T30] audit: type=1400 audit(1771391916.523:242): avc: denied { bind } for pid=1808 comm="syz.1.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 94.485210][ T30] audit: type=1400 audit(1771391916.543:243): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 94.654129][ T1823] netlink: 16 bytes leftover after parsing attributes in process `syz.3.434'. [ 95.664734][ T1836] loop3: detected capacity change from 0 to 128 [ 96.031766][ T1836] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 96.146069][ T1836] ext4 filesystem being mounted at /85/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 96.194381][ T30] audit: type=1400 audit(1771391918.253:244): avc: denied { create } for pid=1835 comm="syz.3.438" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 96.236328][ T30] audit: type=1400 audit(1771391918.253:245): avc: denied { read } for pid=1835 comm="syz.3.438" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 96.289614][ T1847] loop2: detected capacity change from 0 to 256 [ 96.744753][ T1858] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.428'. [ 97.103351][ T1858] attempt to access beyond end of device [ 97.103351][ T1858] loop2: rw=2049, want=264, limit=256 [ 97.308883][ T1870] loop2: detected capacity change from 0 to 512 [ 97.633027][ T1873] loop4: detected capacity change from 0 to 256 [ 97.789209][ T1870] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 97.813974][ T1870] ext4 filesystem being mounted at /82/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.888790][ T1878] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.449'. [ 98.015665][ T1878] attempt to access beyond end of device [ 98.015665][ T1878] loop4: rw=2049, want=544, limit=256 [ 98.026986][ T1878] attempt to access beyond end of device [ 98.026986][ T1878] loop4: rw=2049, want=1024, limit=256 [ 98.038513][ T1878] attempt to access beyond end of device [ 98.038513][ T1878] loop4: rw=2049, want=1096, limit=256 [ 98.185489][ T1888] 9pnet: Insufficient options for proto=fd [ 98.313012][ T1895] loop4: detected capacity change from 0 to 256 [ 98.384045][ T1861] loop0: detected capacity change from 0 to 40427 [ 98.511433][ T1861] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 98.519325][ T1895] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.861708][ T1899] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.458'. [ 99.110622][ T1895] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 99.111319][ T1861] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 99.158626][ T1895] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 99.300599][ T1895] exFAT-fs (loop4): error, failed to bmap (inode : ffff888145529660 iblock : 16, err : -5) [ 99.311013][ T30] audit: type=1400 audit(1771391921.363:246): avc: denied { write } for pid=1894 comm="syz.4.457" name="file0" dev="loop4" ino=1048617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.334657][ T1895] exFAT-fs (loop4): Filesystem has been set read-only [ 99.348240][ T1861] F2FS-fs (loop0): invalid crc value [ 99.427342][ T1910] loop2: detected capacity change from 0 to 256 [ 99.452539][ T30] audit: type=1400 audit(1771391921.363:247): avc: denied { open } for pid=1894 comm="syz.4.457" name="file0" dev="loop4" ino=1048617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.475551][ T30] audit: type=1400 audit(1771391921.483:248): avc: denied { create } for pid=1909 comm="syz.2.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 99.533110][ T1915] 9pnet: Insufficient options for proto=fd [ 99.541116][ T1861] F2FS-fs (loop0): Found nat_bits in checkpoint [ 99.602086][ T30] audit: type=1400 audit(1771391921.573:249): avc: denied { mounton } for pid=1909 comm="syz.2.461" path="/84/file0/bus" dev="loop2" ino=1048618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 99.685860][ T1924] loop4: detected capacity change from 0 to 256 [ 99.783103][ T1861] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 99.814881][ T30] audit: type=1400 audit(1771391921.573:250): avc: denied { bind } for pid=1909 comm="syz.2.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 99.926259][ T1861] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 100.014273][ T30] audit: type=1400 audit(1771391921.613:251): avc: denied { sys_module } for pid=1913 comm="syz.1.462" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 100.035299][ T30] audit: type=1400 audit(1771391922.053:252): avc: denied { bind } for pid=1900 comm="syz.3.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 100.055217][ T30] audit: type=1400 audit(1771391922.053:253): avc: denied { listen } for pid=1900 comm="syz.3.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 100.140705][ T1929] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.466'. [ 100.413303][ T1929] attempt to access beyond end of device [ 100.413303][ T1929] loop4: rw=2049, want=544, limit=256 [ 100.424508][ T1929] attempt to access beyond end of device [ 100.424508][ T1929] loop4: rw=2049, want=744, limit=256 [ 100.437899][ T30] audit: type=1400 audit(1771391922.053:254): avc: denied { accept } for pid=1900 comm="syz.3.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 100.468396][ T284] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 100.476125][ T284] FAT-fs (loop2): Filesystem has been set read-only [ 100.505667][ T284] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 100.599566][ T1933] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 100.609575][ T1933] SELinux: duplicate or incompatible mount options [ 100.810266][ T1940] 9pnet: Insufficient options for proto=fd [ 100.830645][ T1942] loop4: detected capacity change from 0 to 512 [ 100.895908][ T30] audit: type=1400 audit(1771391922.953:255): avc: denied { getopt } for pid=1946 comm="syz.1.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 100.919098][ T1942] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 100.968820][ T1942] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #2: comm syz.4.474: missing EA_INODE flag [ 101.010454][ T1942] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.474: error while reading EA inode 2 err=-117 [ 101.058457][ T1942] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 101.144709][ T1960] loop3: detected capacity change from 0 to 256 [ 101.196156][ T1942] EXT4-fs (loop4): 1 truncate cleaned up [ 101.202348][ T1942] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,grpquota,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,errors=continue,nogrpid,. Quota mode: writeback. [ 101.235561][ T1949] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.242758][ T1949] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.257555][ T1949] device bridge_slave_0 entered promiscuous mode [ 101.294887][ T1949] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.325807][ T1949] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.333432][ T1949] device bridge_slave_1 entered promiscuous mode [ 101.549201][ T1964] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.480'. [ 101.592436][ T1949] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.599570][ T1949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.606876][ T1949] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.613942][ T1949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.659788][ T827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.673077][ T1974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.481'. [ 101.692876][ T827] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.700968][ T827] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.713322][ T1969] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.471'. [ 101.723744][ T827] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.732117][ T827] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.739297][ T827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.746979][ T827] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.788725][ T827] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.795843][ T827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.803587][ T1969] attempt to access beyond end of device [ 101.803587][ T1969] loop3: rw=2049, want=544, limit=256 [ 101.815060][ T1969] attempt to access beyond end of device [ 101.815060][ T1969] loop3: rw=2049, want=1024, limit=256 [ 101.826735][ T1969] attempt to access beyond end of device [ 101.826735][ T1969] loop3: rw=2049, want=1704, limit=256 [ 101.885502][ T1978] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 101.893920][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 101.903598][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.912093][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 101.920756][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.928986][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.970266][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.417514][ T1985] loop3: detected capacity change from 0 to 40427 [ 102.433835][ T1985] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 102.446927][ T1985] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 102.456446][ T1985] F2FS-fs (loop3): invalid crc value [ 102.463406][ T1985] F2FS-fs (loop3): Found nat_bits in checkpoint [ 102.504680][ T1985] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 102.512141][ T1985] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 102.613852][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.624685][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.633892][ T1994] 9pnet: Insufficient options for proto=fd [ 102.640638][ T1949] device veth0_vlan entered promiscuous mode [ 102.721842][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 102.733795][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.749760][ T1949] device veth1_macvtap entered promiscuous mode [ 102.771256][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.782630][ T2006] loop3: detected capacity change from 0 to 256 [ 102.791051][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.820804][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 102.857094][ T827] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.974549][ T827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.990988][ T827] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 102.999977][ T827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.808059][ T2011] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.491'. [ 104.123435][ T2011] attempt to access beyond end of device [ 104.123435][ T2011] loop3: rw=2049, want=264, limit=256 [ 104.371320][ T2025] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 104.381035][ T2025] SELinux: duplicate or incompatible mount options [ 104.653753][ T2028] 9pnet: Insufficient options for proto=fd [ 104.727147][ T2016] loop4: detected capacity change from 0 to 40427 [ 104.748032][ T2016] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 104.776653][ T2036] loop5: detected capacity change from 0 to 256 [ 104.783079][ T2016] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 104.785613][ T2016] F2FS-fs (loop4): invalid crc value [ 104.806348][ T2016] F2FS-fs (loop4): Found nat_bits in checkpoint [ 104.827321][ T2036] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 104.895843][ T2016] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 104.903054][ T2016] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 104.955525][ T2047] loop5: detected capacity change from 0 to 512 [ 105.002039][ T2047] EXT4-fs (loop5): orphan cleanup on readonly fs [ 105.026306][ T2047] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #4: comm syz.5.502: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 105.056184][ T2047] EXT4-fs error (device loop5): ext4_quota_enable:6436: comm syz.5.502: Bad quota inode: 4, type: 1 [ 105.099071][ T2056] loop4: detected capacity change from 0 to 256 [ 105.111233][ T2047] EXT4-fs warning (device loop5): ext4_enable_quotas:6477: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 105.126120][ T2047] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 105.139581][ T2047] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,noblock_validity,journal_dev=0x0000000000000003,journal_dev=0x000000000000000b,barrier=0x0000000000000081,minixdf,inode_readahead_blks=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 105.504103][ T2065] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.504'. [ 105.841205][ T2065] attempt to access beyond end of device [ 105.841205][ T2065] loop4: rw=2049, want=328, limit=256 [ 105.886006][ T2047] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 105.939088][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 105.939105][ T30] audit: type=1400 audit(1771391928.003:259): avc: denied { setattr } for pid=2067 comm="syz.0.510" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.066358][ T2075] loop0: detected capacity change from 0 to 512 [ 106.369224][ T2075] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 106.411933][ T2075] System zones: 1-12 [ 106.424307][ T2075] EXT4-fs error (device loop0): ext4_iget_extra_inode:4597: inode #15: comm syz.0.513: corrupted in-inode xattr [ 106.459132][ T30] audit: type=1400 audit(1771391928.523:260): avc: denied { mount } for pid=2084 comm="syz.1.516" name="/" dev="ramfs" ino=22351 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 106.486491][ T2075] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.513: couldn't read orphan inode 15 (err -117) [ 106.514134][ T2075] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,minixdf,noblock_validity,lazytime,noauto_da_alloc,block_validity,init_itable=0x0000000000000009,debug,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 107.551023][ T2077] loop5: detected capacity change from 0 to 40427 [ 107.568065][ T2102] loop0: detected capacity change from 0 to 2048 [ 107.580758][ T2077] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 107.588631][ T2077] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 107.597680][ T2077] F2FS-fs (loop5): invalid crc value [ 107.604438][ T2100] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 107.614151][ T2100] SELinux: duplicate or incompatible mount options [ 107.623031][ T2077] F2FS-fs (loop5): Found nat_bits in checkpoint [ 107.687966][ T2077] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 107.698908][ T2077] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 107.726946][ T2102] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.610208][ T2126] loop3: detected capacity change from 0 to 512 [ 108.717970][ T2126] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 108.735681][ T2142] loop0: detected capacity change from 0 to 512 [ 108.757202][ T2126] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.768504][ T2142] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 108.787172][ T2142] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.533: missing EA_INODE flag [ 108.798973][ T2142] EXT4-fs (loop0): Remounting filesystem read-only [ 108.805521][ T2142] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.533: error while reading EA inode 2 err=-117 [ 108.818558][ T2142] EXT4-fs (loop0): Remounting filesystem read-only [ 108.825337][ T2142] EXT4-fs (loop0): 1 truncate cleaned up [ 108.833439][ T2142] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,nogrpid,. Quota mode: none. [ 108.884548][ T2145] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.532'. [ 109.212816][ T30] audit: type=1400 audit(1771391931.263:261): avc: denied { write } for pid=2153 comm="syz.5.536" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 109.243137][ T2158] loop5: detected capacity change from 0 to 512 [ 109.319672][ T2158] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 109.334491][ T2158] ext4 filesystem being mounted at /9/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.345211][ T2160] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 109.354889][ T2160] SELinux: duplicate or incompatible mount options [ 109.819380][ T2181] loop0: detected capacity change from 0 to 256 [ 109.941355][ T2172] loop4: detected capacity change from 0 to 40427 [ 109.965731][ T2172] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 109.987399][ T2172] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 109.997248][ T2172] F2FS-fs (loop4): invalid crc value [ 110.011190][ T2172] F2FS-fs (loop4): Found nat_bits in checkpoint [ 110.512533][ T2186] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.547'. [ 110.608256][ T2186] attempt to access beyond end of device [ 110.608256][ T2186] loop0: rw=2049, want=328, limit=256 [ 110.962132][ T2172] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 110.972011][ T2172] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 111.452764][ T2207] loop3: detected capacity change from 0 to 512 [ 112.025633][ T2219] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 112.035292][ T2219] SELinux: duplicate or incompatible mount options [ 112.611312][ T2233] device ip6erspan0 entered promiscuous mode [ 113.192806][ T30] audit: type=1400 audit(1771391935.253:262): avc: denied { read } for pid=2246 comm="syz.0.569" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 113.445343][ T30] audit: type=1400 audit(1771391935.253:263): avc: denied { open } for pid=2246 comm="syz.0.569" path="/dev/rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 113.497930][ T30] audit: type=1400 audit(1771391935.253:264): avc: denied { ioctl } for pid=2246 comm="syz.0.569" path="/dev/rtc0" dev="devtmpfs" ino=259 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 114.014952][ T2262] fuse: Bad value for 'fd' [ 114.100861][ T2263] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 114.110773][ T2263] SELinux: duplicate or incompatible mount options [ 114.256879][ T30] audit: type=1400 audit(1771391936.313:265): avc: denied { ioctl } for pid=2281 comm="syz.3.582" path="socket:[23669]" dev="sockfs" ino=23669 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 114.342141][ T2284] device ip6erspan0 entered promiscuous mode [ 114.442714][ T2288] loop3: detected capacity change from 0 to 512 [ 114.506449][ T2296] fuse: Bad value for 'fd' [ 114.518580][ T2288] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 114.545103][ T2288] ext4 filesystem being mounted at /107/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.066090][ T2323] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 116.121251][ T2322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge1: link becomes ready [ 116.281680][ T2333] netlink: 156 bytes leftover after parsing attributes in process `syz.5.597'. [ 116.495826][ T2338] loop5: detected capacity change from 0 to 4096 [ 117.674541][ T2353] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.682634][ T2353] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.692501][ T2338] EXT4-fs (loop5): mounted filesystem without journal. Opts: stripe=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 117.707003][ T2351] loop0: detected capacity change from 0 to 512 [ 117.716491][ T2353] device bridge_slave_0 entered promiscuous mode [ 117.743734][ T2353] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.776326][ T2351] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 117.796180][ T2353] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.810003][ T2351] ext4 filesystem being mounted at /113/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.821254][ T2353] device bridge_slave_1 entered promiscuous mode [ 117.909384][ T2353] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.916609][ T2353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.923932][ T2353] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.930989][ T2353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.957373][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.965593][ T343] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.974322][ T343] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.993765][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.003272][ T343] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.010359][ T343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.018764][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.027047][ T343] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.034142][ T343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.052865][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.061232][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.077730][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 118.092841][ T2353] device veth0_vlan entered promiscuous mode [ 118.099954][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.116346][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 118.125110][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 118.133389][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 118.142006][ T2353] device veth1_macvtap entered promiscuous mode [ 118.155615][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 118.174276][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 118.189256][ T338] device bridge_slave_1 left promiscuous mode [ 118.213296][ T338] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.223317][ T338] device bridge_slave_0 left promiscuous mode [ 118.229672][ T338] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.238727][ T338] device veth1_macvtap left promiscuous mode [ 118.244956][ T338] device veth0_vlan left promiscuous mode [ 118.416997][ T2372] loop3: detected capacity change from 0 to 512 [ 118.425960][ T2373] loop5: detected capacity change from 0 to 128 [ 118.499029][ T2372] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 118.526646][ T2373] EXT4-fs (loop5): Test dummy encryption mode enabled [ 118.537507][ T2382] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 118.545719][ T2372] ext4 filesystem being mounted at /109/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.882337][ T2373] EXT4-fs (loop5): Test dummy encryption mode enabled [ 118.893714][ T2373] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 118.901711][ T2373] EXT4-fs (loop5): Unrecognized mount option "hash" or missing value [ 119.354337][ T2397] loop4: detected capacity change from 0 to 16 [ 119.417904][ T6] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 119.453720][ T2397] erofs: (device loop4): mounted with root inode @ nid 36. [ 119.529664][ T285] VFS: Lookup of ')' in erofs loop4 would have caused loop [ 119.537065][ T285] VFS: Lookup of ')' in erofs loop4 would have caused loop [ 119.604420][ T2402] loop0: detected capacity change from 0 to 4096 [ 119.639842][ T2402] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 119.656187][ T2402] EXT4-fs (loop0): Test dummy encryption mode enabled [ 119.663365][ T2402] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 119.670798][ T2402] EXT4-fs (loop0): Mount option "dax=never" incompatible with ext2 [ 119.679011][ T6] usb 6-1: Using ep0 maxpacket: 16 [ 119.730801][ T2408] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 119.740526][ T2408] SELinux: duplicate or incompatible mount options [ 119.798247][ T6] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 119.872306][ T2410] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.879456][ T2410] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.886836][ T2410] device bridge_slave_0 entered promiscuous mode [ 119.894001][ T2410] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.901130][ T2410] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.981550][ T2410] device bridge_slave_1 entered promiscuous mode [ 120.135079][ T2410] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.142491][ T2410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.149845][ T2410] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.156887][ T2410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.184619][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 120.193393][ T559] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.201276][ T559] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.217396][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.227135][ T559] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.234238][ T559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.242524][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.250929][ T559] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.258055][ T559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.277263][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 120.285790][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 120.303152][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 120.317230][ T2410] device veth0_vlan entered promiscuous mode [ 120.324380][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 120.340630][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 120.350072][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 120.357581][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 120.366326][ T338] device bridge_slave_1 left promiscuous mode [ 120.373246][ T338] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.381357][ T338] device bridge_slave_0 left promiscuous mode [ 120.411144][ T338] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.426452][ T338] device veth1_macvtap left promiscuous mode [ 120.432672][ T338] device veth0_vlan left promiscuous mode [ 120.603197][ T2410] device veth1_macvtap entered promiscuous mode [ 120.653048][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.666881][ T2427] capability: warning: `syz.3.624' uses deprecated v2 capabilities in a way that may be insecure [ 120.679345][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.688061][ T6] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.697135][ T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.718814][ T6] usb 6-1: Product: syz [ 120.723122][ T6] usb 6-1: Manufacturer: syz [ 120.727821][ T6] usb 6-1: SerialNumber: syz [ 120.752934][ T2433] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 122.357976][ T6] usb 6-1: can't set config #1, error -71 [ 122.369202][ T6] usb 6-1: USB disconnect, device number 2 [ 122.382003][ T2445] loop5: detected capacity change from 0 to 512 [ 122.513320][ T2456] loop3: detected capacity change from 0 to 256 [ 122.577359][ T2445] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 122.607952][ T2445] ext4 filesystem being mounted at /22/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.619989][ T2459] loop1: detected capacity change from 0 to 4096 [ 122.715338][ T2459] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 122.748084][ T2459] EXT4-fs (loop1): Test dummy encryption mode enabled [ 122.758703][ T2459] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 122.821248][ T2462] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.631'. [ 122.948445][ T2462] attempt to access beyond end of device [ 122.948445][ T2462] loop3: rw=2049, want=544, limit=256 [ 122.959867][ T2462] attempt to access beyond end of device [ 122.959867][ T2462] loop3: rw=2049, want=1024, limit=256 [ 122.971092][ T2462] attempt to access beyond end of device [ 122.971092][ T2462] loop3: rw=2049, want=1160, limit=256 [ 122.995384][ T2459] EXT4-fs (loop1): Mount option "dax=never" incompatible with ext2 [ 123.158437][ T30] audit: type=1400 audit(1771391945.223:266): avc: denied { ioctl } for pid=2468 comm="syz.3.635" path="socket:[24217]" dev="sockfs" ino=24217 ioctlcmd=0xaf21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 123.523405][ T2476] loop3: detected capacity change from 0 to 256 [ 123.557928][ T2476] exfat: Deprecated parameter 'utf8' [ 123.580869][ T2476] exfat: Unknown parameter 'keep_last_dots' [ 125.275014][ T2485] device syzkaller0 entered promiscuous mode [ 125.637101][ T2488] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.653937][ T2488] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.120580][ T2507] loop0: detected capacity change from 0 to 256 [ 126.278816][ T2513] loop3: detected capacity change from 0 to 4096 [ 126.359773][ T2513] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 126.377420][ T2513] EXT4-fs (loop3): Test dummy encryption mode enabled [ 126.397952][ T985] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 126.418295][ T2513] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 126.425677][ T2513] EXT4-fs (loop3): Mount option "dax=never" incompatible with ext2 [ 126.461811][ T2515] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.644'. [ 126.595447][ T2515] attempt to access beyond end of device [ 126.595447][ T2515] loop0: rw=2049, want=544, limit=256 [ 126.606932][ T2515] attempt to access beyond end of device [ 126.606932][ T2515] loop0: rw=2049, want=1024, limit=256 [ 126.618208][ T2515] attempt to access beyond end of device [ 126.618208][ T2515] loop0: rw=2049, want=1288, limit=256 [ 126.677205][ T2508] loop5: detected capacity change from 0 to 40427 [ 126.711775][ T2508] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 126.730166][ T2508] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 126.753976][ T2508] F2FS-fs (loop5): invalid crc value [ 126.862584][ T2508] F2FS-fs (loop5): Found nat_bits in checkpoint [ 126.900688][ T2508] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 126.907752][ T2508] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 129.422605][ T985] usb 2-1: Using ep0 maxpacket: 8 [ 129.896393][ T2538] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.904416][ T2538] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.129742][ T2548] loop3: detected capacity change from 0 to 512 [ 130.200267][ T2551] loop0: detected capacity change from 0 to 256 [ 130.351353][ T2548] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 130.434942][ T2558] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.660'. [ 130.561961][ T2558] attempt to access beyond end of device [ 130.561961][ T2558] loop0: rw=2049, want=544, limit=256 [ 130.573386][ T2558] attempt to access beyond end of device [ 130.573386][ T2558] loop0: rw=2049, want=1024, limit=256 [ 130.584719][ T2558] attempt to access beyond end of device [ 130.584719][ T2558] loop0: rw=2049, want=1288, limit=256 [ 130.645201][ T2548] ext4 filesystem being mounted at /126/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.708394][ T985] usb 2-1: unable to get BOS descriptor or descriptor too short [ 130.753804][ T2562] kvm: pic: single mode not supported [ 130.754722][ T2562] kvm: pic: level sensitive irq not supported [ 130.777972][ T985] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 130.808278][ T985] usb 2-1: can't read configurations, error -71 [ 131.442225][ T2582] loop6: detected capacity change from 0 to 40427 [ 131.550009][ T2582] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 131.582905][ T2582] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 131.603238][ T2582] F2FS-fs (loop6): invalid crc value [ 131.623207][ T2582] F2FS-fs (loop6): Found nat_bits in checkpoint [ 131.671937][ T2582] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 131.679256][ T2582] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 132.583040][ T2607] loop5: detected capacity change from 0 to 256 [ 132.594290][ T30] audit: type=1400 audit(1771391954.653:267): avc: denied { setopt } for pid=2608 comm="syz.6.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.709725][ T30] audit: type=1400 audit(1771391954.773:268): avc: denied { read } for pid=2614 comm="syz.0.676" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 132.763202][ T2617] loop0: detected capacity change from 0 to 512 [ 132.781857][ T2617] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 132.796436][ T2617] ext4 filesystem being mounted at /129/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.878046][ T2623] netlink: 45349 bytes leftover after parsing attributes in process `syz.5.672'. [ 133.027426][ T2623] attempt to access beyond end of device [ 133.027426][ T2623] loop5: rw=2049, want=544, limit=256 [ 133.038588][ T2623] attempt to access beyond end of device [ 133.038588][ T2623] loop5: rw=2049, want=648, limit=256 [ 133.385315][ T30] audit: type=1400 audit(1771391955.433:269): avc: denied { ioctl } for pid=2633 comm="syz.3.680" path="socket:[24724]" dev="sockfs" ino=24724 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 133.447879][ T955] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 133.857097][ T2648] netlink: 48 bytes leftover after parsing attributes in process `syz.6.685'. [ 133.948540][ T2652] kernel profiling enabled (shift: 5) [ 133.968719][ T2654] loop0: detected capacity change from 0 to 256 [ 133.992986][ T2652] binder: 2651:2652 ioctl c0306201 0 returned -14 [ 134.027966][ T955] usb 6-1: config 0 has no interfaces? [ 134.033592][ T955] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 134.050281][ T955] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.121415][ T955] usb 6-1: config 0 descriptor?? [ 134.130940][ T30] audit: type=1400 audit(1771391956.193:270): avc: denied { name_bind } for pid=2659 comm="syz.6.691" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 134.227279][ T2666] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.689'. [ 134.370060][ T2666] attempt to access beyond end of device [ 134.370060][ T2666] loop0: rw=2049, want=544, limit=256 [ 134.381513][ T2666] attempt to access beyond end of device [ 134.381513][ T2666] loop0: rw=2049, want=1024, limit=256 [ 134.392743][ T2666] attempt to access beyond end of device [ 134.392743][ T2666] loop0: rw=2049, want=1064, limit=256 [ 134.405602][ T2631] UDC core: couldn't find an available UDC or it's busy: -16 [ 134.466359][ T2631] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 134.475039][ T985] usb 6-1: USB disconnect, device number 3 [ 134.862318][ T2695] device ip6erspan0 entered promiscuous mode [ 134.967529][ T2699] loop3: detected capacity change from 0 to 256 [ 135.066188][ T2701] loop3: detected capacity change from 0 to 256 [ 135.353108][ T2709] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.704'. [ 135.639318][ T2709] attempt to access beyond end of device [ 135.639318][ T2709] loop3: rw=2049, want=264, limit=256 [ 136.046720][ T2731] loop5: detected capacity change from 0 to 256 [ 136.464749][ T2743] netlink: 45349 bytes leftover after parsing attributes in process `syz.5.717'. [ 136.583766][ T2743] attempt to access beyond end of device [ 136.583766][ T2743] loop5: rw=2049, want=544, limit=256 [ 136.595123][ T2743] attempt to access beyond end of device [ 136.595123][ T2743] loop5: rw=2049, want=1024, limit=256 [ 136.606557][ T2743] attempt to access beyond end of device [ 136.606557][ T2743] loop5: rw=2049, want=1448, limit=256 [ 137.019593][ T30] audit: type=1400 audit(1771391959.083:271): avc: denied { read } for pid=2754 comm="syz.0.723" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 137.125981][ T30] audit: type=1400 audit(1771391959.083:272): avc: denied { open } for pid=2754 comm="syz.0.723" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 137.257182][ T30] audit: type=1400 audit(1771391959.083:273): avc: denied { ioctl } for pid=2754 comm="syz.0.723" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 137.362137][ T30] audit: type=1400 audit(1771391959.393:274): avc: denied { block_suspend } for pid=2760 comm="syz.1.727" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 138.170484][ T2772] loop5: detected capacity change from 0 to 256 [ 139.328100][ T2781] netlink: 45349 bytes leftover after parsing attributes in process `syz.5.731'. [ 139.570459][ T2780] attempt to access beyond end of device [ 139.570459][ T2780] loop5: rw=2049, want=544, limit=256 [ 139.581653][ T2780] attempt to access beyond end of device [ 139.581653][ T2780] loop5: rw=2049, want=672, limit=256 [ 140.027683][ T30] audit: type=1400 audit(1771391962.083:275): avc: denied { create } for pid=2789 comm="syz.1.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 140.061490][ T2792] loop6: detected capacity change from 0 to 512 [ 140.100995][ T30] audit: type=1400 audit(1771391962.163:276): avc: denied { create } for pid=2797 comm="syz.5.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 140.110881][ T2792] EXT4-fs (loop6): Ignoring removed orlov option [ 140.204210][ T2792] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=200dc018, mo2=0002] [ 140.213471][ T2792] System zones: 0-2, 18-18, 34-35 [ 140.220437][ T2792] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,noinit_itable,orlov,usrquota,data_err=ignore,debug,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 140.238090][ T2792] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.502123][ T30] audit: type=1400 audit(1771391962.463:277): avc: denied { create } for pid=2791 comm="syz.6.737" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 140.681178][ T2815] device ip6erspan0 entered promiscuous mode [ 140.891084][ T2819] loop3: detected capacity change from 0 to 256 [ 141.346219][ T2824] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.746'. [ 141.473457][ T2824] attempt to access beyond end of device [ 141.473457][ T2824] loop3: rw=2049, want=544, limit=256 [ 141.484812][ T2824] attempt to access beyond end of device [ 141.484812][ T2824] loop3: rw=2049, want=968, limit=256 [ 141.599988][ T2834] netlink: 8 bytes leftover after parsing attributes in process `syz.5.750'. [ 142.575983][ T30] audit: type=1400 audit(1771391964.633:278): avc: denied { setopt } for pid=2851 comm="syz.0.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 142.602191][ T2852] ================================================================== [ 142.610317][ T2852] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x606/0x6c0 [ 142.619557][ T2852] Read of size 1 at addr ffff8881172853f8 by task syz.0.759/2852 [ 142.627288][ T2852] [ 142.629623][ T2852] CPU: 1 PID: 2852 Comm: syz.0.759 Not tainted syzkaller #0 [ 142.636919][ T2852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 142.647012][ T2852] Call Trace: [ 142.650303][ T2852] [ 142.653251][ T2852] __dump_stack+0x21/0x30 [ 142.657616][ T2852] dump_stack_lvl+0x110/0x170 [ 142.662320][ T2852] ? show_regs_print_info+0x20/0x20 [ 142.667554][ T2852] ? load_image+0x3e0/0x3e0 [ 142.672073][ T2852] ? unwind_get_return_address+0x4d/0x90 [ 142.677724][ T2852] print_address_description+0x7f/0x2c0 [ 142.683288][ T2852] ? xfrm_policy_inexact_list_reinsert+0x606/0x6c0 [ 142.689807][ T2852] kasan_report+0xf1/0x140 [ 142.694241][ T2852] ? xfrm_policy_inexact_list_reinsert+0x606/0x6c0 [ 142.700762][ T2852] __asan_report_load1_noabort+0x14/0x20 [ 142.706416][ T2852] xfrm_policy_inexact_list_reinsert+0x606/0x6c0 [ 142.712792][ T2852] xfrm_policy_inexact_insert_node+0x938/0xb50 [ 142.718960][ T2852] ? xfrm_netlink_rcv+0x72/0x90 [ 142.723828][ T2852] ? netlink_unicast+0x876/0xa40 [ 142.728782][ T2852] ? ____sys_sendmsg+0x5b7/0x8f0 [ 142.733742][ T2852] ? x64_sys_call+0x4b/0x9a0 [ 142.738346][ T2852] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 142.744446][ T2852] xfrm_policy_inexact_alloc_chain+0x53d/0xb30 [ 142.750633][ T2852] xfrm_policy_inexact_insert+0x70/0x1130 [ 142.756371][ T2852] ? __kasan_check_write+0x14/0x20 [ 142.761500][ T2852] ? _raw_spin_lock_bh+0x94/0xf0 [ 142.766463][ T2852] ? policy_hash_bysel+0x13f/0x6f0 [ 142.771595][ T2852] xfrm_policy_insert+0x126/0x9a0 [ 142.776634][ T2852] ? xfrm_policy_construct+0x54f/0x1f00 [ 142.782199][ T2852] xfrm_add_policy+0x4ed/0x850 [ 142.787005][ T2852] ? xfrm_dump_sa_done+0xc0/0xc0 [ 142.791976][ T2852] xfrm_user_rcv_msg+0x4dc/0x7b0 [ 142.796935][ T2852] ? xfrm_netlink_rcv+0x90/0x90 [ 142.801824][ T2852] ? avc_has_perm_noaudit+0x490/0x490 [ 142.807228][ T2852] ? x64_sys_call+0x4b/0x9a0 [ 142.811834][ T2852] ? selinux_nlmsg_lookup+0x237/0x4c0 [ 142.817235][ T2852] netlink_rcv_skb+0x1f5/0x440 [ 142.822024][ T2852] ? xfrm_netlink_rcv+0x90/0x90 [ 142.826892][ T2852] ? netlink_ack+0xb50/0xb50 [ 142.831502][ T2852] ? wait_for_completion_killable_timeout+0x10/0x10 [ 142.838121][ T2852] ? __netlink_lookup+0x387/0x3b0 [ 142.843170][ T2852] xfrm_netlink_rcv+0x72/0x90 [ 142.847860][ T2852] netlink_unicast+0x876/0xa40 [ 142.852640][ T2852] netlink_sendmsg+0x879/0xb80 [ 142.857417][ T2852] ? netlink_getsockopt+0x530/0x530 [ 142.862636][ T2852] ? do_futex+0xde8/0x2800 [ 142.867072][ T2852] ? security_socket_sendmsg+0x82/0xa0 [ 142.872547][ T2852] ? netlink_getsockopt+0x530/0x530 [ 142.877762][ T2852] ____sys_sendmsg+0x5b7/0x8f0 [ 142.882547][ T2852] ? __sys_sendmsg_sock+0x40/0x40 [ 142.887587][ T2852] ? import_iovec+0x7c/0xb0 [ 142.892119][ T2852] ___sys_sendmsg+0x236/0x2e0 [ 142.896813][ T2852] ? __sys_sendmsg+0x280/0x280 [ 142.901611][ T2852] ? __fdget+0x1a1/0x230 [ 142.905878][ T2852] __x64_sys_sendmsg+0x206/0x2f0 [ 142.910843][ T2852] ? ___sys_sendmsg+0x2e0/0x2e0 [ 142.915715][ T2852] ? __kasan_check_write+0x14/0x20 [ 142.920848][ T2852] ? switch_fpu_return+0x15d/0x2c0 [ 142.925998][ T2852] x64_sys_call+0x4b/0x9a0 [ 142.930446][ T2852] do_syscall_64+0x4c/0xa0 [ 142.934892][ T2852] ? clear_bhb_loop+0x50/0xa0 [ 142.939580][ T2852] ? clear_bhb_loop+0x50/0xa0 [ 142.944271][ T2852] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 142.950194][ T2852] RIP: 0033:0x7f2a979ae629 [ 142.954659][ T2852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.974300][ T2852] RSP: 002b:00007f2a96409028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.982738][ T2852] RAX: ffffffffffffffda RBX: 00007f2a97c27fa0 RCX: 00007f2a979ae629 [ 142.990722][ T2852] RDX: 0000000000004000 RSI: 0000200000000440 RDI: 0000000000000004 [ 142.998709][ T2852] RBP: 00007f2a97a44b39 R08: 0000000000000000 R09: 0000000000000000 [ 143.006691][ T2852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.014676][ T2852] R13: 00007f2a97c28038 R14: 00007f2a97c27fa0 R15: 00007ffd9e56bf08 [ 143.022678][ T2852] [ 143.025717][ T2852] [ 143.028045][ T2852] Allocated by task 2852: [ 143.032377][ T2852] __kasan_kmalloc+0xda/0x110 [ 143.037075][ T2852] __kmalloc+0x13d/0x2c0 [ 143.041328][ T2852] sk_prot_alloc+0xed/0x320 [ 143.045859][ T2852] sk_alloc+0x38/0x430 [ 143.049934][ T2852] pfkey_create+0x12a/0x660 [ 143.054455][ T2852] __sock_create+0x38d/0x7a0 [ 143.059066][ T2852] __sys_socket+0xec/0x190 [ 143.063502][ T2852] __x64_sys_socket+0x7a/0x90 [ 143.068233][ T2852] x64_sys_call+0x8c5/0x9a0 [ 143.072840][ T2852] do_syscall_64+0x4c/0xa0 [ 143.077274][ T2852] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 143.083183][ T2852] [ 143.085517][ T2852] The buggy address belongs to the object at ffff888117285000 [ 143.085517][ T2852] which belongs to the cache kmalloc-1k of size 1024 [ 143.099586][ T2852] The buggy address is located 1016 bytes inside of [ 143.099586][ T2852] 1024-byte region [ffff888117285000, ffff888117285400) [ 143.113150][ T2852] The buggy address belongs to the page: [ 143.118794][ T2852] page:ffffea00045ca000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x117280 [ 143.129081][ T2852] head:ffffea00045ca000 order:3 compound_mapcount:0 compound_pincount:0 [ 143.137429][ T2852] flags: 0x4000000000010200(slab|head|zone=1) [ 143.143559][ T2852] raw: 4000000000010200 ffffea00043cbe00 0000000600000006 ffff888100043080 [ 143.152171][ T2852] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 143.160766][ T2852] page dumped because: kasan: bad access detected [ 143.167187][ T2852] page_owner tracks the page as allocated [ 143.172911][ T2852] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 282, ts 96332906789, free_ts 96328956147 [ 143.193327][ T2852] post_alloc_hook+0x192/0x1b0 [ 143.198131][ T2852] prep_new_page+0x1c/0x110 [ 143.202664][ T2852] get_page_from_freelist+0x2d3a/0x2dc0 [ 143.208318][ T2852] __alloc_pages+0x1a2/0x460 [ 143.212942][ T2852] new_slab+0xa1/0x4d0 [ 143.217079][ T2852] ___slab_alloc+0x381/0x810 [ 143.221684][ T2852] __slab_alloc+0x49/0x90 [ 143.226113][ T2852] __kmalloc+0x16a/0x2c0 [ 143.230375][ T2852] kvmalloc_node+0x211/0x320 [ 143.234973][ T2852] xt_alloc_table_info+0x3b/0xa0 [ 143.239929][ T2852] do_ip6t_set_ctl+0x867/0xd80 [ 143.244717][ T2852] nf_setsockopt+0x272/0x2a0 [ 143.249339][ T2852] ipv6_setsockopt+0x283b/0x3600 [ 143.254298][ T2852] tcp_setsockopt+0x22b/0x1eb0 [ 143.259082][ T2852] sock_common_setsockopt+0xa0/0xb0 [ 143.264304][ T2852] __sys_setsockopt+0x2e9/0x470 [ 143.269195][ T2852] page last free stack trace: [ 143.273872][ T2852] free_unref_page_prepare+0x542/0x550 [ 143.279357][ T2852] free_unref_page+0xae/0x540 [ 143.284054][ T2852] __free_pages+0x6c/0x100 [ 143.288488][ T2852] __free_slab+0xe8/0x1e0 [ 143.292834][ T2852] __unfreeze_partials+0x160/0x190 [ 143.298000][ T2852] put_cpu_partial+0xc6/0x120 [ 143.302700][ T2852] __slab_free+0x1d4/0x290 [ 143.307163][ T2852] ___cache_free+0x104/0x120 [ 143.311785][ T2852] qlink_free+0x4d/0x90 [ 143.315964][ T2852] qlist_free_all+0x5f/0xb0 [ 143.320483][ T2852] kasan_quarantine_reduce+0x14a/0x170 [ 143.325962][ T2852] __kasan_slab_alloc+0x2f/0xf0 [ 143.330850][ T2852] slab_post_alloc_hook+0x4f/0x2b0 [ 143.335989][ T2852] kmem_cache_alloc+0xf7/0x260 [ 143.340775][ T2852] getname_flags+0xb9/0x500 [ 143.345294][ T2852] user_path_at_empty+0x30/0x1c0 [ 143.350247][ T2852] [ 143.352595][ T2852] Memory state around the buggy address: [ 143.358241][ T2852] ffff888117285280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 143.366308][ T2852] ffff888117285300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 143.374388][ T2852] >ffff888117285380: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 143.382479][ T2852] ^ [ 143.390467][ T2852] ffff888117285400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 143.398545][ T2852] ffff888117285480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 143.406617][ T2852] ================================================================== [ 143.414693][ T2852] Disabling lock debugging due to kernel taint