last executing test programs: 6m17.816411758s ago: executing program 1 (id=82): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB], 0x48) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f0000000000)=0x808b, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, 0x0, &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x2000, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x5}, 0x48) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 6m16.757526034s ago: executing program 1 (id=83): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000001c0)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x6d276b17) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080)={0x0, r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast1, @empty}}}}) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734000f"], 0xdc}}, 0x0) 6m14.914527613s ago: executing program 1 (id=96): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0xa5, 0x55a8, &(0x7f00000014c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, &(0x7f0000000900), 0x5005) r4 = socket$nl_audit(0x10, 0x3, 0x9) fcntl$notify(r4, 0x402, 0x80000001) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8800, 0x8) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(r5, &(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r6, &(0x7f0000000040)='./file1\x00', 0x2) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 6m8.299754448s ago: executing program 1 (id=94): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB], 0x48) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f0000000000)=0x808b, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, 0x0, &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x2000, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x5}, 0x48) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 6m6.847400895s ago: executing program 1 (id=106): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB], 0x48) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f0000000000)=0x808b, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, 0x0, &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x2000, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x5}, 0x48) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 6m4.44102125s ago: executing program 1 (id=98): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = epoll_create1(0x80000) r1 = epoll_create(0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) chown(0x0, 0xffffffffffffffff, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x2080009) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) 5m50.376599506s ago: executing program 32 (id=98): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = epoll_create1(0x80000) r1 = epoll_create(0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) chown(0x0, 0xffffffffffffffff, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x2080009) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) 4m58.499685031s ago: executing program 0 (id=204): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007", @ANYBLOB, @ANYRES32=0x0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@newtaction={0xb4, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xa0, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x446, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18c14, &(0x7f0000000340)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d69736f383835392d392c73686f72746e616d653d77696e6e742c636f6465706167653d3836312c757466383d302c756e695f786c6174653d302c726f6469722c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c757466383d312c756e695f786c6174653d312c726f6469722c757466383d302c00531b17042f7ca50e22895c2b5d4e569f5eaf155190d8f66862a6e25caf6e3347919a6ebd4864113ab7083ee0c1019f"], 0x81, 0x2ab, &(0x7f0000000840)="$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") r6 = open(&(0x7f0000000080)='./bus\x00', 0x400040042, 0x129) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r6, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0xe, 0x8, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095ce6e833985248ca3e86c421084d3fa2badd9fa9783f07c5f05ab2730390b0af0df4db5f2efe8962a7a93dd592843d2dbff514204000000000000007125a04d1fcc0eeda2a0672bdd"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000240)=ANY=[@ANYBLOB='1\r1'], 0x31) 4m55.847514975s ago: executing program 0 (id=210): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x3000, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) socket(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) r4 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x2000c058) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r7 = io_uring_setup(0x1e94, &(0x7f0000002540)) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000100)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x1}, 0x20) 4m49.829268892s ago: executing program 0 (id=225): ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000002fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}, 0x2}, 0x1c) unshare(0x6000100) getpid() vmsplice(0xffffffffffffffff, &(0x7f0000000700), 0x100000000000005e, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r4}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r5}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r6 = fcntl$dupfd(r0, 0x406, r0) write$FUSE_DIRENTPLUS(r6, &(0x7f0000002c40)={0x10}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x40001}, 0x40000) 4m47.794989056s ago: executing program 0 (id=229): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x2c}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x204, r11, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x1e0, 0x8, 0x0, 0x1, [{0xbc, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1, @mcast1, 0x2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x10c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0xe4, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r12}]}, 0x204}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r13 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r13, &(0x7f00000025c0), 0x0) 4m45.988718742s ago: executing program 0 (id=233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB], 0x48) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f0000000000)=0x808b, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x2000, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x5}, 0x48) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4m44.303098298s ago: executing program 0 (id=235): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x3000, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) socket(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) r4 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x2000c058) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r7 = io_uring_setup(0x1e94, &(0x7f0000002540)) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000100)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x1}, 0x20) 4m27.782364114s ago: executing program 33 (id=235): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x3000, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) socket(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) r4 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x2000c058) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r7 = io_uring_setup(0x1e94, &(0x7f0000002540)) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000100)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x1}, 0x20) 3.889270525s ago: executing program 4 (id=752): r0 = io_uring_setup(0x3efa, &(0x7f0000000000)={0x0, 0x0, 0x1840, 0x2}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000280)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x3}], 0x1) 3.849916688s ago: executing program 4 (id=754): io_setup(0x7, &(0x7f0000000080)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)={0x77359400}) 3.532510654s ago: executing program 6 (id=755): syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100108e8ff306b1d010140000102030109025f0003010300a48d4e86d20a2acf00000a24010f00010201020904010101010102000009"], 0x0) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d010140010102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c2402000000030000000000092406000601000000092403000000000500092406050001"], 0x0) 3.531985314s ago: executing program 4 (id=756): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = epoll_create1(0x80000) r1 = epoll_create(0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) chown(0x0, 0xffffffffffffffff, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x2080009) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) 2.790186684s ago: executing program 5 (id=762): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) 2.722879779s ago: executing program 5 (id=766): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b0001000000000000000000ac1414aa000000000000000000000000fc01000000000000000000000000000000000000000000000000008001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000c0008"], 0xd8}}, 0x8814) 2.71302483s ago: executing program 5 (id=767): ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000002fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}, 0x2}, 0x1c) unshare(0x6000100) pipe(&(0x7f0000000080)={0xffffffffffffffff}) getpid() vmsplice(r1, &(0x7f0000000700), 0x100000000000005e, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r4}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r5 = fcntl$dupfd(r0, 0x406, r0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000002c40)={0x10}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x40001}, 0x40000) 2.556472673s ago: executing program 4 (id=771): syz_usb_connect(0x0, 0x43, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e23662030164200135b0102030109023100010000000009040000000202ff000806000000000000052406"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.753991488s ago: executing program 6 (id=772): r0 = socket$inet6(0xa, 0x2, 0x0) timerfd_create(0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r7}, 0x18) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x2008000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bc, &(0x7f0000000440)="$eJzs3EFrE08Yx/Hn37RNmtImfxBBQX3Qi16WNr4ADdKCGFBqU9SDsLUbDVmTshsiEbG5iFdfR/HoTVDfQC/ixbu3IgheehBXupttk5rWbU2a2H4/UGa2M7/OLN2WZwud9TuvHpcKrlEwqzKUUBkSaciGSHqz1/Rfsx3y+6PSqiGXxr9/PnP77r0b2VxuZk51Njt/OaOqk+fePXn2+vyH6vjCm8m3cVlL31//lvmydnLt1PrP+UdFV4uulitVNXWxUqmai7alS0W3ZKjesi3TtbRYdi2nbbxgV5aX62qWlyaSy47lumqW61qy6lqtaNWpq/nQLJbVMAydSMrxNhxhTn51bs7M7jrsxbq6I3RfvP1yrNMcx8k2Og/mV3u1LwAAMLj2rv+DWn/3+j+3ELRdrv9FqP97pNF29Yf6H0eC42TNZPPntx31PwAAAAAAAAAAAAAAAAAAAAAA/4INz0t5npcK2/AjLiIJEQmv+71P9MYBv/9X+rRddFnLP+4lROyXtXwtH7TBeLYgRbHFkilJyQ//eWgK+rPXczNT6htpfsnN/EotH/PPJvDzoXSn/Nn/p4O8yvvNXK2ZH5Fk6/oZScmJzutntvPhcQgrtfyoXLzQkjckJR8fSEVsWfKf6+3882nVazdzO9Yf8+ftJsrpGgAAAAAADApDt6Tb33+Dsx8Nf0JCfh8P8vv4+8CO9+thOc1LNAAAAAAAh8KtPy2Ztm05B+jEReQv4ke1E5OB2MaOzlUROfRFRaTRn1tOiEjwGT1I/OtWPFLKizBnWEQG4kmI2On3byYAAAAA3bZd9O8j9OlFD3cEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDxE/U8sHB+yVuRtvPtwoE94i3LxQ79BgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAB8isAAP//0KwZYw==") r8 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r8, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x3, 0x1, 0x1, 0xa, 0x9, 0x1, {0x5, 0x17d, 0x4, 0x3, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x20000000, 0xee00, 0x0, 0x3ff, 0x8001}}, {0x0, 0x11}}}, 0xa0) sendfile(r8, r8, &(0x7f0000000080)=0x2, 0x7f03) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000240)=0x402000, 0x4) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYBLOB="010026bd7000ffdbdf25050000000c0001800800", @ANYRES32=r10, @ANYBLOB="58000380540003800c00018008180100020057bb14b20180080002002b4028001c0001800c000200745b2e5e5b5d2300030003000800010020080000100001800c00020073797a5f74756e000c0001800800010031cd8451858114c1d42733454a8de0f75da8d334a4ab426a05e8f873651da08e56ef9527915de889eb8ba9375c190f8a37857f0f3e1cd1413041a28139a778f6ad28cf27e2b68b02fbfe153c4d93e2ff0f0c06f06e55228e0c9a02bce131a8c4afca2ce6f389"], 0x78}, 0x1, 0x0, 0x0, 0x2400c054}, 0x4044014) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) 1.753651858s ago: executing program 5 (id=773): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000480)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@cpuset_v2_mode}]}) 1.643913497s ago: executing program 5 (id=775): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) finit_module(r0, 0x0, 0x1) 1.643733267s ago: executing program 2 (id=776): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x48b00, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) 1.641313168s ago: executing program 2 (id=777): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xe}}}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) 1.61164106s ago: executing program 2 (id=778): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x18, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}}, 0x0) 1.547076605s ago: executing program 2 (id=779): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@call={0x85, 0x0, 0x0, 0xbb}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94) 1.499770069s ago: executing program 5 (id=780): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090480000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00020c"], 0x0, 0x0, 0x0}, 0x0) 1.499184719s ago: executing program 2 (id=781): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = epoll_create1(0x80000) r1 = epoll_create(0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) chown(0x0, 0xffffffffffffffff, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x2080009) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) 837.928612ms ago: executing program 6 (id=783): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xfffff001}]}, 0x2c}}, 0x8040) 828.637543ms ago: executing program 3 (id=784): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4) 806.012325ms ago: executing program 3 (id=785): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x6e4) 805.647575ms ago: executing program 6 (id=786): socket$nl_route(0x10, 0x3, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) 751.799959ms ago: executing program 3 (id=787): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x5, 0x1, 0x5, 0xd355, 0x4, 0x9bd6, &(0x7f0000000040)="97a797b4"}) 751.194679ms ago: executing program 6 (id=788): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0x700, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 750.88798ms ago: executing program 3 (id=789): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x1f, 0x107, 0x0, 0x1, {0x5, 0x7c}}, 0x14}}, 0xc000) 750.70092ms ago: executing program 4 (id=790): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x1800700, &(0x7f0000000200)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 750.59726ms ago: executing program 3 (id=791): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_SET_TIME(r0, 0x40187014, 0x0) 730.599561ms ago: executing program 6 (id=792): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000850000009e00000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xad, &(0x7f00000003c0)=""/173}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x57a0, &(0x7f0000000200)={0x0, 0xd498, 0x40, 0x1, 0x348}, &(0x7f0000000100), &(0x7f0000000140)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2) syz_io_uring_setup(0x2c78, 0x0, &(0x7f00000001c0), &(0x7f00000005c0)) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000200)=0x8) pwritev(r3, &(0x7f00000002c0), 0x0, 0x73a, 0x1) unshare(0x2040400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x401) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x0, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001c40)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x20000) write$eventfd(r5, &(0x7f00000000c0)=0xfffffffffffffffe, 0x8) 708.498953ms ago: executing program 3 (id=793): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = epoll_create1(0x80000) r1 = epoll_create(0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) chown(0x0, 0xffffffffffffffff, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x2080009) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) 536.205607ms ago: executing program 2 (id=794): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = epoll_create1(0x80000) r1 = epoll_create(0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) chown(0x0, 0xffffffffffffffff, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x2080009) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) 0s ago: executing program 4 (id=795): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) syz_open_dev$usbfs(&(0x7f00000000c0), 0x5, 0x715ae5191a550b82) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup(r3) write$FUSE_GETXATTR(r4, &(0x7f0000000040)={0x18, 0x0, 0x0, {0x1000}}, 0x18) ioctl$TIOCCONS(r4, 0x541d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r9, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542080005000000000090000880"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): : orphan cleanup on readonly fs [ 179.366870][ T1662] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 179.376522][ T1662] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 179.385987][ T1662] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.258: Failed to acquire dquot type 1 [ 179.401252][ T1662] EXT4-fs (loop3): 1 truncate cleaned up [ 179.407898][ T1662] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 180.785321][ T1662] bridge0: port 3(gretap0) entered blocking state [ 180.791847][ T1662] bridge0: port 3(gretap0) entered disabled state [ 180.799010][ T1662] device gretap0 entered promiscuous mode [ 180.804934][ T1662] bridge0: port 3(gretap0) entered blocking state [ 180.811448][ T1662] bridge0: port 3(gretap0) entered forwarding state [ 180.853534][ T1655] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.871178][ T285] EXT4-fs (loop3): unmounting filesystem. [ 180.878529][ T1655] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.913191][ T1655] device bridge_slave_0 entered promiscuous mode [ 180.933788][ T1655] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.053014][ T1672] loop5: detected capacity change from 0 to 512 [ 181.514044][ T1655] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.535791][ T1672] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 181.543808][ T1672] System zones: 0-2, 18-18, 34-34 [ 181.578566][ T1672] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #3: comm syz.5.260: corrupted inode contents [ 181.591525][ T1672] EXT4-fs error (device loop5): ext4_dirty_inode:6121: inode #3: comm syz.5.260: mark_inode_dirty error [ 181.605838][ T1672] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #3: comm syz.5.260: corrupted inode contents [ 181.618551][ T1672] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #3: comm syz.5.260: mark_inode_dirty error [ 181.632141][ T1672] Quota error (device loop5): write_blk: dquota write failed [ 181.640091][ T1672] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 181.650244][ T1672] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.260: Failed to acquire dquot type 0 [ 181.668192][ T1672] EXT4-fs (loop5): 1 orphan inode deleted [ 181.674100][ T1672] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 181.684616][ T400] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 181.695330][ T1672] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.745607][ T400] EXT4-fs error (device loop5): ext4_release_dquot:6837: comm kworker/u4:4: Failed to release dquot type 1 [ 181.745717][ T1655] device bridge_slave_1 entered promiscuous mode [ 181.904775][ T1680] loop4: detected capacity change from 0 to 1024 [ 182.041492][ T1680] EXT4-fs: Ignoring removed nobh option [ 182.047640][ T1680] EXT4-fs: Ignoring removed bh option [ 182.061549][ T1680] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 182.861394][ T28] audit: type=1400 audit(1754336885.720:918): avc: denied { bpf } for pid=1664 comm="syz.2.259" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 182.891674][ T1680] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 182.928616][ T28] audit: type=1400 audit(1754336885.740:919): avc: denied { map_create } for pid=1664 comm="syz.2.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 182.978540][ T28] audit: type=1400 audit(1754336885.740:920): avc: denied { map_read map_write } for pid=1664 comm="syz.2.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 183.057881][ T974] EXT4-fs (loop5): unmounting filesystem. [ 183.249253][ T1697] /dev/loop0: Can't open blockdev [ 183.289196][ T1697] overlayfs: conflicting lowerdir path [ 183.552498][ T287] EXT4-fs (loop4): unmounting filesystem. [ 183.587130][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.596240][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.620824][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.629307][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.641729][ T1642] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.648917][ T1642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.656579][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.665127][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.674470][ T1642] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.681587][ T1642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.691703][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 183.804516][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 183.813571][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 185.092121][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 185.092154][ T28] audit: type=1400 audit(1754336886.640:955): avc: denied { read write } for pid=1706 comm="syz.3.266" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 185.153089][ T28] audit: type=1400 audit(1754336886.640:956): avc: denied { open } for pid=1706 comm="syz.3.266" path="/dev/uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 185.179065][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 185.218210][ T28] audit: type=1400 audit(1754336886.640:957): avc: denied { create } for pid=1706 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 185.251836][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 185.260291][ T28] audit: type=1400 audit(1754336886.760:958): avc: denied { create } for pid=1707 comm="syz.4.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 185.264600][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 185.280068][ T28] audit: type=1400 audit(1754336886.790:959): avc: denied { ioctl } for pid=1707 comm="syz.4.267" path="socket:[20507]" dev="sockfs" ino=20507 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 185.301149][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 185.665336][ T585] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 185.706333][ T28] audit: type=1400 audit(1754336886.790:960): avc: denied { ioctl } for pid=1707 comm="syz.4.267" path="socket:[20506]" dev="sockfs" ino=20506 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 186.422737][ T1655] device veth0_vlan entered promiscuous mode [ 186.563893][ T28] audit: type=1326 audit(1754336887.980:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1717 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc4d8eb69 code=0x7ffc0000 [ 186.587532][ T28] audit: type=1326 audit(1754336887.980:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1717 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2bc4d8eb69 code=0x7ffc0000 [ 187.360413][ T1111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 187.368471][ T28] audit: type=1326 audit(1754336887.990:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1717 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc4d8eb69 code=0x7ffc0000 [ 187.382390][ T1111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 187.391944][ T28] audit: type=1326 audit(1754336887.990:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1717 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2bc4d8eb69 code=0x7ffc0000 [ 187.424445][ T1729] bridge0: port 4(syz_tun) entered blocking state [ 187.431076][ T1729] bridge0: port 4(syz_tun) entered disabled state [ 187.438147][ T1729] device syz_tun entered promiscuous mode [ 187.444250][ T1729] bridge0: port 4(syz_tun) entered blocking state [ 187.450713][ T1729] bridge0: port 4(syz_tun) entered forwarding state [ 187.512587][ T1731] netlink: 28 bytes leftover after parsing attributes in process `syz.2.270'. [ 187.591799][ T1655] device veth1_macvtap entered promiscuous mode [ 187.744690][ T1111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 187.774255][ T1733] loop2: detected capacity change from 0 to 256 [ 187.796109][ T1111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 187.842755][ T1733] exfat: Deprecated parameter 'utf8' [ 187.848132][ T1733] exfat: Deprecated parameter 'namecase' [ 187.864062][ T1733] exfat: Bad value for 'namecase' [ 187.886293][ T1111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 187.897201][ T1736] loop3: detected capacity change from 0 to 1024 [ 187.904089][ T1111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 188.978533][ T1736] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 191.152513][ T1752] loop5: detected capacity change from 0 to 512 [ 191.499354][ T1736] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.598356][ T1752] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 191.606541][ T1752] System zones: 0-2, 18-18, 34-34 [ 191.619075][ T1752] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #3: comm syz.5.273: corrupted inode contents [ 191.631610][ T1752] EXT4-fs error (device loop5): ext4_dirty_inode:6121: inode #3: comm syz.5.273: mark_inode_dirty error [ 191.645121][ T1752] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #3: comm syz.5.273: corrupted inode contents [ 191.657492][ T1752] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #3: comm syz.5.273: mark_inode_dirty error [ 191.670358][ T1752] __quota_error: 45 callbacks suppressed [ 191.670383][ T1752] Quota error (device loop5): write_blk: dquota write failed [ 191.683732][ T1752] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 191.693895][ T1752] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.273: Failed to acquire dquot type 0 [ 191.710534][ T1752] EXT4-fs (loop5): 1 orphan inode deleted [ 191.716372][ T1752] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 191.726215][ T1752] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.798231][ T419] device bridge_slave_1 left promiscuous mode [ 191.988530][ T419] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.009588][ T419] device bridge_slave_0 left promiscuous mode [ 192.036680][ T419] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.057896][ T419] device veth1_macvtap left promiscuous mode [ 192.064048][ T28] audit: type=1400 audit(1754336894.900:1010): avc: denied { create } for pid=1758 comm="syz.4.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 192.089801][ T419] device veth0_vlan left promiscuous mode [ 192.249461][ T28] audit: type=1400 audit(1754336895.100:1011): avc: denied { bind } for pid=1758 comm="syz.4.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 192.297502][ T1763] usb usb1: check_ctrlrecip: process 1763 (syz.4.276) requesting ep 01 but needs 81 [ 192.407030][ T28] audit: type=1400 audit(1754336895.150:1012): avc: denied { append } for pid=1758 comm="syz.4.276" name="001" dev="devtmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 192.483399][ T1111] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 192.494370][ T1111] EXT4-fs error (device loop5): ext4_release_dquot:6837: comm kworker/u4:11: Failed to release dquot type 1 [ 192.507049][ T974] EXT4-fs (loop5): unmounting filesystem. [ 192.507106][ T285] EXT4-fs (loop3): unmounting filesystem. [ 192.593541][ T1761] netlink: 'syz.4.276': attribute type 3 has an invalid length. [ 192.601416][ T1761] netlink: 'syz.4.276': attribute type 3 has an invalid length. [ 192.609091][ T1761] netlink: 12 bytes leftover after parsing attributes in process `syz.4.276'. [ 193.153089][ T1778] overlayfs: conflicting lowerdir path [ 193.944364][ T28] audit: type=1400 audit(1754336896.090:1013): avc: denied { create } for pid=1769 comm="syz.3.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 194.359693][ T28] audit: type=1400 audit(1754336896.090:1014): avc: denied { ioctl } for pid=1769 comm="syz.3.275" path="socket:[20269]" dev="sockfs" ino=20269 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 194.392898][ T1787] loop3: detected capacity change from 0 to 16 [ 194.420118][ T1787] erofs: (device loop3): mounted with root inode @ nid 36. [ 195.592924][ T28] audit: type=1400 audit(1754336896.090:1015): avc: denied { connect } for pid=1769 comm="syz.3.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 195.612398][ T28] audit: type=1400 audit(1754336896.090:1016): avc: denied { write } for pid=1769 comm="syz.3.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 197.597674][ T1801] loop4: detected capacity change from 0 to 1024 [ 197.680769][ T1801] EXT4-fs: Ignoring removed nobh option [ 197.686388][ T1801] EXT4-fs: Ignoring removed bh option [ 197.700524][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 197.700539][ T28] audit: type=1400 audit(1754336900.560:1024): avc: denied { write } for pid=1799 comm="syz.5.284" path="socket:[20869]" dev="sockfs" ino=20869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 197.730563][ T1801] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 197.826242][ T28] audit: type=1400 audit(1754336900.590:1025): avc: denied { ioctl } for pid=1799 comm="syz.5.284" path="socket:[20869]" dev="sockfs" ino=20869 ioctlcmd=0x541d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 197.889498][ T28] audit: type=1400 audit(1754336900.740:1026): avc: denied { create } for pid=1810 comm="syz.2.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 197.890879][ T1801] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 197.919724][ T28] audit: type=1400 audit(1754336900.760:1027): avc: denied { ioctl } for pid=1810 comm="syz.2.287" path="socket:[20877]" dev="sockfs" ino=20877 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 197.963789][ T28] audit: type=1400 audit(1754336900.770:1028): avc: denied { create } for pid=1810 comm="syz.2.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 198.164970][ T1811] loop2: detected capacity change from 0 to 512 [ 198.222140][ T1811] EXT4-fs: Ignoring removed i_version option [ 198.378908][ T1811] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 198.399433][ T28] audit: type=1400 audit(1754336901.250:1029): avc: denied { write } for pid=1810 comm="syz.2.287" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 198.520230][ T1827] overlayfs: conflicting lowerdir path [ 198.773875][ T1811] loop2: detected capacity change from 0 to 256 [ 198.822046][ T1811] FAT-fs (loop2): Unrecognized mount option "Òǽ}ótnãÍÓ¹${ÿH²ò4/ÚþLê“ÖsŽFÄ¿ñ“dgÜÚêÚÒl¹\Zi¥'ë•åÉÚêÚ•Å\+§83=3uãêõbÏÚz®ò›×ß]¼ó£ßýö+¯þ¸þퟥÕÿù©¬¬½½Ôlz>ÆÛò†#âÎaë“áÖß>>ioû\D\ÈúÿD e¯&" or missing value [ 198.933674][ T287] EXT4-fs (loop4): unmounting filesystem. [ 199.014082][ T1831] loop3: detected capacity change from 0 to 512 [ 199.230683][ T1831] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 199.238715][ T1831] System zones: 0-2, 18-18, 34-34 [ 199.309414][ T1831] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #3: comm syz.3.288: corrupted inode contents [ 199.321828][ T1831] EXT4-fs error (device loop3): ext4_dirty_inode:6121: inode #3: comm syz.3.288: mark_inode_dirty error [ 199.335712][ T1831] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #3: comm syz.3.288: corrupted inode contents [ 199.348190][ T1831] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.288: mark_inode_dirty error [ 199.361516][ T1831] Quota error (device loop3): write_blk: dquota write failed [ 199.369175][ T1831] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 199.379447][ T1831] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.288: Failed to acquire dquot type 0 [ 199.396855][ T1831] EXT4-fs (loop3): 1 orphan inode deleted [ 199.402761][ T1831] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 199.413279][ T1831] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.209105][ T28] audit: type=1400 audit(1754336902.990:1030): avc: denied { read write } for pid=1835 comm="syz.2.290" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 200.259994][ T1020] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 200.294578][ T1020] EXT4-fs error (device loop3): ext4_release_dquot:6837: comm kworker/u4:9: Failed to release dquot type 1 [ 200.341813][ T285] EXT4-fs (loop3): unmounting filesystem. [ 201.231719][ T1848] loop6: detected capacity change from 0 to 1024 [ 201.870020][ T1848] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 202.015762][ T1855] xt_TCPMSS: Only works on TCP SYN packets [ 202.050072][ T1855] netlink: 9 bytes leftover after parsing attributes in process `syz.2.293'. [ 202.167801][ T1855] device gretap0 entered promiscuous mode [ 202.177388][ T1859] netlink: 5 bytes leftover after parsing attributes in process `syz.2.293'. [ 202.247847][ T1859] 0ªX¹¦D: renamed from gretap0 [ 202.324443][ T1859] device 30ªX¹¦D left promiscuous mode [ 202.341247][ T1859] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 202.683019][ T1858] loop3: detected capacity change from 0 to 512 [ 204.115284][ T1858] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 204.124567][ T1858] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 204.148818][ T1858] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #2: comm syz.3.291: corrupted inode contents [ 204.165104][ T1858] EXT4-fs error (device loop3): ext4_dirty_inode:6121: inode #2: comm syz.3.291: mark_inode_dirty error [ 204.177031][ T1858] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #2: comm syz.3.291: corrupted inode contents [ 204.190263][ T1858] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.291: mark_inode_dirty error [ 204.222718][ T1858] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 204.235388][ T1858] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #2: comm syz.3.291: corrupted inode contents [ 204.247540][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 204.247561][ T28] audit: type=1400 audit(1754336907.060:1035): avc: denied { read } for pid=1849 comm="syz.3.291" path="/63/bus/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 204.277977][ T1858] EXT4-fs error (device loop3): ext4_dirty_inode:6121: inode #2: comm syz.3.291: mark_inode_dirty error [ 204.290634][ T1858] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #2: comm syz.3.291: corrupted inode contents [ 204.466610][ T28] audit: type=1400 audit(1754336907.070:1036): avc: denied { create } for pid=1849 comm="syz.3.291" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 204.497826][ T28] audit: type=1400 audit(1754336907.090:1037): avc: denied { relabelto } for pid=1849 comm="syz.3.291" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 205.919426][ T1873] SELinux: security_context_str_to_sid (unconfined_uobj_type=fsconte,) failed with errno=-22 [ 206.423313][ T285] EXT4-fs (loop3): unmounting filesystem. [ 206.435092][ T1655] EXT4-fs (loop6): unmounting filesystem. [ 206.557123][ T28] audit: type=1400 audit(1754336907.160:1038): avc: denied { remove_name } for pid=1849 comm="syz.3.291" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 206.653669][ T28] audit: type=1400 audit(1754336908.950:1039): avc: denied { read } for pid=1866 comm="syz.2.295" name=".log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 206.975067][ T28] audit: type=1400 audit(1754336908.950:1040): avc: denied { open } for pid=1866 comm="syz.2.295" path="/55/file0/.log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 207.287031][ T28] audit: type=1400 audit(1754336909.000:1041): avc: denied { setattr } for pid=1866 comm="syz.2.295" name=".log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 207.342901][ T28] audit: type=1400 audit(1754336909.360:1042): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 207.365694][ T28] audit: type=1400 audit(1754336909.380:1043): avc: denied { map } for pid=1875 comm="syz.4.298" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20421 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 207.408552][ T28] audit: type=1400 audit(1754336909.380:1044): avc: denied { read write } for pid=1875 comm="syz.4.298" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20421 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 207.609149][ T1897] loop2: detected capacity change from 0 to 2048 [ 207.675514][ T1897] Alternate GPT is invalid, using primary GPT. [ 207.682139][ T1897] loop2: p1 p2 p3 [ 210.545725][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 210.545749][ T28] audit: type=1400 audit(1754336912.890:1052): avc: denied { wake_alarm } for pid=1906 comm="syz.6.305" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 210.772342][ T1920] loop6: detected capacity change from 0 to 128 [ 210.794510][ T1920] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fff0101) [ 211.093372][ T1925] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 211.121131][ T1918] bridge0: port 3(syz_tun) entered blocking state [ 211.127611][ T1918] bridge0: port 3(syz_tun) entered disabled state [ 211.134691][ T1918] device syz_tun entered promiscuous mode [ 211.140552][ T1918] bridge0: port 3(syz_tun) entered blocking state [ 211.147062][ T1918] bridge0: port 3(syz_tun) entered forwarding state [ 211.156393][ T28] audit: type=1400 audit(1754336913.950:1053): avc: denied { mount } for pid=1913 comm="syz.3.315" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 211.171502][ T1920] FAT-fs (loop6): Filesystem has been set read-only [ 211.268844][ T28] audit: type=1400 audit(1754336913.960:1054): avc: denied { create } for pid=1913 comm="syz.3.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 211.638205][ T28] audit: type=1400 audit(1754336914.270:1055): avc: denied { bind } for pid=1921 comm="syz.5.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 211.722970][ T28] audit: type=1400 audit(1754336914.280:1056): avc: denied { setopt } for pid=1921 comm="syz.5.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 211.770001][ T28] audit: type=1400 audit(1754336914.570:1057): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 211.800476][ T28] audit: type=1400 audit(1754336914.650:1058): avc: denied { read } for pid=1919 comm="syz.6.307" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 211.964481][ T28] audit: type=1400 audit(1754336914.650:1059): avc: denied { open } for pid=1919 comm="syz.6.307" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 215.044058][ T1947] netlink: 'syz.6.307': attribute type 4 has an invalid length. [ 215.227986][ T28] audit: type=1400 audit(1754337147.024:1060): avc: denied { read } for pid=1949 comm="syz.3.313" path="socket:[21116]" dev="sockfs" ino=21116 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 215.299894][ T1959] loop3: detected capacity change from 0 to 16 [ 215.306364][ T28] audit: type=1400 audit(1754337147.144:1061): avc: denied { write } for pid=1949 comm="syz.3.313" name="udplite" dev="proc" ino=4026532322 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 215.335462][ T1959] erofs: (device loop3): mounted with root inode @ nid 36. [ 215.550195][ T1959] syz.3.313: attempt to access beyond end of device [ 215.550195][ T1959] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 215.558102][ T1963] bridge0: port 3(gretap0) entered disabled state [ 215.575908][ T1963] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.600746][ T1963] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.672527][ T1963] kernel profiling enabled (shift: 17) [ 215.683730][ T1963] netlink: 'syz.5.318': attribute type 16 has an invalid length. [ 215.692619][ T1963] netlink: 'syz.5.318': attribute type 17 has an invalid length. [ 215.715912][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 215.715927][ T28] audit: type=1400 audit(1754337147.564:1070): avc: denied { write } for pid=1962 comm="syz.5.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 215.743536][ T28] audit: type=1400 audit(1754337147.564:1071): avc: denied { nlmsg_write } for pid=1962 comm="syz.5.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 215.782037][ T28] audit: type=1400 audit(1754337147.624:1072): avc: denied { unmount } for pid=1949 comm="syz.3.313" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 216.303527][ T1979] overlayfs: missing 'lowerdir' [ 217.150043][ T1981] bridge0: port 5(syz_tun) entered blocking state [ 217.156565][ T1981] bridge0: port 5(syz_tun) entered disabled state [ 217.164373][ T1981] device syz_tun entered promiscuous mode [ 217.170478][ T1981] bridge0: port 5(syz_tun) entered blocking state [ 217.176953][ T1981] bridge0: port 5(syz_tun) entered forwarding state [ 218.184204][ T28] audit: type=1400 audit(1754337150.014:1073): avc: denied { bind } for pid=1974 comm="syz.2.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 218.516541][ T1986] loop6: detected capacity change from 0 to 256 [ 218.527566][ T28] audit: type=1400 audit(1754337150.014:1074): avc: denied { read write } for pid=1974 comm="syz.2.331" name="ppp" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 218.685859][ T1986] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 219.345472][ T28] audit: type=1400 audit(1754337150.014:1075): avc: denied { open } for pid=1974 comm="syz.2.331" path="/dev/ppp" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 219.368644][ T28] audit: type=1400 audit(1754337150.024:1076): avc: denied { ioctl } for pid=1974 comm="syz.2.331" path="/dev/ppp" dev="devtmpfs" ino=157 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 219.420493][ T1996] loop2: detected capacity change from 0 to 256 [ 219.470465][ T28] audit: type=1400 audit(1754337151.314:1077): avc: denied { mount } for pid=1995 comm="syz.2.325" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 219.617510][ T28] audit: type=1400 audit(1754337151.364:1078): avc: denied { bind } for pid=1983 comm="syz.6.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 220.549690][ T2002] syz.6.323[2002] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.549770][ T2002] syz.6.323[2002] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.716702][ T2002] netlink: 'syz.6.323': attribute type 3 has an invalid length. [ 221.635132][ T28] audit: type=1400 audit(1754337152.504:1079): avc: denied { write } for pid=1983 comm="syz.6.323" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.657029][ T28] audit: type=1400 audit(1754337152.504:1080): avc: denied { add_name } for pid=1983 comm="syz.6.323" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.823106][ T28] audit: type=1400 audit(1754337152.504:1081): avc: denied { associate } for pid=1983 comm="syz.6.323" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 222.500722][ T2018] fuseblk: Bad value for 'fd' [ 222.506549][ T2018] overlayfs: './file0' not a directory [ 222.516609][ T2021] overlayfs: conflicting lowerdir path [ 223.284016][ T28] audit: type=1400 audit(1754337152.524:1082): avc: denied { append } for pid=1983 comm="syz.6.323" path="/8/file0/cpu.stat" dev="loop6" ino=1048619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 223.331804][ T28] audit: type=1400 audit(1754337152.554:1083): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 223.352958][ T28] audit: type=1400 audit(1754337154.354:1084): avc: denied { mounton } for pid=1999 comm="syz.3.326" path="/68/file0" dev="tmpfs" ino=423 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 224.789883][ T28] audit: type=1400 audit(1754337156.124:1085): avc: denied { create } for pid=2027 comm="syz.2.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 224.826448][ T28] audit: type=1400 audit(1754337156.124:1086): avc: denied { listen } for pid=2027 comm="syz.2.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 224.869796][ T2045] loop4: detected capacity change from 0 to 512 [ 224.921257][ T2045] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 224.929367][ T2045] System zones: 0-2, 18-18, 34-34 [ 224.998907][ T28] audit: type=1400 audit(1754337156.184:1087): avc: denied { connect } for pid=2027 comm="syz.2.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 225.136400][ T2045] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #3: comm syz.4.333: corrupted inode contents [ 225.829686][ T2045] EXT4-fs error (device loop4): ext4_dirty_inode:6121: inode #3: comm syz.4.333: mark_inode_dirty error [ 226.463131][ T2045] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #3: comm syz.4.333: corrupted inode contents [ 226.479284][ T2045] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz.4.333: mark_inode_dirty error [ 226.492448][ T2045] Quota error (device loop4): write_blk: dquota write failed [ 226.500016][ T2045] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.333: Failed to acquire dquot type 0 [ 226.805020][ T2045] EXT4-fs (loop4): 1 orphan inode deleted [ 226.810851][ T2045] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 226.811084][ T1111] __quota_error: 1 callbacks suppressed [ 226.811099][ T1111] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 226.835842][ T2045] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.288337][ T2065] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 227.691000][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 227.795810][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 227.804753][ T1111] EXT4-fs error (device loop4): ext4_release_dquot:6837: comm kworker/u4:11: Failed to release dquot type 1 [ 227.819072][ T287] EXT4-fs (loop4): unmounting filesystem. [ 233.633594][ T2091] overlayfs: conflicting lowerdir path [ 235.915852][ T28] audit: type=1400 audit(1754337167.764:1088): avc: denied { remount } for pid=2104 comm="syz.5.347" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 236.037371][ T2105] tmpfs: Unknown parameter 'nr_inxdes' [ 236.375115][ T2110] netlink: 28 bytes leftover after parsing attributes in process `syz.3.350'. [ 238.179549][ T2111] usb usb1: check_ctrlrecip: process 2111 (syz.2.348) requesting ep 01 but needs 81 [ 238.191007][ T2112] netlink: 'syz.2.348': attribute type 3 has an invalid length. [ 238.198797][ T2112] netlink: 'syz.2.348': attribute type 3 has an invalid length. [ 238.206494][ T2112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.348'. [ 238.255063][ T2116] loop4: detected capacity change from 0 to 256 [ 238.404714][ T2122] syz.6.351[2122] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 238.406286][ T2122] syz.6.351[2122] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 239.056108][ T2122] netlink: 12 bytes leftover after parsing attributes in process `syz.6.351'. [ 239.084485][ T2122] bridge1: port 1(ip6gretap1) entered blocking state [ 239.091397][ T2122] bridge1: port 1(ip6gretap1) entered disabled state [ 239.099238][ T2122] device ip6gretap1 entered promiscuous mode [ 243.780826][ T28] audit: type=1400 audit(1754337173.444:1089): avc: denied { getopt } for pid=2104 comm="syz.5.347" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 244.114476][ T2138] syz.5.354[2138] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 244.114566][ T2138] syz.5.354[2138] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 244.128775][ T2138] loop5: detected capacity change from 0 to 128 [ 244.196323][ T2138] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 244.205697][ T2138] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 244.218559][ T2138] xt_CT: You must specify a L4 protocol and not use inversions on it [ 244.241523][ T2138] netlink: 8 bytes leftover after parsing attributes in process `syz.5.354'. [ 244.444904][ T2147] loop4: detected capacity change from 0 to 512 [ 244.460465][ T2147] EXT4-fs: Ignoring removed nobh option [ 244.504012][ T2147] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.359: iget: bad i_size value: 38620345925642 [ 244.541301][ T2147] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.359: couldn't read orphan inode 15 (err -117) [ 244.590182][ T2147] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 244.653580][ T28] audit: type=1400 audit(1754337176.504:1090): avc: denied { append } for pid=2146 comm="syz.4.359" path="/72/file1/cgroup.controllers" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 244.740948][ T2155] netlink: 28 bytes leftover after parsing attributes in process `syz.4.359'. [ 244.820586][ T2155] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.828356][ T2155] device bridge_slave_1 left promiscuous mode [ 244.895405][ T2155] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.439452][ T585] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm kworker/u4:6: bg 0: block 5: invalid block bitmap [ 245.483159][ T585] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 245.543638][ T585] EXT4-fs (loop4): This should not happen!! Data will be lost [ 245.543638][ T585] [ 245.805572][ T585] EXT4-fs (loop4): Total free blocks count 0 [ 245.811845][ T585] EXT4-fs (loop4): Free/Dirty block details [ 245.818066][ T585] EXT4-fs (loop4): free_blocks=0 [ 245.823538][ T585] EXT4-fs (loop4): dirty_blocks=13512 [ 245.828952][ T585] EXT4-fs (loop4): Block reservation details [ 245.835137][ T585] EXT4-fs (loop4): i_reserved_data_blocks=13512 [ 245.861935][ T8] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 248.690179][ T28] audit: type=1400 audit(1754337179.494:1091): avc: denied { connect } for pid=2177 comm="syz.6.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 248.691336][ T28] audit: type=1400 audit(1754337179.604:1092): avc: denied { ioctl } for pid=2177 comm="syz.6.364" path="socket:[22598]" dev="sockfs" ino=22598 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 248.691363][ T28] audit: type=1400 audit(1754337180.324:1093): avc: denied { read } for pid=2173 comm="syz.2.363" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 248.691388][ T28] audit: type=1400 audit(1754337180.324:1094): avc: denied { open } for pid=2173 comm="syz.2.363" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 248.691413][ T28] audit: type=1400 audit(1754337180.514:1095): avc: denied { ioctl } for pid=2173 comm="syz.2.363" path="/dev/loop-control" dev="devtmpfs" ino=117 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 248.849184][ T974] EXT4-fs (loop5): unmounting filesystem. [ 248.888990][ T2190] syz.6.365[2190] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 248.889084][ T2190] syz.6.365[2190] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 248.956052][ T2169] loop4: detected capacity change from 0 to 512 [ 249.382731][ T2200] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=2200 comm=syz.6.365 [ 249.910727][ T2169] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 250.023664][ T2169] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #13: comm syz.4.362: iget: bad i_size value: 12154757448730 [ 250.046479][ T2169] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.362: couldn't read orphan inode 13 (err -117) [ 250.058637][ T2169] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 250.779439][ T2207] loop5: detected capacity change from 0 to 128 [ 251.656430][ T2206] netlink: 'syz.6.369': attribute type 3 has an invalid length. [ 251.664355][ T2206] netlink: 'syz.6.369': attribute type 3 has an invalid length. [ 251.672061][ T2206] netlink: 12 bytes leftover after parsing attributes in process `syz.6.369'. [ 251.765338][ T2206] usb usb1: check_ctrlrecip: process 2206 (syz.6.369) requesting ep 01 but needs 81 [ 253.443761][ T2212] loop2: detected capacity change from 0 to 128 [ 253.457489][ T2212] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 253.571414][ T2212] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 254.178749][ T2207] EXT4-fs: failed to create workqueue [ 254.184252][ T2207] EXT4-fs (loop5): mount failed [ 254.906003][ T2081] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 254.924942][ T287] EXT4-fs (loop4): unmounting filesystem. [ 254.938147][ T585] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 256.704426][ T375] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 256.910105][ T2243] netlink: 'syz.3.386': attribute type 27 has an invalid length. [ 256.935434][ T2243] bridge0: port 3(gretap0) entered disabled state [ 257.059138][ T2243] bridge0: port 4(syz_tun) entered disabled state [ 257.113677][ T375] usb 3-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 257.124859][ T2245] netlink: 28 bytes leftover after parsing attributes in process `syz.4.376'. [ 257.196309][ T2256] loop5: detected capacity change from 0 to 1024 [ 257.206608][ T2256] EXT4-fs: Ignoring removed nobh option [ 257.704981][ T2256] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #11: comm syz.5.377: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 257.724399][ T2256] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.377: couldn't read orphan inode 11 (err -117) [ 257.737358][ T2256] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 257.824802][ T2256] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:477: comm syz.5.377: Invalid block bitmap block 0 in block_group 0 [ 257.839191][ T2256] Quota error (device loop5): write_blk: dquota write failed [ 257.846674][ T2256] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 257.856864][ T2256] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.377: Failed to acquire dquot type 0 [ 257.947515][ T2243] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.954784][ T2243] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.969252][ T375] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 258.249736][ T375] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 258.268997][ T375] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.570395][ T2264] loop2: detected capacity change from 0 to 128 [ 258.582734][ T375] usb 3-1: config 0 descriptor?? [ 258.593980][ T974] EXT4-fs (loop5): unmounting filesystem. [ 258.600015][ T375] usb 3-1: can't set config #0, error -71 [ 258.610989][ T2081] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 258.622536][ T375] usb 3-1: USB disconnect, device number 2 [ 258.659388][ T2081] udevd[2081]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 258.684348][ T2185] udevd[2185]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 258.699801][ T2185] udevd[2185]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 258.791156][ T2251] bridge0: port 4(syz_tun) entered blocking state [ 258.797670][ T2251] bridge0: port 4(syz_tun) entered forwarding state [ 258.804421][ T2251] bridge0: port 3(gretap0) entered blocking state [ 258.810884][ T2251] bridge0: port 3(gretap0) entered forwarding state [ 258.840887][ T2251] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 258.862228][ T2266] loop5: detected capacity change from 0 to 40427 [ 258.879063][ T2251] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.886167][ T2251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.894400][ T2266] F2FS-fs (loop5): invalid crc value [ 258.895506][ T2251] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.906840][ T2251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.927709][ T2251] device veth0_vlan left promiscuous mode [ 258.934366][ T2266] F2FS-fs (loop5): Found nat_bits in checkpoint [ 258.934465][ T2251] device veth0_vlan entered promiscuous mode [ 258.948568][ T2251] device veth1_macvtap left promiscuous mode [ 258.955707][ T2251] device veth1_macvtap entered promiscuous mode [ 259.025894][ T28] audit: type=1400 audit(1754337190.874:1096): avc: denied { name_bind } for pid=2270 comm="syz.3.381" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 259.038601][ T2266] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 261.957815][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 262.237742][ T2286] netlink: 28 bytes leftover after parsing attributes in process `syz.4.383'. [ 263.068428][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 263.086219][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 263.173573][ T28] audit: type=1400 audit(1754337191.214:1097): avc: denied { create } for pid=2273 comm="syz.2.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 263.840963][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 264.021573][ T2294] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 264.320523][ T28] audit: type=1400 audit(1754337195.834:1098): avc: denied { mounton } for pid=2288 comm="syz.4.385" path="/77/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 264.383943][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 264.457305][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 264.479082][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 264.495240][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 264.503913][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 264.512645][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 264.526411][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 264.534942][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 264.543742][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 264.552497][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 264.561128][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 264.600565][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 264.608159][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 264.617246][ T2278] netlink: 'syz.2.382': attribute type 3 has an invalid length. [ 264.625226][ T2278] netlink: 'syz.2.382': attribute type 3 has an invalid length. [ 264.633071][ T2279] netlink: 28 bytes leftover after parsing attributes in process `syz.2.382'. [ 264.729828][ T2300] syz.5.384[2300] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 264.729912][ T2300] syz.5.384[2300] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 264.879781][ T2300] netlink: 12 bytes leftover after parsing attributes in process `syz.5.384'. [ 264.996905][ T2300] bridge1: port 1(ip6gretap1) entered blocking state [ 265.003696][ T2300] bridge1: port 1(ip6gretap1) entered disabled state [ 265.013822][ T2300] device ip6gretap1 entered promiscuous mode [ 266.197093][ T2313] netlink: 44 bytes leftover after parsing attributes in process `syz.2.390'. [ 267.044090][ T28] audit: type=1400 audit(1754337198.284:1099): avc: denied { watch } for pid=2301 comm="syz.2.390" path="/80" dev="tmpfs" ino=468 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 267.074416][ T2308] bridge0: port 4(gretap0) entered disabled state [ 267.171325][ T2308] bridge0: port 5(syz_tun) entered disabled state [ 267.188628][ T2308] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.747834][ T28] audit: type=1400 audit(1754337199.314:1100): avc: denied { setopt } for pid=2307 comm="syz.5.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 268.080139][ T2316] netlink: 'syz.4.389': attribute type 16 has an invalid length. [ 268.090233][ T2316] netlink: 'syz.4.389': attribute type 17 has an invalid length. [ 268.162644][ T28] audit: type=1400 audit(1754337199.954:1101): avc: denied { setopt } for pid=2327 comm="syz.6.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 268.210244][ T28] audit: type=1400 audit(1754337200.054:1102): avc: denied { bind } for pid=2327 comm="syz.6.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 268.259854][ T2332] loop4: detected capacity change from 0 to 256 [ 268.287468][ T2336] syz.2.394[2336] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 268.287870][ T2336] syz.2.394[2336] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 268.591858][ T2336] netlink: 'syz.2.394': attribute type 3 has an invalid length. [ 270.603591][ T2353] loop4: detected capacity change from 0 to 512 [ 270.624425][ T2353] EXT4-fs: Invalid want_extra_isize 0 [ 270.680291][ T2185] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 270.839919][ T2357] netlink: 28 bytes leftover after parsing attributes in process `syz.5.399'. [ 271.970796][ T28] audit: type=1400 audit(1754337202.814:1103): avc: denied { connect } for pid=2349 comm="syz.4.401" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 272.045216][ T28] audit: type=1400 audit(1754337202.844:1104): avc: denied { write } for pid=2349 comm="syz.4.401" path="socket:[22838]" dev="sockfs" ino=22838 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 273.222650][ T2370] loop6: detected capacity change from 0 to 256 [ 273.238783][ T2370] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 273.350443][ T28] audit: type=1400 audit(1754337205.174:1105): avc: denied { mounton } for pid=2365 comm="syz.6.404" path="/22/file1/file0" dev="loop6" ino=1048623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 273.666777][ T28] audit: type=1400 audit(1754337205.174:1106): avc: denied { mount } for pid=2365 comm="syz.6.404" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 273.742256][ T28] audit: type=1400 audit(1754337205.174:1107): avc: denied { getopt } for pid=2365 comm="syz.6.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 273.771978][ T2360] loop5: detected capacity change from 0 to 40427 [ 273.806499][ T2360] F2FS-fs (loop5): invalid crc value [ 273.905749][ T2360] F2FS-fs (loop5): Found nat_bits in checkpoint [ 274.825871][ T28] audit: type=1400 audit(1754337206.644:1108): avc: denied { remove_name } for pid=1655 comm="syz-executor" name="file.cold" dev="loop6" ino=1048625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 274.997393][ T28] audit: type=1400 audit(1754337206.644:1109): avc: denied { unlink } for pid=1655 comm="syz-executor" name="file.cold" dev="loop6" ino=1048625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 276.384922][ T28] audit: type=1400 audit(1754337206.644:1110): avc: denied { unmount } for pid=1655 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 276.476443][ T2389] netlink: 44 bytes leftover after parsing attributes in process `syz.6.407'. [ 277.199917][ T2387] overlayfs: failed to resolve './file0': -2 [ 277.343676][ T2360] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 277.366139][ T28] audit: type=1400 audit(1754337206.644:1111): avc: denied { rmdir } for pid=1655 comm="syz-executor" name="file0" dev="loop6" ino=1048623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 278.491834][ T2409] loop4: detected capacity change from 0 to 512 [ 278.803790][ T2411] overlayfs: failed to resolve './file0': -2 [ 280.415053][ T2416] netlink: 28 bytes leftover after parsing attributes in process `syz.6.413'. [ 280.476242][ T28] audit: type=1400 audit(1754337210.724:1112): avc: denied { write } for pid=2406 comm="syz.5.411" name="001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 280.719110][ T2409] EXT4-fs warning (device loop4): ext4_enable_quotas:7053: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 280.974131][ T2432] syz.3.415[2432] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 280.975518][ T2432] syz.3.415[2432] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 281.981802][ T2435] loop6: detected capacity change from 0 to 256 [ 282.005418][ T2435] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 282.080062][ T2435] FAT-fs (loop6): Directory bread(block 64) failed [ 282.086812][ T2435] FAT-fs (loop6): Directory bread(block 65) failed [ 282.093775][ T2435] FAT-fs (loop6): Directory bread(block 66) failed [ 282.100536][ T2435] FAT-fs (loop6): Directory bread(block 67) failed [ 282.107509][ T2435] FAT-fs (loop6): Directory bread(block 68) failed [ 282.114195][ T2435] FAT-fs (loop6): Directory bread(block 69) failed [ 282.121070][ T2435] FAT-fs (loop6): Directory bread(block 70) failed [ 282.127721][ T2435] FAT-fs (loop6): Directory bread(block 71) failed [ 282.159448][ T2435] FAT-fs (loop6): Directory bread(block 72) failed [ 282.166395][ T2435] FAT-fs (loop6): Directory bread(block 73) failed [ 282.508590][ T2427] netlink: 'syz.3.415': attribute type 3 has an invalid length. [ 282.535084][ T2409] EXT4-fs (loop4): mount failed [ 282.778560][ T2443] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 283.414242][ T2448] loop5: detected capacity change from 0 to 512 [ 283.433193][ T2448] EXT4-fs: Ignoring removed nobh option [ 283.475434][ T2448] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.421: iget: bad i_size value: 38620345925642 [ 283.490485][ T2448] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.421: couldn't read orphan inode 15 (err -117) [ 283.502978][ T2448] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 284.810156][ T2426] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 284.840017][ T8] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 200 with error 28 [ 284.859013][ T8] EXT4-fs (loop5): This should not happen!! Data will be lost [ 284.859013][ T8] [ 284.869396][ T8] EXT4-fs (loop5): Total free blocks count 0 [ 284.875732][ T8] EXT4-fs (loop5): Free/Dirty block details [ 284.885079][ T2458] netlink: 28 bytes leftover after parsing attributes in process `syz.5.421'. [ 284.944758][ T8] EXT4-fs (loop5): free_blocks=0 [ 284.955612][ T8] EXT4-fs (loop5): dirty_blocks=200 [ 284.961652][ T2458] device bridge_slave_1 left promiscuous mode [ 284.974252][ T8] EXT4-fs (loop5): Block reservation details [ 284.984316][ T2458] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.998098][ T8] EXT4-fs (loop5): i_reserved_data_blocks=200 [ 285.039928][ T974] EXT4-fs (loop5): unmounting filesystem. [ 285.484984][ T2469] loop4: detected capacity change from 0 to 4096 [ 285.590567][ T2469] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 285.627911][ T2469] overlayfs: missing 'lowerdir' [ 285.649696][ T28] audit: type=1400 audit(1754337217.494:1113): avc: denied { remount } for pid=2468 comm="syz.4.428" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 286.751763][ T2482] netlink: 8 bytes leftover after parsing attributes in process `syz.5.426'. [ 287.049398][ T2485] xt_TCPMSS: Only works on TCP SYN packets [ 287.099733][ T2485] netlink: 9 bytes leftover after parsing attributes in process `syz.3.429'. [ 289.915625][ T2485] bridge0: port 3(gretap0) entered disabled state [ 289.923256][ T2486] netlink: 5 bytes leftover after parsing attributes in process `syz.3.429'. [ 289.932157][ T2486] 0ªX¹¦D: renamed from gretap0 [ 289.955004][ T28] audit: type=1400 audit(1754337218.524:1114): avc: denied { setattr } for pid=2468 comm="syz.4.428" path="/86/file0/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 289.972830][ T2486] bridge0: port 3(30ªX¹¦D) entered blocking state [ 290.002593][ T2486] bridge0: port 3(30ªX¹¦D) entered forwarding state [ 290.010164][ T2486] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 290.220595][ T287] EXT4-fs (loop4): unmounting filesystem. [ 290.266109][ T28] audit: type=1326 audit(1754337222.114:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2489 comm="syz.2.430" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2bc4d8eb69 code=0x0 [ 290.343532][ T2493] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=2493 comm=syz.2.430 [ 290.472645][ T2493] netlink: 'syz.2.430': attribute type 1 has an invalid length. [ 290.670989][ T2497] loop4: detected capacity change from 0 to 512 [ 290.887057][ T2497] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 290.895143][ T2497] System zones: 0-2, 18-18, 34-34 [ 290.937558][ T2497] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #3: comm syz.4.431: corrupted inode contents [ 290.950756][ T2497] EXT4-fs error (device loop4): ext4_dirty_inode:6121: inode #3: comm syz.4.431: mark_inode_dirty error [ 290.964223][ T2497] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #3: comm syz.4.431: corrupted inode contents [ 290.976598][ T2497] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz.4.431: mark_inode_dirty error [ 290.989337][ T2497] Quota error (device loop4): write_blk: dquota write failed [ 290.997233][ T2497] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 291.007355][ T2497] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.431: Failed to acquire dquot type 0 [ 291.025263][ T2497] EXT4-fs (loop4): 1 orphan inode deleted [ 291.031133][ T2497] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 291.041796][ T2497] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.482924][ T43] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 291.497293][ T43] EXT4-fs error (device loop4): ext4_release_dquot:6837: comm kworker/u4:2: Failed to release dquot type 1 [ 291.513348][ T287] EXT4-fs (loop4): unmounting filesystem. [ 291.642803][ T2514] loop6: detected capacity change from 0 to 128 [ 291.650136][ T2514] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 291.710558][ T2514] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 291.792155][ T2517] syz.2.436[2517] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 291.792791][ T2517] syz.2.436[2517] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 294.378612][ T2532] usb usb1: check_ctrlrecip: process 2532 (syz.4.434) requesting ep 01 but needs 81 [ 294.966255][ T2534] loop5: detected capacity change from 0 to 512 [ 296.183538][ T2545] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 296.260721][ T2534] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 296.272738][ T2534] EXT4-fs (loop5): orphan cleanup on readonly fs [ 296.288095][ T2534] EXT4-fs (loop5): 1 orphan inode deleted [ 296.436088][ T10] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 296.504137][ T10] EXT4-fs error (device loop5): ext4_release_dquot:6837: comm kworker/u4:1: Failed to release dquot type 1 [ 296.528329][ T2534] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 298.627342][ T28] audit: type=1400 audit(1754337230.454:1116): avc: denied { read } for pid=2553 comm="syz.2.443" path="socket:[23181]" dev="sockfs" ino=23181 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 298.627704][ T974] EXT4-fs (loop5): unmounting filesystem. [ 298.722445][ T2564] loop4: detected capacity change from 0 to 512 [ 303.119789][ T2564] EXT4-fs warning (device loop4): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop4. [ 303.418544][ T2578] netlink: 'syz.5.446': attribute type 15 has an invalid length. [ 303.422483][ T28] audit: type=1400 audit(1754337235.264:1117): avc: denied { create } for pid=2570 comm="syz.3.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 303.451391][ T28] audit: type=1400 audit(1754337235.294:1118): avc: denied { create } for pid=2570 comm="syz.3.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 303.477077][ T28] audit: type=1400 audit(1754337235.324:1119): avc: denied { read } for pid=2577 comm="syz.5.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 306.003826][ T2591] loop4: detected capacity change from 0 to 512 [ 306.011843][ T2591] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 306.026725][ T28] audit: type=1400 audit(1754337237.834:1120): avc: denied { mount } for pid=2585 comm="syz.4.450" name="/" dev="ramfs" ino=23214 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 306.247153][ T28] audit: type=1400 audit(1754337237.864:1121): avc: denied { mounton } for pid=2585 comm="syz.4.450" path="/bus" dev="ramfs" ino=22208 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 306.294574][ T2591] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.450: corrupted in-inode xattr [ 306.307853][ T2591] EXT4-fs (loop4): 1 truncate cleaned up [ 306.313658][ T2591] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 306.326134][ T2591] EXT4-fs (loop4): unmounting filesystem. [ 307.259149][ T2606] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 308.708600][ T2607] bridge0: port 4(vlan2) entered blocking state [ 308.722366][ T2607] bridge0: port 4(vlan2) entered disabled state [ 308.883207][ T2609] loop6: detected capacity change from 0 to 40427 [ 308.916399][ T2609] F2FS-fs (loop6): invalid crc value [ 308.952506][ T2609] F2FS-fs (loop6): Found nat_bits in checkpoint [ 309.055767][ T2609] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 309.280059][ T2634] loop4: detected capacity change from 0 to 1024 [ 309.286900][ T2634] EXT4-fs: Ignoring removed mblk_io_submit option [ 309.293422][ T2634] EXT4-fs: Ignoring removed bh option [ 309.570345][ T2630] netlink: 8 bytes leftover after parsing attributes in process `syz.5.462'. [ 309.593527][ T2634] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 310.135447][ T2639] overlayfs: failed to clone upperpath [ 310.151173][ T2639] 9pnet_fd: Insufficient options for proto=fd [ 310.423783][ T1655] syz-executor: attempt to access beyond end of device [ 310.423783][ T1655] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 310.519542][ T2634] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 310.646245][ T2652] loop5: detected capacity change from 0 to 512 [ 311.009914][ T28] audit: type=1400 audit(1754337242.664:1122): avc: denied { setopt } for pid=2633 comm="syz.4.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 311.038067][ T287] EXT4-fs (loop4): unmounting filesystem. [ 311.148278][ T2652] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 311.156407][ T2652] System zones: 0-2, 18-18, 34-34 [ 311.169990][ T2652] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #3: comm syz.5.464: corrupted inode contents [ 311.183148][ T2652] EXT4-fs error (device loop5): ext4_dirty_inode:6121: inode #3: comm syz.5.464: mark_inode_dirty error [ 311.196591][ T2652] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #3: comm syz.5.464: corrupted inode contents [ 311.209436][ T2652] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #3: comm syz.5.464: mark_inode_dirty error [ 311.222316][ T2652] Quota error (device loop5): write_blk: dquota write failed [ 311.230361][ T2652] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 311.240458][ T2652] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.464: Failed to acquire dquot type 0 [ 311.257976][ T2652] EXT4-fs (loop5): 1 orphan inode deleted [ 311.263802][ T2652] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 311.274064][ T2652] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.714712][ T2667] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 312.245257][ T951] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 312.266386][ T951] EXT4-fs error (device loop5): ext4_release_dquot:6837: comm kworker/u4:8: Failed to release dquot type 1 [ 312.358328][ T974] EXT4-fs (loop5): unmounting filesystem. [ 312.512515][ T28] audit: type=1400 audit(1754337244.354:1123): avc: denied { bind } for pid=2670 comm="syz.3.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 312.793331][ T28] audit: type=1400 audit(1754337244.384:1124): avc: denied { write } for pid=2670 comm="syz.3.471" path="socket:[23434]" dev="sockfs" ino=23434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 315.177885][ T28] audit: type=1400 audit(1754337244.384:1125): avc: denied { accept } for pid=2670 comm="syz.3.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 315.263143][ T28] audit: type=1400 audit(1754337244.694:1126): avc: denied { write } for pid=2673 comm="syz.5.470" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 315.290563][ T2696] loop4: detected capacity change from 0 to 1024 [ 315.307420][ T2696] EXT4-fs: dax option not supported [ 315.307574][ T2680] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 315.340911][ T2702] loop6: detected capacity change from 0 to 256 [ 315.377051][ T2702] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 315.651860][ T2707] syz.6.476[2707] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 315.652967][ T2707] syz.6.476[2707] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 316.157820][ T2710] netlink: 'syz.6.476': attribute type 3 has an invalid length. [ 317.815481][ T2711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.477'. [ 318.504148][ T28] audit: type=1400 audit(1754337249.565:1127): avc: denied { create } for pid=2697 comm="syz.3.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 318.526302][ T2712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.475'. [ 319.412000][ T2724] netlink: 'syz.6.479': attribute type 3 has an invalid length. [ 319.419933][ T2724] netlink: 'syz.6.479': attribute type 3 has an invalid length. [ 319.429614][ T2724] netlink: 28 bytes leftover after parsing attributes in process `syz.6.479'. [ 320.170780][ T2730] loop5: detected capacity change from 0 to 512 [ 320.200423][ T2730] EXT4-fs: Invalid want_extra_isize 0 [ 324.517105][ T966] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 325.554880][ T28] audit: type=1400 audit(1754337255.666:1128): avc: denied { accept } for pid=2757 comm="syz.4.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 326.411560][ T28] audit: type=1400 audit(1754337257.392:1129): avc: denied { create } for pid=2766 comm="syz.4.491" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 326.650824][ T2772] loop5: detected capacity change from 0 to 256 [ 326.667609][ T2772] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 326.858556][ T966] usb 7-1: device descriptor read/all, error -71 [ 328.465308][ T28] audit: type=1400 audit(1754337259.293:1130): avc: denied { bind } for pid=2775 comm="syz.2.493" laddr=172.20.20.187 lport=250 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 328.499043][ T2784] netlink: 96 bytes leftover after parsing attributes in process `syz.4.491'. [ 328.539776][ T2783] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 328.618242][ T28] audit: type=1400 audit(1754337259.321:1131): avc: denied { name_bind } for pid=2775 comm="syz.2.493" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 328.643918][ T2776] netlink: 'syz.5.490': attribute type 3 has an invalid length. [ 328.770621][ T28] audit: type=1400 audit(1754337259.321:1132): avc: denied { node_bind } for pid=2775 comm="syz.2.493" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 328.791549][ T28] audit: type=1400 audit(1754337259.478:1133): avc: denied { read } for pid=2775 comm="syz.2.493" name="usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 328.835896][ T2789] loop6: detected capacity change from 0 to 256 [ 328.846558][ T28] audit: type=1400 audit(1754337259.478:1134): avc: denied { open } for pid=2775 comm="syz.2.493" path="/dev/usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 328.888088][ T2789] FAT-fs (loop6): Unrecognized mount option "ÿÿÿÿÿÿÿÿ0x0000000000000000" or missing value [ 333.826988][ T28] audit: type=1400 audit(1754337264.019:1135): avc: denied { setopt } for pid=2806 comm="syz.4.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 337.067071][ T28] audit: type=1400 audit(1754337264.019:1136): avc: denied { write } for pid=2806 comm="syz.4.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 337.094783][ T2833] loop6: detected capacity change from 0 to 512 [ 337.202668][ T2831] loop5: detected capacity change from 0 to 128 [ 337.265257][ T2831] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 337.277408][ T2831] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 337.308434][ T28] audit: type=1400 audit(1754337267.453:1137): avc: denied { sqpoll } for pid=2810 comm="syz.6.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 337.531474][ T2844] netlink: 'syz.3.507': attribute type 3 has an invalid length. [ 337.842422][ T2847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.506'. [ 338.731747][ T2839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.505'. [ 338.825857][ T2860] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 339.577578][ T2864] loop6: detected capacity change from 0 to 512 [ 339.685777][ T2864] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.510: casefold flag without casefold feature [ 339.707814][ T2864] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.510: couldn't read orphan inode 15 (err -117) [ 339.750089][ T2864] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 340.517334][ T28] audit: type=1400 audit(1754337270.416:1138): avc: denied { rmdir } for pid=1655 comm="syz-executor" name=".index" dev="loop6" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 340.541699][ T1655] EXT4-fs (loop6): unmounting filesystem. [ 340.630188][ T2870] loop6: detected capacity change from 0 to 512 [ 340.636894][ T2870] EXT4-fs: Invalid want_extra_isize 0 [ 341.461955][ T8] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 341.505725][ T28] audit: type=1400 audit(1754337271.339:1139): avc: denied { append } for pid=2873 comm="syz.5.512" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 342.165561][ T2884] loop4: detected capacity change from 0 to 1024 [ 342.183222][ T2884] EXT4-fs: Ignoring removed nobh option [ 342.194243][ T2884] EXT4-fs: Ignoring removed bh option [ 342.200004][ T2884] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 342.240992][ T2890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.514'. [ 342.268129][ T2884] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 342.408007][ T2895] syz.3.525[2895] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 342.408172][ T2895] syz.3.525[2895] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 342.704094][ T2896] overlayfs: conflicting lowerdir path [ 343.403991][ T287] EXT4-fs (loop4): unmounting filesystem. [ 343.966936][ T28] audit: type=1400 audit(1754337273.609:1140): avc: denied { unmount } for pid=974 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 345.517353][ T2914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.517'. [ 347.643828][ T2922] loop5: detected capacity change from 0 to 40427 [ 347.665963][ T2922] F2FS-fs (loop5): Mismatch start address, segment0(0) cp_blkaddr(512) [ 347.683660][ T2922] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 347.691238][ T2926] loop4: detected capacity change from 0 to 40427 [ 347.693219][ T2922] F2FS-fs (loop5): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 347.714333][ T2922] F2FS-fs (loop5): Found nat_bits in checkpoint [ 347.723640][ T2926] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 347.740876][ T2926] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 347.758874][ T2926] F2FS-fs (loop4): fault_injection options not supported [ 347.775334][ T2926] F2FS-fs (loop4): invalid crc value [ 347.789475][ T2922] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 347.797364][ T2926] F2FS-fs (loop4): Found nat_bits in checkpoint [ 347.806004][ T2922] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 347.864530][ T28] audit: type=1400 audit(1754337277.200:1141): avc: denied { setattr } for pid=2921 comm="syz.5.520" name="cpu.stat" dev="loop5" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 347.889494][ T2926] F2FS-fs (loop4): Start checkpoint disabled! [ 347.896564][ T2926] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 347.903696][ T2926] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 348.147939][ T28] audit: type=1400 audit(1754337277.467:1142): avc: denied { map } for pid=2921 comm="syz.5.520" path="/78/file2/memory.stat" dev="loop5" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 349.043864][ T28] audit: type=1400 audit(1754337277.698:1143): avc: denied { bind } for pid=2924 comm="syz.4.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 349.489592][ T2944] loop6: detected capacity change from 0 to 128 [ 349.496808][ T2944] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 349.578267][ T2944] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 350.104896][ T2922] syz.5.520: attempt to access beyond end of device [ 350.104896][ T2922] loop5: rw=2049, sector=53248, nr_sectors = 4096 limit=40427 [ 350.165606][ T2947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.524'. [ 350.243925][ T2922] syz.5.520: attempt to access beyond end of device [ 350.243925][ T2922] loop5: rw=2049, sector=49152, nr_sectors = 8 limit=40427 [ 350.400633][ T1642] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 350.431610][ T974] syz-executor: attempt to access beyond end of device [ 350.431610][ T974] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 350.773697][ T2956] SELinux: Context system_u:object_r:var_lib_t:s0 is not valid (left unmapped). [ 350.957399][ T2957] netlink: 12 bytes leftover after parsing attributes in process `syz.4.526'. [ 351.087483][ T28] audit: type=1400 audit(1754337279.895:1144): avc: denied { relabelto } for pid=2952 comm="syz.6.527" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:var_lib_t:s0" [ 351.236650][ T28] audit: type=1400 audit(1754337279.895:1145): avc: denied { associate } for pid=2952 comm="syz.6.527" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=287 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:var_lib_t:s0" [ 351.570101][ T28] audit: type=1400 audit(1754337280.615:1146): avc: denied { unlink } for pid=1655 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:var_lib_t:s0" [ 351.651884][ T2962] loop6: detected capacity change from 0 to 1024 [ 351.681484][ T2962] EXT4-fs: Ignoring removed nobh option [ 351.698052][ T2962] EXT4-fs: Ignoring removed bh option [ 351.709278][ T2962] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 352.097802][ T2972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.531'. [ 352.764744][ T2962] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 353.018820][ T2976] overlayfs: conflicting lowerdir path [ 354.350087][ T1655] EXT4-fs (loop6): unmounting filesystem. [ 355.741404][ T375] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 355.788376][ T3000] loop4: detected capacity change from 0 to 40427 [ 355.795531][ T3000] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 355.809494][ T3000] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 355.861574][ T3000] F2FS-fs (loop4): Found nat_bits in checkpoint [ 355.891023][ T3000] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 355.898179][ T3000] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 355.914792][ T3000] 9pnet_fd: Insufficient options for proto=fd [ 356.199910][ T375] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 356.212413][ T375] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 356.368205][ T375] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 356.387382][ T375] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.691667][ T375] usb 6-1: config 0 descriptor?? [ 357.782129][ T375] usbhid 6-1:0.0: can't add hid device: -71 [ 357.867941][ T375] usbhid: probe of 6-1:0.0 failed with error -71 [ 357.886274][ T375] usb 6-1: USB disconnect, device number 3 [ 358.150668][ T3024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.539'. [ 359.245242][ T3027] netlink: 12 bytes leftover after parsing attributes in process `syz.6.541'. [ 359.828321][ T3038] loop5: detected capacity change from 0 to 256 [ 359.893928][ T3038] FAT-fs (loop5): Unrecognized mount option "ÿÿÿÿÿÿÿÿ0x0000000000000000" or missing value [ 359.893975][ T28] audit: type=1400 audit(1754337288.294:1147): avc: denied { connect } for pid=3029 comm="syz.4.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 359.985191][ T2805] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 361.944771][ T3058] loop4: detected capacity change from 0 to 512 [ 361.951943][ T3058] EXT4-fs: Ignoring removed nomblk_io_submit option [ 362.675526][ T3057] netlink: 12 bytes leftover after parsing attributes in process `syz.2.547'. [ 363.193197][ T3058] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 363.578283][ T28] audit: type=1326 audit(1754337291.709:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3063 comm="syz.4.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a098eb69 code=0x7ffc0000 [ 363.697775][ T28] audit: type=1326 audit(1754337291.728:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3063 comm="syz.4.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43a098eb69 code=0x7ffc0000 [ 364.088117][ T28] audit: type=1326 audit(1754337291.728:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3063 comm="syz.4.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a098eb69 code=0x7ffc0000 [ 364.647037][ T28] audit: type=1326 audit(1754337291.728:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3063 comm="syz.4.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a098eb69 code=0x7ffc0000 [ 364.746011][ T28] audit: type=1326 audit(1754337291.737:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3063 comm="syz.4.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43a098eb69 code=0x7ffc0000 [ 365.095400][ T28] audit: type=1326 audit(1754337291.737:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3063 comm="syz.4.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a098eb69 code=0x7ffc0000 [ 365.630208][ T28] audit: type=1326 audit(1754337291.737:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3063 comm="syz.4.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f43a098eb69 code=0x7ffc0000 [ 365.653627][ T28] audit: type=1326 audit(1754337291.737:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3063 comm="syz.4.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a098eb69 code=0x7ffc0000 [ 365.731495][ T28] audit: type=1326 audit(1754337291.737:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3063 comm="syz.4.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f43a098eb69 code=0x7ffc0000 [ 365.809442][ T28] audit: type=1326 audit(1754337291.737:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3063 comm="syz.4.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a098eb69 code=0x7ffc0000 [ 365.860451][ T28] audit: type=1326 audit(1754337291.737:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3063 comm="syz.4.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f43a098eb69 code=0x7ffc0000 [ 365.884123][ T28] audit: type=1326 audit(1754337291.737:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3063 comm="syz.4.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a098eb69 code=0x7ffc0000 [ 365.914162][ T3090] netlink: 12 bytes leftover after parsing attributes in process `syz.4.554'. [ 366.015591][ T3091] netlink: 2 bytes leftover after parsing attributes in process `syz.2.555'. [ 366.106545][ T3091] bridge0: port 3(syz_tun) entered disabled state [ 366.117143][ T3091] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.124372][ T3091] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.233557][ T28] audit: type=1326 audit(1754337291.737:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3063 comm="syz.4.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a098eb69 code=0x7ffc0000 [ 366.258272][ T28] audit: type=1326 audit(1754337291.737:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3063 comm="syz.4.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f43a098eb69 code=0x7ffc0000 [ 366.281633][ T28] audit: type=1326 audit(1754337291.737:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3063 comm="syz.4.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a098eb69 code=0x7ffc0000 [ 366.369199][ T28] audit: type=1326 audit(1754337291.737:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3063 comm="syz.4.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a098eb69 code=0x7ffc0000 [ 367.009629][ T3101] netlink: 'syz.2.557': attribute type 4 has an invalid length. [ 367.036032][ T3101] netlink: 'syz.2.557': attribute type 4 has an invalid length. [ 367.361683][ T399] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 367.595860][ T399] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.667414][ T399] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 367.713200][ T399] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.780298][ T399] usb 3-1: config 0 descriptor?? [ 368.271500][ T3112] tipc: Started in network mode [ 368.276721][ T3112] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 368.285796][ T3112] tipc: Enabling of bearer rejected, failed to enable media [ 368.580813][ T399] dragonrise 0003:0079:0006.0001: item fetching failed at offset 4/5 [ 368.589299][ T399] dragonrise 0003:0079:0006.0001: parse failed [ 368.596809][ T399] dragonrise: probe of 0003:0079:0006.0001 failed with error -22 [ 368.979330][ T399] usb 3-1: USB disconnect, device number 3 [ 369.511278][ T3119] loop6: detected capacity change from 0 to 4096 [ 369.952281][ T3122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.562'. [ 369.963598][ T3119] EXT4-fs (loop6): Test dummy encryption mode enabled [ 370.041243][ T3119] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 370.405232][ T3128] 9pnet_fd: Insufficient options for proto=fd [ 371.370469][ T1655] EXT4-fs (loop6): unmounting filesystem. [ 371.637086][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 371.637122][ T28] audit: type=1326 audit(1754337299.149:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3132 comm="syz.5.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25118eb69 code=0x7ffc0000 [ 371.691566][ T3134] netlink: 8 bytes leftover after parsing attributes in process `syz.5.564'. [ 371.700906][ T3134] netlink: 8 bytes leftover after parsing attributes in process `syz.5.564'. [ 371.874828][ T28] audit: type=1326 audit(1754337299.176:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3132 comm="syz.5.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25118eb69 code=0x7ffc0000 [ 371.909426][ T28] audit: type=1326 audit(1754337299.176:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3132 comm="syz.5.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7ff25118eb69 code=0x7ffc0000 [ 371.939724][ T28] audit: type=1326 audit(1754337299.176:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3132 comm="syz.5.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25118eb69 code=0x7ffc0000 [ 372.068055][ T28] audit: type=1326 audit(1754337299.176:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3132 comm="syz.5.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25118eb69 code=0x7ffc0000 [ 372.092235][ T28] audit: type=1326 audit(1754337299.176:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3132 comm="syz.5.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff25118eb69 code=0x7ffc0000 [ 372.115719][ T28] audit: type=1326 audit(1754337299.176:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3132 comm="syz.5.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25118eb69 code=0x7ffc0000 [ 373.542349][ T3157] netlink: 12 bytes leftover after parsing attributes in process `syz.5.569'. [ 374.646904][ T28] audit: type=1326 audit(1754337299.176:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3132 comm="syz.5.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25118eb69 code=0x7ffc0000 [ 374.671297][ T3156] kthread_run failed with err -4 [ 374.708993][ T28] audit: type=1326 audit(1754337299.176:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3132 comm="syz.5.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff25118eb69 code=0x7ffc0000 [ 374.829001][ T28] audit: type=1326 audit(1754337299.176:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3132 comm="syz.5.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25118eb69 code=0x7ffc0000 [ 376.517420][ T3174] loop4: detected capacity change from 0 to 256 [ 376.524119][ T3174] FAT-fs (loop4): Unrecognized mount option "ÿÿÿÿÿÿÿÿ0x0000000000000000" or missing value [ 376.662413][ T3120] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 379.649373][ T3194] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3194 comm=syz.2.577 [ 379.898969][ T3197] 9pnet_fd: Insufficient options for proto=fd [ 380.548984][ T3191] overlayfs: missing 'lowerdir' [ 380.628489][ T3192] loop4: detected capacity change from 0 to 4096 [ 380.649723][ T3192] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 381.011731][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 381.011819][ T28] audit: type=1400 audit(1754337307.668:1284): avc: denied { create } for pid=3189 comm="syz.4.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 381.149485][ T28] audit: type=1400 audit(1754337307.686:1285): avc: denied { sys_admin } for pid=3189 comm="syz.4.578" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 381.172768][ T3217] syz.6.581[3217] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 381.172852][ T3217] syz.6.581[3217] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 382.268028][ T3221] loop6: detected capacity change from 0 to 40427 [ 382.291335][ T3221] F2FS-fs (loop6): fault_injection options not supported [ 382.298491][ T3221] F2FS-fs (loop6): heap/no_heap options were deprecated [ 382.305471][ T3221] F2FS-fs (loop6): Image doesn't support compression [ 382.313808][ T3221] F2FS-fs (loop6): invalid crc value [ 382.317385][ T3222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.579'. [ 382.397074][ T3221] F2FS-fs (loop6): Found nat_bits in checkpoint [ 382.440148][ T3221] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 382.964397][ T1655] syz-executor: attempt to access beyond end of device [ 382.964397][ T1655] loop6: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 384.019425][ T28] audit: type=1400 audit(1754337309.652:1286): avc: denied { create } for pid=3224 comm="syz.2.582" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 384.061637][ T28] audit: type=1400 audit(1754337309.652:1287): avc: denied { write } for pid=3224 comm="syz.2.582" name="file0" dev="tmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 384.084740][ T28] audit: type=1400 audit(1754337309.652:1288): avc: denied { open } for pid=3224 comm="syz.2.582" path="/121/file0" dev="tmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 384.107504][ T28] audit: type=1400 audit(1754337309.662:1289): avc: denied { ioctl } for pid=3224 comm="syz.2.582" path="/121/file0" dev="tmpfs" ino=707 ioctlcmd=0x127d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 384.561652][ T3235] netlink: 12 bytes leftover after parsing attributes in process `syz.5.584'. [ 386.592692][ T28] audit: type=1400 audit(1754337312.947:1290): avc: denied { unlink } for pid=288 comm="syz-executor" name="file0" dev="tmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 386.655463][ T3240] loop5: detected capacity change from 0 to 512 [ 386.737120][ T3240] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 386.799356][ T3240] EXT4-fs (loop5): 1 truncate cleaned up [ 386.934770][ T3240] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 387.956769][ T974] EXT4-fs (loop5): unmounting filesystem. [ 390.186629][ T287] EXT4-fs (loop4): unmounting filesystem. [ 393.139796][ T3278] tty tty31: ldisc open failed (-12), clearing slot 30 [ 393.383474][ T3300] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 393.534755][ T3301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.596'. [ 397.671609][ T3310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.597'. [ 398.340741][ T3307] loop5: detected capacity change from 0 to 512 [ 398.364753][ T3307] EXT4-fs: failed to create workqueue [ 398.371532][ T3307] EXT4-fs (loop5): mount failed [ 400.293773][ T28] audit: type=1400 audit(1754337325.011:1291): avc: denied { connect } for pid=3319 comm="syz.2.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 400.345791][ T28] audit: type=1400 audit(1754337325.057:1292): avc: denied { create } for pid=3319 comm="syz.2.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 400.387275][ T28] audit: type=1400 audit(1754337325.510:1293): avc: denied { ioctl } for pid=3319 comm="syz.2.601" path="socket:[25796]" dev="sockfs" ino=25796 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 400.734464][ T3337] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 400.747606][ T3337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.604'. [ 400.822590][ T375] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 400.850952][ T3346] netlink: 12 bytes leftover after parsing attributes in process `syz.5.603'. [ 400.872252][ T3348] netlink: 24 bytes leftover after parsing attributes in process `syz.3.606'. [ 401.062300][ T375] usb 5-1: unable to get BOS descriptor or descriptor too short [ 401.074353][ T375] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 401.109763][ T375] usb 5-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 401.182294][ T3354] loop6: detected capacity change from 0 to 512 [ 401.276303][ T375] usb 5-1: config 1 interface 0 has no altsetting 0 [ 401.344063][ T3354] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 401.352054][ T3354] System zones: 0-2, 18-18, 34-34 [ 401.447002][ T375] usb 5-1: string descriptor 0 read error: -22 [ 401.500652][ T3354] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #3: comm syz.6.607: corrupted inode contents [ 401.513252][ T3354] EXT4-fs error (device loop6): ext4_dirty_inode:6121: inode #3: comm syz.6.607: mark_inode_dirty error [ 401.527216][ T3354] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #3: comm syz.6.607: corrupted inode contents [ 401.540140][ T3354] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #3: comm syz.6.607: mark_inode_dirty error [ 401.553334][ T3354] Quota error (device loop6): write_blk: dquota write failed [ 401.561045][ T3354] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 401.571121][ T3354] EXT4-fs error (device loop6): ext4_acquire_dquot:6801: comm syz.6.607: Failed to acquire dquot type 0 [ 401.588278][ T3354] EXT4-fs (loop6): 1 orphan inode deleted [ 401.594170][ T3354] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 401.604377][ T3354] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 401.731116][ T375] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 401.869824][ T375] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.009513][ T375] usb 5-1: bad CDC descriptors [ 402.346889][ T419] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 402.396156][ T419] EXT4-fs error (device loop6): ext4_release_dquot:6837: comm kworker/u4:5: Failed to release dquot type 1 [ 402.447874][ T1655] EXT4-fs (loop6): unmounting filesystem. [ 402.513284][ T28] audit: type=1400 audit(1754337327.642:1294): avc: denied { map } for pid=3336 comm="syz.4.605" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 402.513484][ T3365] binder: BINDER_SET_CONTEXT_MGR already set [ 402.543223][ T3365] binder: 3336:3365 ioctl 4018620d 200000000040 returned -16 [ 402.614614][ T375] usb 5-1: USB disconnect, device number 3 [ 402.848757][ T462] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 402.887641][ T28] audit: type=1400 audit(1754337327.983:1295): avc: denied { listen } for pid=3366 comm="syz.5.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 402.987193][ T3369] bridge1: port 1(ip6gretap1) entered blocking state [ 402.993988][ T3369] bridge1: port 1(ip6gretap1) entered forwarding state [ 403.003188][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 403.012109][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 403.021056][ T3345] Bluetooth: hci0: command 0x1003 tx timeout [ 403.027421][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 403.044580][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 403.055033][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 403.063577][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 403.074398][ T462] usb 7-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 403.084244][ T462] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.093016][ T462] usb 7-1: Product: syz [ 403.097273][ T462] usb 7-1: Manufacturer: syz [ 403.103909][ T462] usb 7-1: SerialNumber: syz [ 403.116674][ T462] usb 7-1: config 0 descriptor?? [ 403.140920][ T462] usb 7-1: Waiting for MOTU Microbook II to boot up... [ 403.197968][ T462] usb 7-1: failed setting the sample rate for Motu MicroBook II: -22 [ 403.207961][ T462] snd-usb-audio: probe of 7-1:0.0 failed with error -22 [ 403.388451][ T462] usb 7-1: USB disconnect, device number 4 [ 403.656979][ T3379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.613'. [ 403.838641][ T3380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.612'. [ 404.013084][ T3383] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 405.249453][ T3412] loop5: detected capacity change from 0 to 256 [ 406.004200][ T3417] netlink: 12 bytes leftover after parsing attributes in process `syz.5.621'. [ 409.725028][ T3425] loop6: detected capacity change from 0 to 512 [ 409.743034][ T3425] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 409.827436][ T3425] EXT4-fs (loop6): orphan cleanup on readonly fs [ 409.834159][ T3425] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:511: comm syz.6.624: Block bitmap for bg 0 marked uninitialized [ 411.021242][ T3425] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 411.129715][ T3434] random: crng reseeded on system resumption [ 411.386797][ T28] audit: type=1400 audit(1754337335.598:1296): avc: denied { append } for pid=3421 comm="syz.2.623" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 411.410330][ T3425] EXT4-fs (loop6): 1 orphan inode deleted [ 411.416104][ T3425] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 411.492531][ T3425] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 411.516447][ T28] audit: type=1400 audit(1754337335.921:1297): avc: denied { ioctl } for pid=3421 comm="syz.2.623" path="/dev/snapshot" dev="devtmpfs" ino=91 ioctlcmd=0x3312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 411.559217][ T3425] EXT4-fs (loop6): re-mounted. Quota mode: none. [ 411.620231][ T28] audit: type=1400 audit(1754337336.032:1298): avc: denied { write } for pid=3421 comm="syz.2.623" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 411.743376][ T222] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 411.938397][ T222] usb 6-1: Using ep0 maxpacket: 32 [ 411.950405][ T222] usb 6-1: unable to get BOS descriptor or descriptor too short [ 411.958943][ T222] usb 6-1: config 4 has an invalid interface number: 154 but max is 0 [ 411.967439][ T222] usb 6-1: config 4 has no interface number 0 [ 411.973768][ T222] usb 6-1: config 4 interface 154 has no altsetting 0 [ 411.982111][ T222] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=90.05 [ 411.991214][ T222] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.999275][ T222] usb 6-1: Product: syz [ 412.003492][ T222] usb 6-1: Manufacturer: syz [ 412.008117][ T222] usb 6-1: SerialNumber: syz [ 412.014241][ T966] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 412.187670][ T966] usb 7-1: device descriptor read/64, error -71 [ 412.234208][ T222] usbhid 6-1:4.154: couldn't find an input interrupt endpoint [ 412.246577][ T222] usb 6-1: USB disconnect, device number 4 [ 412.480191][ T966] usb 7-1: device descriptor read/64, error -71 [ 412.772631][ T966] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 413.204493][ T3454] netlink: 8 bytes leftover after parsing attributes in process `syz.5.628'. [ 414.177122][ T3455] 9pnet_fd: Insufficient options for proto=fd [ 415.853375][ T28] audit: type=1400 audit(1754337338.367:1299): avc: denied { read } for pid=3443 comm="syz.2.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 416.003510][ T3462] loop5: detected capacity change from 0 to 512 [ 416.013746][ T1655] EXT4-fs (loop6): unmounting filesystem. [ 417.037463][ T3462] EXT4-fs (loop5): Test dummy encryption mode enabled [ 417.055651][ T3462] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 417.085034][ T966] usb 7-1: device descriptor read/64, error -71 [ 417.148478][ T3471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.632'. [ 417.406013][ T3462] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.634: bad orphan inode 131083 [ 417.588569][ T3462] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 417.641989][ T3473] bridge0: port 3(syz_tun) entered blocking state [ 417.648512][ T3473] bridge0: port 3(syz_tun) entered forwarding state [ 417.661592][ T974] EXT4-fs (loop5): unmounting filesystem. [ 418.242110][ T3473] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 418.407187][ T3473] device veth0_vlan left promiscuous mode [ 418.413255][ T3473] device veth0_vlan entered promiscuous mode [ 418.723244][ T3492] netlink: 96 bytes leftover after parsing attributes in process `syz.3.638'. [ 419.390422][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 419.406119][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 419.417114][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 419.476176][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 420.576533][ T419] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.583624][ T419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.592317][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 420.600878][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 420.609358][ T419] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.616499][ T419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.624188][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 420.633065][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 420.641490][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 420.650865][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 420.659694][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 420.670659][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 420.681325][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 420.709000][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 420.763973][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 421.039319][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 421.047751][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 421.056382][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 421.067617][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 421.076033][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 421.086356][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 421.098524][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 421.112075][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 421.123157][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 421.134813][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 421.145157][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 421.196194][ T3510] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 421.336271][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 421.368543][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 421.376218][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 421.399265][ T3512] loop6: detected capacity change from 0 to 512 [ 421.405861][ T3514] loop5: detected capacity change from 0 to 256 [ 421.413856][ T3512] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 421.419307][ T3514] exFAT-fs (loop5): bogus fat length [ 421.428296][ T3514] exFAT-fs (loop5): failed to read boot sector [ 421.434811][ T3514] exFAT-fs (loop5): failed to recognize exfat type [ 421.563816][ T3521] loop5: detected capacity change from 0 to 2048 [ 422.569912][ T3517] netlink: 8 bytes leftover after parsing attributes in process `syz.6.645'. [ 422.793266][ T3542] loop6: detected capacity change from 0 to 512 [ 422.873097][ T3546] loop5: detected capacity change from 0 to 128 [ 422.882130][ T3546] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 422.895780][ T3546] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 424.367924][ T3548] bridge0: port 3(syz_tun) entered disabled state [ 424.374653][ T3548] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.381924][ T3548] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.532998][ T3542] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 425.263739][ T3542] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 425.272633][ T3542] EXT4-fs (loop6): 1 truncate cleaned up [ 425.278469][ T3542] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 425.300418][ T28] audit: type=1400 audit(1754337348.677:1300): avc: denied { create } for pid=3541 comm="syz.6.656" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 426.413592][ T3542] EXT4-fs error (device loop6): ext4_append:79: inode #2: comm syz.6.656: Logical block already allocated [ 426.451178][ T1655] EXT4-fs (loop6): unmounting filesystem. [ 426.475212][ T951] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 426.543411][ T3576] netlink: 96 bytes leftover after parsing attributes in process `syz.6.665'. [ 426.579464][ T3579] loop6: detected capacity change from 0 to 1024 [ 426.650382][ T3579] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 426.659147][ T3579] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.710757][ T28] audit: type=1400 audit(1754337349.978:1301): avc: denied { rename } for pid=3578 comm="syz.6.666" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 426.759881][ T3579] EXT4-fs error (device loop6): ext4_get_first_dir_block:3605: inode #12: comm syz.6.666: directory missing '..' [ 427.092027][ T1655] EXT4-fs (loop6): unmounting filesystem. [ 427.149645][ T28] audit: type=1400 audit(1754337349.978:1302): avc: denied { unlink } for pid=3578 comm="syz.6.666" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 427.173787][ T3587] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 428.146635][ T28] audit: type=1400 audit(1754337349.978:1303): avc: denied { rename } for pid=3578 comm="syz.6.666" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 428.199882][ T28] audit: type=1400 audit(1754337349.978:1304): avc: denied { rmdir } for pid=3578 comm="syz.6.666" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 428.481984][ T3611] netlink: 20 bytes leftover after parsing attributes in process `syz.6.668'. [ 428.944590][ T3608] loop5: detected capacity change from 0 to 1024 [ 428.953072][ T3608] EXT4-fs: Ignoring removed i_version option [ 428.966972][ T3608] EXT4-fs (loop5): Test dummy encryption mode enabled [ 428.993014][ T3608] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 429.475570][ T3629] loop4: detected capacity change from 0 to 16 [ 429.519218][ T3629] erofs: (device loop4): mounted with root inode @ nid 36. [ 429.548029][ T3608] bridge0: port 2(vlan3) entered blocking state [ 429.560363][ T3608] bridge0: port 2(vlan3) entered disabled state [ 429.626648][ T28] audit: type=1400 audit(1754337352.664:1305): avc: denied { connect } for pid=3632 comm="syz.4.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 429.714354][ T3634] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=3634 comm=syz.6.676 [ 429.909391][ T28] audit: type=1326 audit(1754337352.923:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3636 comm="syz.4.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a098eb69 code=0x7ffc0000 [ 429.985000][ T974] EXT4-fs (loop5): unmounting filesystem. [ 430.083534][ T28] audit: type=1326 audit(1754337352.978:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3636 comm="syz.4.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f43a098eb69 code=0x7ffc0000 [ 430.172372][ T28] audit: type=1326 audit(1754337352.978:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3636 comm="syz.4.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a098eb69 code=0x7ffc0000 [ 430.281644][ T3651] random: crng reseeded on system resumption [ 430.641185][ T28] audit: type=1400 audit(1754337353.135:1309): avc: denied { ioctl } for pid=3644 comm="syz.5.683" path="socket:[25426]" dev="sockfs" ino=25426 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 431.094781][ T966] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 431.111121][ T28] audit: type=1400 audit(1754337354.039:1310): avc: denied { getopt } for pid=3666 comm="syz.4.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 431.331404][ T3678] loop4: detected capacity change from 0 to 128 [ 431.363098][ T3678] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 431.383333][ T3678] ext4 filesystem being mounted at /134/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 431.412105][ T3678] EXT4-fs warning (device loop4): ext4_group_add:1743: No reserved GDT blocks, can't resize [ 431.429935][ T287] EXT4-fs (loop4): unmounting filesystem. [ 431.441129][ T966] usb 6-1: config 0 has an invalid interface number: 220 but max is 0 [ 431.449383][ T966] usb 6-1: config 0 has an invalid interface descriptor of length 2, skipping [ 431.472489][ T966] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.482810][ T966] usb 6-1: config 0 has no interface number 0 [ 431.501519][ T966] usb 6-1: config 0 interface 220 altsetting 0 endpoint 0xB has an invalid bInterval 218, changing to 11 [ 431.520455][ T966] usb 6-1: config 0 interface 220 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 431.533664][ T966] usb 6-1: New USB device found, idVendor=08ca, idProduct=0010, bcdDevice=48.e3 [ 431.542882][ T966] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.350198][ T966] usb 6-1: config 0 descriptor?? [ 432.356454][ T966] aiptek 6-1:0.220: interface has no int in endpoints, but must have minimum 1 [ 432.487777][ T28] audit: type=1400 audit(1754337355.304:1311): avc: denied { nlmsg_read } for pid=3693 comm="syz.4.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 432.605388][ T3700] loop6: detected capacity change from 0 to 256 [ 432.728932][ T3700] FAT-fs (loop6): Directory bread(block 64) failed [ 432.735684][ T3700] FAT-fs (loop6): Directory bread(block 65) failed [ 432.742548][ T3700] FAT-fs (loop6): Directory bread(block 66) failed [ 432.749157][ T3700] FAT-fs (loop6): Directory bread(block 67) failed [ 432.755955][ T3700] FAT-fs (loop6): Directory bread(block 68) failed [ 432.762893][ T3700] FAT-fs (loop6): Directory bread(block 69) failed [ 432.769768][ T3700] FAT-fs (loop6): Directory bread(block 70) failed [ 432.776418][ T3700] FAT-fs (loop6): Directory bread(block 71) failed [ 432.783266][ T3700] FAT-fs (loop6): Directory bread(block 72) failed [ 432.789923][ T3700] FAT-fs (loop6): Directory bread(block 73) failed [ 433.571229][ T3690] netlink: 28 bytes leftover after parsing attributes in process `syz.6.695'. [ 433.925445][ T19] usb 6-1: USB disconnect, device number 5 [ 433.991582][ T28] audit: type=1400 audit(1754337356.698:1312): avc: denied { append } for pid=3717 comm="syz.4.703" name="usbmon1" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 434.069213][ T28] audit: type=1400 audit(1754337356.762:1313): avc: denied { ioctl } for pid=3717 comm="syz.4.703" path="/dev/usbmon1" dev="devtmpfs" ino=160 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 434.264223][ T3723] random: crng reseeded on system resumption [ 434.625315][ T222] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 435.231015][ T222] usb 5-1: Using ep0 maxpacket: 16 [ 435.257846][ T222] usb 5-1: config 0 has no interfaces? [ 436.010163][ T222] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=c8.06 [ 436.031918][ T3755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.716'. [ 436.041047][ T222] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.050109][ T28] audit: type=1400 audit(1754337358.599:1314): avc: denied { listen } for pid=3754 comm="syz.2.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 436.050307][ T3755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.716'. [ 436.081898][ T222] usb 5-1: Product: syz [ 436.086202][ T222] usb 5-1: Manufacturer: syz [ 436.103001][ T222] usb 5-1: SerialNumber: syz [ 436.112019][ T222] r8152-cfgselector 5-1: config 0 descriptor?? [ 436.119218][ T3755] netlink: 'syz.3.716': attribute type 1 has an invalid length. [ 436.570578][ T222] usb 5-1: USB disconnect, device number 4 [ 439.305814][ T28] audit: type=1400 audit(1754337361.608:1315): avc: denied { listen } for pid=3809 comm="syz.2.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 442.047776][ T28] audit: type=1400 audit(1754337364.137:1316): avc: denied { getopt } for pid=3844 comm="syz.4.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 442.071172][ T3853] netlink: 396 bytes leftover after parsing attributes in process `syz.2.749'. [ 442.523522][ T375] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 443.184339][ T375] usb 7-1: Using ep0 maxpacket: 16 [ 443.232631][ T375] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 443.260258][ T3893] Driver unsupported XDP return value 0 on prog (id 539) dev N/A, expect packet loss! [ 443.270192][ T375] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 443.278692][ T3897] netlink: 12 bytes leftover after parsing attributes in process `syz.5.766'. [ 443.292066][ T375] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 443.328903][ T375] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.354944][ T375] usb 7-1: Product: syz [ 443.414778][ T375] usb 7-1: Manufacturer: syz [ 443.439393][ T375] usb 7-1: SerialNumber: syz [ 443.690376][ T375] usb 7-1: 0:2 : does not exist [ 443.729555][ T375] usb 7-1: 5:0: failed to get current value for ch 1 (-22) [ 443.758643][ T375] usb 7-1: 5:0: cannot get min/max values for control 4 (id 5) [ 443.773739][ T375] usb 7-1: USB disconnect, device number 7 [ 443.864368][ T3918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.765'. [ 443.899339][ T966] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 444.008656][ T3316] udevd[3316]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 444.094333][ T966] usb 5-1: Using ep0 maxpacket: 32 [ 444.101757][ T966] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.114143][ T966] usb 5-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=5b.13 [ 444.123465][ T966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.131705][ T966] usb 5-1: Product: syz [ 444.135974][ T966] usb 5-1: Manufacturer: syz [ 444.140875][ T966] usb 5-1: SerialNumber: syz [ 444.146588][ T966] usb 5-1: config 0 descriptor?? [ 444.153412][ T966] rndis_host 5-1:0.0: skipping garbage [ 444.158961][ T966] usb 5-1: bad CDC descriptors [ 444.266243][ T3923] new mount options do not match the existing superblock, will be ignored [ 444.320884][ T3925] loop6: detected capacity change from 0 to 128 [ 444.327848][ T3925] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 444.347186][ T3925] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 444.373869][ T375] usb 5-1: USB disconnect, device number 5 [ 444.403563][ T28] audit: type=1400 audit(1754337366.306:1317): avc: denied { sys_module } for pid=3926 comm="syz.5.775" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 444.404399][ T3930] kernel read not supported for file /policy (pid: 3930 comm: syz.5.775) [ 444.434094][ T28] audit: type=1400 audit(1754337366.306:1318): avc: denied { module_load } for pid=3926 comm="syz.5.775" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 445.101939][ T966] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 445.174343][ T10] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 445.266288][ T3961] loop4: detected capacity change from 0 to 512 [ 445.298192][ T966] usb 6-1: Using ep0 maxpacket: 32 [ 445.308248][ T3961] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.790: inode #1: comm syz.4.790: iget: illegal inode # [ 445.321377][ T966] usb 6-1: config 4 has an invalid interface number: 128 but max is 0 [ 445.321638][ T3961] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.790: error while reading EA inode 1 err=-117 [ 445.330207][ T966] usb 6-1: config 4 has no interface number 0 [ 445.342737][ T3961] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.790: inode #1: comm syz.4.790: iget: illegal inode # [ 445.348332][ T966] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.361535][ T3961] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.790: error while reading EA inode 1 err=-117 [ 445.372115][ T966] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.384272][ T3961] EXT4-fs (loop4): 1 orphan inode deleted [ 445.399620][ T3961] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 445.401891][ T966] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 445.477307][ T966] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.779973][ T287] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 446.095378][ T28] audit: type=1400 audit(1754337367.866:1319): avc: denied { unlink } for pid=287 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 446.129019][ T287] ------------[ cut here ]------------ [ 446.134696][ T287] kernel BUG at fs/namei.c:2954! [ 446.141463][ T287] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 446.147559][ T287] CPU: 1 PID: 287 Comm: syz-executor Not tainted 6.1.145-syzkaller-00038-g3b4ff5af8d36 #0 [ 446.157478][ T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 446.167569][ T287] RIP: 0010:may_delete+0x701/0x710 [ 446.172704][ T287] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 fe ff ff 48 89 df e8 a0 16 f4 ff e9 77 fe ff ff e8 76 b3 af ff 0f 0b e8 6f b3 af ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 446.192331][ T287] RSP: 0018:ffffc9000db0fc20 EFLAGS: 00010293 [ 446.198418][ T287] RAX: ffffffff81c04f11 RBX: ffff888119250ee0 RCX: ffff8881165f5100 [ 446.206420][ T287] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 446.214398][ T287] RBP: ffffc9000db0fc88 R08: 0000000000000004 R09: 0000000000000003 [ 446.222384][ T287] R10: fffff52001b61f64 R11: 1ffff92001b61f64 R12: dffffc0000000000 [ 446.230369][ T287] R13: 0000000000000001 R14: ffff888137a71360 R15: 1ffff1102324a1dc [ 446.238359][ T287] FS: 0000555584fb3500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 446.247391][ T287] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 446.253994][ T287] CR2: 0000555584fde528 CR3: 000000012fec6000 CR4: 00000000003506a0 [ 446.261988][ T287] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 446.269979][ T287] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 446.277960][ T287] Call Trace: [ 446.281247][ T287] [ 446.284191][ T287] vfs_rmdir+0x32/0x500 [ 446.288369][ T287] incfs_kill_sb+0x105/0x220 [ 446.292973][ T287] deactivate_locked_super+0xb5/0x120 [ 446.298362][ T287] deactivate_super+0xaf/0xe0 [ 446.303070][ T287] cleanup_mnt+0x45f/0x4e0 [ 446.307508][ T287] __cleanup_mnt+0x19/0x20 [ 446.311940][ T287] task_work_run+0x1db/0x240 [ 446.316546][ T287] ? __cfi_task_work_run+0x10/0x10 [ 446.321672][ T287] ? __x64_sys_umount+0x125/0x160 [ 446.326797][ T287] ? __cfi___x64_sys_umount+0x10/0x10 [ 446.332185][ T287] exit_to_user_mode_loop+0x9b/0xb0 [ 446.337395][ T287] exit_to_user_mode_prepare+0x5a/0xa0 [ 446.342866][ T287] syscall_exit_to_user_mode+0x1a/0x30 [ 446.348357][ T287] do_syscall_64+0x58/0xa0 [ 446.352789][ T287] ? clear_bhb_loop+0x30/0x80 [ 446.357480][ T287] ? clear_bhb_loop+0x30/0x80 [ 446.362172][ T287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 446.368077][ T287] RIP: 0033:0x7f43a098fe97 [ 446.372515][ T287] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 446.392134][ T287] RSP: 002b:00007ffdd2868b88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 446.400662][ T287] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f43a098fe97 [ 446.408648][ T287] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd2868c40 [ 446.416627][ T287] RBP: 00007ffdd2868c40 R08: 0000000000000000 R09: 0000000000000000 [ 446.424608][ T287] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdd2869d30 [ 446.432589][ T287] R13: 00007f43a0a11bdd R14: 000000000006a5d4 R15: 00007ffdd286ae00 [ 446.440580][ T287] [ 446.443617][ T287] Modules linked in: [ 446.503489][ T287] ---[ end trace 0000000000000000 ]--- [ 446.509031][ T287] RIP: 0010:may_delete+0x701/0x710 [ 446.514642][ T287] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 fe ff ff 48 89 df e8 a0 16 f4 ff e9 77 fe ff ff e8 76 b3 af ff 0f 0b e8 6f b3 af ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 446.534823][ T287] RSP: 0018:ffffc9000db0fc20 EFLAGS: 00010293 [ 446.541756][ T966] hub 6-1:4.128: USB hub found [ 446.546982][ T287] RAX: ffffffff81c04f11 RBX: ffff888119250ee0 RCX: ffff8881165f5100 [ 446.555110][ T287] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 446.563217][ T287] RBP: ffffc9000db0fc88 R08: 0000000000000004 R09: 0000000000000003 [ 446.571284][ T287] R10: fffff52001b61f64 R11: 1ffff92001b61f64 R12: dffffc0000000000 [ 446.584756][ T287] R13: 0000000000000001 R14: ffff888137a71360 R15: 1ffff1102324a1dc [ 446.594091][ T287] FS: 0000555584fb3500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 446.603245][ T287] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 446.610103][ T287] CR2: 00005555860794a8 CR3: 000000012fec6000 CR4: 00000000003506a0 [ 446.618227][ T287] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 446.626614][ T287] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 446.635409][ T287] Kernel panic - not syncing: Fatal exception [ 446.641813][ T287] Kernel Offset: disabled [ 446.646146][ T287] Rebooting in 86400 seconds..