last executing test programs: 13.871714533s ago: executing program 1 (id=525): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) sendto$packet(r1, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 13.813801834s ago: executing program 1 (id=526): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000001280), 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00'}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) 12.871566088s ago: executing program 1 (id=529): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 12.862580328s ago: executing program 1 (id=531): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0xad3c3b, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) chroot(&(0x7f0000000080)='./file0/../file0\x00') mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) 12.849373279s ago: executing program 1 (id=532): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c56", 0x10}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000100e7000c8000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_clone(0x880000, &(0x7f0000000380)="3902e4329b94fb9584609d72c3b8de7687ea81b7547e8af9e1b69e9842a25236ff087d8bd66653a720c73641c6f2219ea9324a8ed347bef845be29e21cb9fd6b2dbd1c7d40ee416846a240c441136228760ba66e9b107d788aceea519dff79713dda391ee72562696f301c", 0x6b, &(0x7f0000000300), &(0x7f0000000400), &(0x7f00000005c0)="d41719e74e6ea0f50f8a4e2deeae6923073fb026e309f4be045bdd028018038d156dfe326dccf361614beedaff477bee7d54432db1c18494f7f20718a2defb3d833d6a066d6692f57c3b47db859285") 12.73657621s ago: executing program 1 (id=535): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) r7 = openat$cgroup_freezer_state(r5, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r7, &(0x7f00000000c0)='THAWED\x00', 0x7) 12.72196045s ago: executing program 32 (id=535): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) r7 = openat$cgroup_freezer_state(r5, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r7, &(0x7f00000000c0)='THAWED\x00', 0x7) 7.637017716s ago: executing program 0 (id=552): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0x13, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=@bridge_getneigh={0x20, 0x1e, 0xb7b6511a36acb75d}, 0x20}}, 0x0) 5.038836865s ago: executing program 0 (id=567): mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) pipe2$9p(&(0x7f00000000c0), 0x0) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='ext4_ext_remove_space\x00', r6}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x92020007) utime(&(0x7f0000000200)='./file0\x00', 0x0) 4.918966097s ago: executing program 0 (id=568): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) r6 = openat$cgroup_freezer_state(r4, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f00000000c0)='THAWED\x00', 0x7) 4.267978296s ago: executing program 2 (id=575): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 3.601257656s ago: executing program 0 (id=576): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) r7 = openat$cgroup_freezer_state(r5, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r7, &(0x7f00000000c0)='THAWED\x00', 0x7) 3.398988729s ago: executing program 5 (id=577): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xd, 0xd}, {0xc}, {0x8, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) recvmmsg(r2, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f00000052c0)=""/235, 0xeb}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x2}, 0x3}], 0x1, 0x0, 0x0) 3.39129336s ago: executing program 4 (id=578): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff0000", @ANYRES32], 0x3c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r8, 0x0, r7, 0x0, 0x1, 0x0) fcntl$setpipe(r7, 0x408, 0x7) getsockopt$inet6_buf(r4, 0x29, 0x18, 0x0, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCGIFNETMASK(r9, 0x891b, &(0x7f0000000480)={'macvtap0\x00', {0x2, 0x0, @loopback}}) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r2) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0xdc}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) 3.262116751s ago: executing program 5 (id=579): unshare(0x62040200) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r0, @ANYBLOB="140001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 2.65525094s ago: executing program 5 (id=580): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) pipe(&(0x7f0000000340)) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32], 0x48) 2.240657116s ago: executing program 3 (id=581): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 2.240011446s ago: executing program 2 (id=582): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40) 2.239021736s ago: executing program 0 (id=583): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 2.237910567s ago: executing program 4 (id=584): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00'}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) r0 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000006c0)={0x2, 0x0, [{0x0, 0xe, &(0x7f00000001c0)=""/14}, {0x2, 0xe0, &(0x7f0000000580)=""/224}]}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000", @ANYRES32=0x0], 0x4c}}, 0x0) 2.201629867s ago: executing program 3 (id=585): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 2.193091747s ago: executing program 2 (id=586): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c56", 0x10}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000100e7000c8000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00"/14], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_clone(0x880000, &(0x7f0000000380)="3902e4329b94fb9584609d72c3b8de7687ea81b7547e8af9e1b69e9842a25236ff087d8bd66653a720c73641c6f2219ea9324a8ed347bef845be29e21cb9fd6b2dbd1c7d40ee416846a240c441136228760ba66e9b107d788aceea519dff79713dda391ee72562696f301c", 0x6b, &(0x7f0000000300), &(0x7f0000000400), &(0x7f00000005c0)="d41719e74e6ea0f50f8a4e2deeae6923073fb026e309f4be045bdd028018038d156dfe326dccf361614beedaff477bee7d54432db1c18494f7f20718a2defb3d833d6a066d6692f57c3b47db859285") 2.127962308s ago: executing program 2 (id=587): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x8, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 2.054843389s ago: executing program 4 (id=588): write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000000000000040000000300", @ANYBLOB, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000093c0)={0x2020}, 0x2020) 2.03056121s ago: executing program 3 (id=589): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.99157354s ago: executing program 2 (id=590): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0xc4, &(0x7f00000002c0)=""/196}, 0x80) 1.98113137s ago: executing program 2 (id=591): sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0xa) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg(r5, 0x0, 0x104) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x240, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x4) 1.197580572s ago: executing program 5 (id=592): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={0x0, 0x0, 0x38, 0x0, 0x9, 0x3}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r9 = openat$tun(0xffffffffffffff9c, 0x0, 0x20241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x200, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x4040011) 1.089070574s ago: executing program 3 (id=593): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 997.589295ms ago: executing program 4 (id=594): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) r7 = openat$cgroup_freezer_state(r5, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r7, &(0x7f00000000c0)='THAWED\x00', 0x7) 983.527345ms ago: executing program 0 (id=595): syz_emit_ethernet(0x4e, &(0x7f0000000500)=ANY=[@ANYBLOB="bbbbbbbbbbbbfa2461109af486dd6001144e00183a0100"/34], 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/keys\x00', 0x0, 0x0) read$hiddev(r0, &(0x7f00000000c0)=""/4092, 0xffc) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000010c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0xf0, 0x11, 0x713, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback}, {@in=@private, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) 578.364611ms ago: executing program 3 (id=596): write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000030000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, 0x0) read$FUSE(r3, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) 289.842516ms ago: executing program 3 (id=597): fchdir(0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4), 0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r5, 0x6, 0x15, 0x0, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700382900000000000000000000f9000000000000ff020000000000000000000000000001"], 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4, &(0x7f0000000080)={[{@noinline_xattr}, {@heap}, {@alloc_mode_def}, {@six_active_logs}, {@user_xattr}, {@checkpoint_enable}, {@discard_unit_section}, {@noacl}, {@io_bits={'io_bits', 0x3d, 0x74}}, {@memory_normal}, {@noextent_cache}, {@noinline_dentry}, {@nogc_merge}, {@memory_low}]}, 0x3, 0x550b, &(0x7f0000000180)="$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") syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010100ffd9f810f80600b0f97d0102030109021b0401000000020904000001ff615a000905880b"], 0x0) 217.731857ms ago: executing program 5 (id=598): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c56", 0x10}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000100e7000c8000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00"/14], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_clone(0x880000, &(0x7f0000000380)="3902e4329b94fb9584609d72c3b8de7687ea81b7547e8af9e1b69e9842a25236ff087d8bd66653a720c73641c6f2219ea9324a8ed347bef845be29e21cb9fd6b2dbd1c7d40ee416846a240c441136228760ba66e9b107d788aceea519dff79713dda391ee72562696f301c", 0x6b, &(0x7f0000000300), &(0x7f0000000400), &(0x7f00000005c0)="d41719e74e6ea0f50f8a4e2deeae6923073fb026e309f4be045bdd028018038d156dfe326dccf361614beedaff477bee7d54432db1c18494f7f20718a2defb3d833d6a066d6692f57c3b47db859285") 180.540217ms ago: executing program 5 (id=599): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00'}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) r0 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000006c0)={0x2, 0x0, [{0x0, 0xe, &(0x7f00000001c0)=""/14}, {0x2, 0xe0, &(0x7f0000000580)=""/224}]}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000", @ANYRES32=0x0], 0x4c}}, 0x0) 75.829089ms ago: executing program 4 (id=600): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 0s ago: executing program 4 (id=601): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x8, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.149' (ED25519) to the list of known hosts. [ 21.523626][ T30] audit: type=1400 audit(1751598707.525:64): avc: denied { mounton } for pid=273 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.524746][ T273] cgroup: Unknown subsys name 'net' [ 21.546260][ T30] audit: type=1400 audit(1751598707.525:65): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.573517][ T30] audit: type=1400 audit(1751598707.555:66): avc: denied { unmount } for pid=273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.573683][ T273] cgroup: Unknown subsys name 'devices' [ 21.772421][ T273] cgroup: Unknown subsys name 'hugetlb' [ 21.778023][ T273] cgroup: Unknown subsys name 'rlimit' [ 22.003743][ T30] audit: type=1400 audit(1751598708.005:67): avc: denied { setattr } for pid=273 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.027000][ T30] audit: type=1400 audit(1751598708.005:68): avc: denied { mounton } for pid=273 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.042300][ T275] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.051744][ T30] audit: type=1400 audit(1751598708.005:69): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.083462][ T30] audit: type=1400 audit(1751598708.065:70): avc: denied { relabelto } for pid=275 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.103145][ T273] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.108881][ T30] audit: type=1400 audit(1751598708.065:71): avc: denied { write } for pid=275 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.143090][ T30] audit: type=1400 audit(1751598708.105:72): avc: denied { read } for pid=273 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.168626][ T30] audit: type=1400 audit(1751598708.105:73): avc: denied { open } for pid=273 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.189238][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.196309][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.203880][ T281] device bridge_slave_0 entered promiscuous mode [ 23.211886][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.218913][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.226253][ T281] device bridge_slave_1 entered promiscuous mode [ 23.298936][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.306018][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.313395][ T282] device bridge_slave_0 entered promiscuous mode [ 23.320427][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.327453][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.334893][ T282] device bridge_slave_1 entered promiscuous mode [ 23.393150][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.400638][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.407879][ T286] device bridge_slave_0 entered promiscuous mode [ 23.415024][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.422125][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.429536][ T286] device bridge_slave_1 entered promiscuous mode [ 23.469903][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.476945][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.484486][ T283] device bridge_slave_0 entered promiscuous mode [ 23.504831][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.511933][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.519485][ T283] device bridge_slave_1 entered promiscuous mode [ 23.531407][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.538437][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.545734][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.552763][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.590629][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.597667][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.605258][ T284] device bridge_slave_0 entered promiscuous mode [ 23.621880][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.628910][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.636269][ T284] device bridge_slave_1 entered promiscuous mode [ 23.667567][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.674629][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.681887][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.688895][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.744133][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.752922][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.761989][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.769175][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.777344][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.784777][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.803575][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.811362][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.838937][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.846848][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.855560][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.862583][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.888691][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.896856][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.903883][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.922637][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.937198][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.951276][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.973384][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.981285][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.989350][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.996378][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.003907][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.012256][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.019262][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.026748][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.036003][ T281] device veth0_vlan entered promiscuous mode [ 24.048091][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.055997][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.063563][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.071888][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.078909][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.086353][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.094863][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.102523][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.110222][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.124701][ T281] device veth1_macvtap entered promiscuous mode [ 24.132206][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.140768][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.148763][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.156732][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.164251][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.172424][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.179429][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.190167][ T282] device veth0_vlan entered promiscuous mode [ 24.207472][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.215862][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.224384][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.232752][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.251185][ T281] request_module fs-gadgetfs succeeded, but still no fs? [ 24.251228][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.265718][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.273342][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.281591][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.289485][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.297619][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.305655][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.313690][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.321661][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.330375][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.338456][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.345488][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.354286][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.362017][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.370078][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.378820][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.387252][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.409985][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.418427][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.433104][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.440168][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.447983][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.456729][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.464997][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.473216][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.493995][ T282] device veth1_macvtap entered promiscuous mode [ 24.505678][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.513670][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.522911][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.531650][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.539541][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.547660][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.556193][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.565639][ T283] device veth0_vlan entered promiscuous mode [ 24.576869][ T286] device veth0_vlan entered promiscuous mode [ 24.590396][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.598297][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.605963][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.615209][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.624540][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.632532][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.640677][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.648982][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.657740][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.666953][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.676009][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.683674][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.694532][ T284] device veth0_vlan entered promiscuous mode [ 24.746486][ T286] device veth1_macvtap entered promiscuous mode [ 24.753299][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.761521][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.769927][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.778117][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.786418][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.794128][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.801596][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.816920][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.829901][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.867306][ T284] device veth1_macvtap entered promiscuous mode [ 24.938951][ T283] device veth1_macvtap entered promiscuous mode [ 25.062974][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.073991][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.082394][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.090451][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.098663][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.107984][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.116015][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.124189][ T319] loop2: detected capacity change from 0 to 1024 [ 25.124758][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.139242][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.147786][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.156281][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.164951][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.187393][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.196026][ T319] EXT4-fs (loop2): Ignoring removed orlov option [ 25.203474][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.212486][ T319] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 25.220591][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.229220][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.317009][ T319] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x000000000000007c,orlov,nogrpid,nodiscard,nomblk_io_submit,,errors=continue. Quota mode: none. [ 25.381709][ T339] syz.4.11[339] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 25.381785][ T339] syz.4.11[339] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 25.744064][ T347] loop0: detected capacity change from 0 to 512 [ 25.802801][ T347] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 25.880178][ T347] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 25.919598][ T347] EXT4-fs (loop0): 1 truncate cleaned up [ 25.948287][ T333] loop1: detected capacity change from 0 to 40427 [ 25.964592][ T333] F2FS-fs (loop1): fault_injection options not supported [ 25.976262][ T333] F2FS-fs (loop1): invalid crc value [ 25.983421][ T333] F2FS-fs (loop1): Found nat_bits in checkpoint [ 25.991514][ T347] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 26.059057][ T333] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 26.789907][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 26.789925][ T30] audit: type=1400 audit(1751598712.195:118): avc: denied { name_bind } for pid=346 comm="syz.0.14" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 26.891143][ T364] hub 8-0:1.0: USB hub found [ 26.896492][ T364] hub 8-0:1.0: 1 port detected [ 27.093115][ T30] audit: type=1400 audit(1751598712.265:119): avc: denied { write } for pid=346 comm="syz.0.14" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.106150][ T368] input: syz1 as /devices/virtual/input/input4 [ 27.159879][ T30] audit: type=1400 audit(1751598712.265:120): avc: denied { add_name } for pid=346 comm="syz.0.14" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.185499][ T30] audit: type=1400 audit(1751598712.265:121): avc: denied { create } for pid=346 comm="syz.0.14" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 27.206607][ T30] audit: type=1400 audit(1751598712.275:122): avc: denied { read } for pid=346 comm="syz.0.14" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 27.230025][ T30] audit: type=1400 audit(1751598712.275:123): avc: denied { open } for pid=346 comm="syz.0.14" path="/4/file2/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 27.232692][ T284] attempt to access beyond end of device [ 27.232692][ T284] loop1: rw=2049, want=45104, limit=40427 [ 27.256791][ T30] audit: type=1400 audit(1751598712.325:124): avc: denied { lock } for pid=346 comm="syz.0.14" path="/4/file2/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 27.297487][ T30] audit: type=1400 audit(1751598712.885:125): avc: denied { write } for pid=356 comm="syz.4.16" name="001" dev="devtmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 27.354731][ T375] loop3: detected capacity change from 0 to 1024 [ 27.435620][ T30] audit: type=1400 audit(1751598712.975:126): avc: denied { read append open } for pid=331 comm="syz.1.2" path="/0/file1/cgroup.controllers" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 27.460339][ T375] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 27.468676][ T30] audit: type=1400 audit(1751598712.975:127): avc: denied { write } for pid=331 comm="syz.1.2" name="cgroup.controllers" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 27.976048][ T383] syz.2.21[383] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 27.976393][ T383] syz.2.21[383] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.005743][ T383] loop2: detected capacity change from 0 to 256 [ 28.250787][ T383] exfat: Deprecated parameter 'utf8' [ 28.256215][ T383] exfat: Deprecated parameter 'utf8' [ 28.270574][ T383] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 28.970612][ T398] syz.1.23[398] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.970700][ T398] syz.1.23[398] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.988986][ T395] loop4: detected capacity change from 0 to 128 [ 29.040674][ T395] ======================================================= [ 29.040674][ T395] WARNING: The mand mount option has been deprecated and [ 29.040674][ T395] and is ignored by this kernel. Remove the mand [ 29.040674][ T395] option from the mount to silence this warning. [ 29.040674][ T395] ======================================================= [ 29.110989][ T395] EXT4-fs (loop4): Test dummy encryption mode enabled [ 29.117859][ T395] EXT4-fs (loop4): Test dummy encryption mode enabled [ 29.124715][ T395] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 29.132076][ T395] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 29.150056][ T395] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,nomblk_io_submit,,errors=continue. Quota mode: none. [ 29.168734][ T395] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 29.444630][ T395] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 29.644450][ T410] hub 8-0:1.0: USB hub found [ 29.649941][ T410] hub 8-0:1.0: 1 port detected [ 30.036091][ T418] syz.4.32[418] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.036136][ T418] syz.4.32[418] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.560163][ T427] hub 8-0:1.0: USB hub found [ 30.576013][ T427] hub 8-0:1.0: 1 port detected [ 30.804724][ T421] syz.0.33 (421) used greatest stack depth: 22232 bytes left [ 31.229656][ T439] syz.0.39[439] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.229734][ T439] syz.0.39[439] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.265143][ T441] loop0: detected capacity change from 0 to 512 [ 31.299140][ T443] loop3: detected capacity change from 0 to 256 [ 31.321501][ T441] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 31.332175][ T443] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 31.343955][ T441] EXT4-fs (loop0): 1 truncate cleaned up [ 31.348224][ T443] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 31.349671][ T441] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 31.360360][ T443] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 31.927930][ T448] xt_CT: No such helper "snmp" [ 32.251036][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 32.251049][ T30] audit: type=1400 audit(1751598718.255:155): avc: denied { name_bind } for pid=452 comm="syz.1.44" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 32.279975][ T30] audit: type=1400 audit(1751598718.255:156): avc: denied { node_bind } for pid=452 comm="syz.1.44" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 32.663951][ T30] audit: type=1400 audit(1751598718.665:157): avc: denied { ioctl } for pid=454 comm="syz.3.45" path="socket:[16610]" dev="sockfs" ino=16610 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.688881][ T30] audit: type=1400 audit(1751598718.665:158): avc: denied { read } for pid=454 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.759596][ T30] audit: type=1400 audit(1751598718.755:159): avc: denied { create } for pid=455 comm="syz.0.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 33.205905][ T384] Bluetooth: hci0: Frame reassembly failed (-84) [ 33.231826][ T30] audit: type=1400 audit(1751598719.235:160): avc: denied { ioctl } for pid=476 comm="syz.0.51" path="socket:[16637]" dev="sockfs" ino=16637 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.322966][ T482] loop4: detected capacity change from 0 to 2048 [ 34.754711][ T492] loop3: detected capacity change from 0 to 512 [ 34.787196][ T482] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 35.174815][ T492] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 35.210982][ T492] EXT4-fs (loop3): 1 truncate cleaned up [ 35.220085][ T492] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 35.357458][ T313] Bluetooth: hci0: command 0x1003 tx timeout [ 36.797683][ T475] Bluetooth: hci0: sending frame failed (-49) [ 37.078970][ T30] audit: type=1400 audit(1751598723.075:161): avc: denied { bind } for pid=520 comm="syz.3.62" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.105115][ T30] audit: type=1400 audit(1751598723.075:162): avc: denied { node_bind } for pid=520 comm="syz.3.62" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 37.128150][ T30] audit: type=1400 audit(1751598723.075:163): avc: denied { connect } for pid=520 comm="syz.3.62" laddr=172.20.20.170 lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.150836][ T30] audit: type=1400 audit(1751598723.075:164): avc: denied { write } for pid=520 comm="syz.3.62" laddr=172.20.20.170 lport=255 faddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.902567][ T534] loop0: detected capacity change from 0 to 512 [ 37.930438][ T534] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 37.941429][ T534] EXT4-fs (loop0): 1 truncate cleaned up [ 37.947112][ T534] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 37.958129][ T30] audit: type=1400 audit(1751598723.955:165): avc: denied { mount } for pid=533 comm="syz.0.67" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.059557][ T30] audit: type=1326 audit(1751598724.055:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=537 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462f6f5929 code=0x7ffc0000 [ 38.082987][ T30] audit: type=1326 audit(1751598724.055:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=537 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462f6f5929 code=0x7ffc0000 [ 38.286531][ T30] audit: type=1326 audit(1751598724.055:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=537 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f462f6f5929 code=0x7ffc0000 [ 38.309874][ T30] audit: type=1326 audit(1751598724.055:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=537 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462f6f5929 code=0x7ffc0000 [ 38.341004][ T30] audit: type=1326 audit(1751598724.065:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=537 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462f6f5929 code=0x7ffc0000 [ 38.394460][ T30] audit: type=1326 audit(1751598724.065:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=537 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f462f6f5929 code=0x7ffc0000 [ 38.417636][ T30] audit: type=1326 audit(1751598724.065:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=537 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462f6f5929 code=0x7ffc0000 [ 38.440910][ T30] audit: type=1326 audit(1751598724.065:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=537 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462f6f5929 code=0x7ffc0000 [ 38.766194][ T30] audit: type=1400 audit(1751598724.765:174): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.860086][ T315] Bluetooth: hci0: command 0x1001 tx timeout [ 38.866138][ T500] Bluetooth: hci0: sending frame failed (-49) [ 39.340258][ T567] loop3: detected capacity change from 0 to 128 [ 39.380512][ T567] EXT4-fs (loop3): Test dummy encryption mode enabled [ 39.387340][ T567] EXT4-fs (loop3): Test dummy encryption mode enabled [ 39.394136][ T567] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 39.401430][ T567] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 39.421093][ T567] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,nomblk_io_submit,,errors=continue. Quota mode: none. [ 39.439040][ T567] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 39.738211][ T574] loop4: detected capacity change from 0 to 256 [ 39.750790][ T574] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 39.763121][ T574] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 39.774546][ T574] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 39.962860][ T578] xt_CT: No such helper "snmp" [ 40.162831][ T588] loop3: detected capacity change from 0 to 512 [ 40.192620][ T588] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 40.204033][ T588] EXT4-fs (loop3): 1 truncate cleaned up [ 40.209725][ T588] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 40.777888][ T603] hub 8-0:1.0: USB hub found [ 40.782992][ T603] hub 8-0:1.0: 1 port detected [ 40.939893][ T605] Bluetooth: hci0: command 0x1009 tx timeout [ 41.274518][ T611] hub 8-0:1.0: USB hub found [ 41.279759][ T611] hub 8-0:1.0: 1 port detected [ 41.659368][ T625] loop0: detected capacity change from 0 to 128 [ 41.690432][ T625] EXT4-fs (loop0): Test dummy encryption mode enabled [ 41.697281][ T625] EXT4-fs (loop0): Test dummy encryption mode enabled [ 41.704076][ T625] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 41.711379][ T625] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 42.115713][ T625] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,nomblk_io_submit,,errors=continue. Quota mode: none. [ 42.134326][ T625] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 42.985123][ T652] loop0: detected capacity change from 0 to 1024 [ 43.061214][ T652] EXT4-fs (loop0): Ignoring removed bh option [ 43.067430][ T652] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 43.175266][ T652] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000001,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,sysvgroups,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 45.089936][ T669] loop3: detected capacity change from 0 to 1024 [ 45.161275][ T669] EXT4-fs (loop3): Ignoring removed bh option [ 45.167495][ T669] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 45.249891][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 45.249915][ T30] audit: type=1400 audit(1751598731.245:181): avc: denied { bind } for pid=659 comm="syz.4.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.294896][ T669] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000001,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,sysvgroups,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 45.542705][ T678] loop0: detected capacity change from 0 to 16 [ 45.600891][ T678] erofs: Unknown parameter '0177777777777777777777701777777777777777777777184467440737095516150xffffffffffffffff' [ 45.755829][ T678] loop0: detected capacity change from 0 to 512 [ 45.894738][ T678] EXT4-fs (loop0): orphan cleanup on readonly fs [ 45.903887][ T678] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.112: bg 0: block 248: padding at end of block bitmap is not set [ 45.919361][ T678] Quota error (device loop0): write_blk: dquota write failed [ 45.926926][ T678] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 45.936914][ T678] EXT4-fs error (device loop0): ext4_acquire_dquot:6195: comm syz.0.112: Failed to acquire dquot type 1 [ 45.949809][ T678] EXT4-fs (loop0): 1 truncate cleaned up [ 45.956779][ T678] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,,errors=continue. Quota mode: writeback. [ 45.999659][ T678] device vlan2 entered promiscuous mode [ 46.005285][ T678] device syz_tun entered promiscuous mode [ 46.228912][ T678] syz.0.112 (678) used greatest stack depth: 21208 bytes left [ 46.469402][ T675] loop2: detected capacity change from 0 to 40427 [ 46.890980][ T703] hub 8-0:1.0: USB hub found [ 46.897039][ T703] hub 8-0:1.0: 1 port detected [ 47.055688][ T675] F2FS-fs (loop2): fault_injection options not supported [ 47.068166][ T675] F2FS-fs (loop2): invalid crc value [ 47.085909][ T675] F2FS-fs (loop2): Found nat_bits in checkpoint [ 47.137597][ T675] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 47.147912][ T30] audit: type=1400 audit(1751598733.145:182): avc: denied { relabelfrom } for pid=697 comm="syz.1.123" name="" dev="pipefs" ino=16235 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 47.217232][ T30] audit: type=1400 audit(1751598733.175:183): avc: denied { create } for pid=697 comm="syz.1.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 47.282532][ T30] audit: type=1400 audit(1751598733.175:184): avc: denied { write } for pid=697 comm="syz.1.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 47.341856][ T30] audit: type=1400 audit(1751598733.175:185): avc: denied { nlmsg_write } for pid=697 comm="syz.1.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 47.474362][ T30] audit: type=1400 audit(1751598733.185:186): avc: denied { getopt } for pid=697 comm="syz.1.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.560900][ T282] attempt to access beyond end of device [ 47.560900][ T282] loop2: rw=2049, want=45104, limit=40427 [ 47.730788][ T45] Bluetooth: hci0: Frame reassembly failed (-84) [ 48.420302][ T30] audit: type=1326 audit(1751598734.425:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=746 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177248b929 code=0x7ffc0000 [ 48.552728][ T30] audit: type=1326 audit(1751598734.465:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=746 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f177248b929 code=0x7ffc0000 [ 48.613409][ T752] bridge0: port 3(gretap0) entered blocking state [ 48.626047][ T752] bridge0: port 3(gretap0) entered disabled state [ 48.643643][ T752] device gretap0 entered promiscuous mode [ 48.649492][ T752] bridge0: port 3(gretap0) entered blocking state [ 48.655942][ T752] bridge0: port 3(gretap0) entered forwarding state [ 49.739853][ T6] Bluetooth: hci0: command 0x1003 tx timeout [ 49.746026][ T47] Bluetooth: hci0: sending frame failed (-49) [ 50.963213][ T815] loop1: detected capacity change from 0 to 40427 [ 51.035399][ T822] loop3: detected capacity change from 0 to 256 [ 51.050093][ T815] F2FS-fs (loop1): Found nat_bits in checkpoint [ 51.097318][ T815] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 51.105321][ T822] exfat: Unknown parameter 'Ϙ' [ 51.156950][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 51.157059][ T30] audit: type=1400 audit(1751598737.155:218): avc: denied { compute_member } for pid=820 comm="syz.3.165" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 51.556302][ T30] audit: type=1326 audit(1751598737.555:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=836 comm="syz.0.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91c743929 code=0x7ffc0000 [ 51.579509][ T30] audit: type=1326 audit(1751598737.555:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=836 comm="syz.0.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe91c743929 code=0x7ffc0000 [ 51.604525][ T30] audit: type=1326 audit(1751598737.555:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=836 comm="syz.0.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91c743929 code=0x7ffc0000 [ 51.628315][ T30] audit: type=1326 audit(1751598737.555:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=836 comm="syz.0.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fe91c743929 code=0x7ffc0000 [ 51.772129][ T30] audit: type=1326 audit(1751598737.555:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=836 comm="syz.0.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91c743929 code=0x7ffc0000 [ 52.055117][ T817] Bluetooth: hci0: command 0x1001 tx timeout [ 52.061194][ T47] Bluetooth: hci0: sending frame failed (-49) [ 52.746715][ T858] syz.1.175[858] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.746782][ T858] syz.1.175[858] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.765286][ T858] loop1: detected capacity change from 0 to 256 [ 56.665751][ T859] loop3: detected capacity change from 0 to 1024 [ 56.750700][ T858] exfat: Deprecated parameter 'utf8' [ 56.756742][ T858] exfat: Deprecated parameter 'utf8' [ 57.034278][ T859] EXT4-fs (loop3): Ignoring removed bh option [ 57.040524][ T859] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 57.064715][ T858] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 57.131590][ T20] Bluetooth: hci0: command 0x1009 tx timeout [ 57.223409][ T859] EXT4-fs: failed to create workqueue [ 57.228812][ T859] EXT4-fs (loop3): mount failed [ 57.259266][ T869] loop1: detected capacity change from 0 to 512 [ 57.271757][ T867] syz.2.179[867] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.271852][ T867] syz.2.179[867] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.322577][ T869] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 57.376885][ T869] EXT4-fs (loop1): 1 truncate cleaned up [ 57.382808][ T869] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 57.839233][ T30] audit: type=1400 audit(1751598743.835:224): avc: denied { read } for pid=880 comm="syz.3.182" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 58.213828][ T888] loop0: detected capacity change from 0 to 40427 [ 58.229874][ T888] F2FS-fs (loop0): fault_injection options not supported [ 58.238325][ T888] F2FS-fs (loop0): invalid crc value [ 58.260529][ T888] F2FS-fs (loop0): Found nat_bits in checkpoint [ 58.307906][ T888] F2FS-fs (loop0): Start checkpoint disabled! [ 58.314597][ T888] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 59.290070][ T905] syz.4.188[905] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.290138][ T905] syz.4.188[905] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.365498][ T905] loop4: detected capacity change from 0 to 256 [ 59.383243][ T30] audit: type=1400 audit(1751598744.775:225): avc: denied { create } for pid=887 comm="syz.0.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 59.430997][ T905] exfat: Deprecated parameter 'utf8' [ 59.436398][ T905] exfat: Deprecated parameter 'utf8' [ 59.452085][ T905] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 59.689792][ C0] sched: RT throttling activated [ 59.690924][ T30] audit: type=1400 audit(1751598744.785:226): avc: denied { write } for pid=887 comm="syz.0.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 60.125721][ T911] syz.1.190[911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.125791][ T911] syz.1.190[911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.143006][ T911] loop1: detected capacity change from 0 to 512 [ 60.166351][ T908] syz.2.191[908] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.166755][ T908] syz.2.191[908] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.232666][ T911] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 60.251273][ T911] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 60.298059][ T302] attempt to access beyond end of device [ 60.298059][ T302] loop0: rw=2049, want=40976, limit=40427 [ 60.328290][ T911] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 60.342338][ T911] EXT4-fs (loop1): 1 truncate cleaned up [ 60.348035][ T911] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,discard,grpquota,,errors=continue. Quota mode: writeback. [ 60.463671][ T30] audit: type=1400 audit(1751598746.465:227): avc: denied { remove_name } for pid=907 comm="syz.1.190" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.680749][ T30] audit: type=1400 audit(1751598746.465:228): avc: denied { rename } for pid=907 comm="syz.1.190" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.702998][ T30] audit: type=1400 audit(1751598746.675:229): avc: denied { write } for pid=907 comm="syz.1.190" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.837688][ T922] loop3: detected capacity change from 0 to 2048 [ 62.193211][ T922] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 62.617857][ T302] Bluetooth: hci0: Frame reassembly failed (-84) [ 63.000834][ T949] loop0: detected capacity change from 0 to 128 [ 63.877561][ T946] loop1: detected capacity change from 0 to 2048 [ 63.972346][ T949] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,,errors=continue. Quota mode: none. [ 63.987424][ T949] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 64.013456][ T946] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 64.384376][ T966] loop1: detected capacity change from 0 to 2048 [ 64.491911][ T966] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 64.619867][ T313] Bluetooth: hci0: command 0x1003 tx timeout [ 64.625906][ T47] Bluetooth: hci0: sending frame failed (-49) [ 65.169237][ T978] loop0: detected capacity change from 0 to 256 [ 65.210941][ T978] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 65.235138][ T978] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 65.276057][ T978] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 65.503506][ T988] xt_CT: No such helper "snmp" [ 66.533815][ T1000] loop2: detected capacity change from 0 to 2048 [ 66.677772][ T1000] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 66.920128][ T658] Bluetooth: hci0: command 0x1001 tx timeout [ 66.926169][ T47] Bluetooth: hci0: sending frame failed (-49) [ 67.200447][ T1015] loop3: detected capacity change from 0 to 16 [ 68.840042][ T1015] erofs: Unknown parameter '0177777777777777777777701777777777777777777777184467440737095516150xffffffffffffffff' [ 68.929194][ T1013] loop3: detected capacity change from 0 to 512 [ 68.939828][ T26] Bluetooth: hci0: command 0x1009 tx timeout [ 69.055871][ T1013] EXT4-fs (loop3): orphan cleanup on readonly fs [ 69.062774][ T1013] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.216: bg 0: block 248: padding at end of block bitmap is not set [ 69.077275][ T1013] Quota error (device loop3): write_blk: dquota write failed [ 69.084670][ T1013] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 69.094569][ T1013] EXT4-fs error (device loop3): ext4_acquire_dquot:6195: comm syz.3.216: Failed to acquire dquot type 1 [ 69.106170][ T1013] EXT4-fs (loop3): 1 truncate cleaned up [ 69.112043][ T1013] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,,errors=continue. Quota mode: writeback. [ 69.141070][ T1013] device vlan2 entered promiscuous mode [ 69.146618][ T1013] device ip6gretap0 entered promiscuous mode [ 70.502181][ T30] audit: type=1326 audit(1751598756.505:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1053 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462f6f5929 code=0x7ffc0000 [ 70.550663][ T30] audit: type=1326 audit(1751598756.535:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1053 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f462f6f5929 code=0x7ffc0000 [ 70.575940][ T30] audit: type=1326 audit(1751598756.535:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1053 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462f6f5929 code=0x7ffc0000 [ 70.601604][ T30] audit: type=1326 audit(1751598756.535:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1053 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f462f6f5929 code=0x7ffc0000 [ 70.642599][ T30] audit: type=1326 audit(1751598756.535:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1053 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462f6f5929 code=0x7ffc0000 [ 70.807251][ T1069] loop0: detected capacity change from 0 to 16 [ 70.861046][ T1069] erofs: Unknown parameter '0177777777777777777777701777777777777777777777184467440737095516150xffffffffffffffff' [ 71.816922][ T1069] loop0: detected capacity change from 0 to 512 [ 71.842133][ T1069] EXT4-fs (loop0): orphan cleanup on readonly fs [ 71.851757][ T1069] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.233: bg 0: block 248: padding at end of block bitmap is not set [ 71.867025][ T1069] Quota error (device loop0): write_blk: dquota write failed [ 71.874536][ T1069] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 71.884541][ T1069] EXT4-fs error (device loop0): ext4_acquire_dquot:6195: comm syz.0.233: Failed to acquire dquot type 1 [ 71.897457][ T1069] EXT4-fs (loop0): 1 truncate cleaned up [ 71.903658][ T1069] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,,errors=continue. Quota mode: writeback. [ 71.946737][ T1069] device vlan2 entered promiscuous mode [ 71.952337][ T1069] device ip6gretap0 entered promiscuous mode [ 72.979628][ T45] Bluetooth: hci1: Frame reassembly failed (-84) [ 72.986524][ T384] Bluetooth: hci1: Frame reassembly failed (-84) [ 73.148562][ T30] audit: type=1326 audit(1751598759.145:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1094 comm="syz.1.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07eac29929 code=0x7ffc0000 [ 73.207422][ T1099] loop4: detected capacity change from 0 to 256 [ 73.216294][ T1099] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.227172][ T1099] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 73.238251][ T1099] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 73.467254][ T1112] xt_CT: No such helper "snmp" [ 73.876594][ T1113] loop3: detected capacity change from 0 to 2048 [ 73.954116][ T1113] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 74.692699][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 74.692712][ T30] audit: type=1326 audit(1751598760.695:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1128 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462f6f5929 code=0x7ffc0000 [ 74.763897][ T30] audit: type=1326 audit(1751598760.725:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1128 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f462f6f5929 code=0x7ffc0000 [ 74.788397][ T1121] loop4: detected capacity change from 0 to 40427 [ 75.020057][ T658] Bluetooth: hci1: command 0x1003 tx timeout [ 75.033685][ T470] Bluetooth: hci1: sending frame failed (-49) [ 75.142271][ T30] audit: type=1326 audit(1751598760.725:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1128 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462f6f5929 code=0x7ffc0000 [ 75.174165][ T30] audit: type=1326 audit(1751598760.725:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1128 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f462f6f5929 code=0x7ffc0000 [ 75.228886][ T30] audit: type=1326 audit(1751598760.725:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1128 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462f6f5929 code=0x7ffc0000 [ 75.255076][ T1121] F2FS-fs (loop4): Found nat_bits in checkpoint [ 75.406371][ T1121] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 76.197608][ T1161] loop1: detected capacity change from 0 to 2048 [ 76.342472][ T1161] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 77.145154][ T658] Bluetooth: hci1: command 0x1001 tx timeout [ 77.167786][ T470] Bluetooth: hci1: sending frame failed (-49) [ 77.201717][ T30] audit: type=1326 audit(1751598763.205:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1179 comm="syz.3.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462f6f5929 code=0x7ffc0000 [ 77.277083][ T30] audit: type=1326 audit(1751598763.205:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1179 comm="syz.3.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462f6f5929 code=0x7ffc0000 [ 77.306424][ T30] audit: type=1326 audit(1751598763.205:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1179 comm="syz.3.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f462f6f5929 code=0x7ffc0000 [ 77.330163][ T30] audit: type=1326 audit(1751598763.205:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1179 comm="syz.3.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462f6f5929 code=0x7ffc0000 [ 77.359312][ T30] audit: type=1326 audit(1751598763.205:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1179 comm="syz.3.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462f6f5929 code=0x7ffc0000 [ 77.639950][ T1191] hub 8-0:1.0: USB hub found [ 77.644910][ T1191] hub 8-0:1.0: 1 port detected [ 77.875077][ T1195] loop2: detected capacity change from 0 to 128 [ 77.931156][ T1195] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,,errors=continue. Quota mode: none. [ 77.946523][ T1195] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 78.930777][ T1212] loop4: detected capacity change from 0 to 128 [ 80.727898][ T1211] loop3: detected capacity change from 0 to 2048 [ 80.737690][ T289] Bluetooth: hci1: command 0x1009 tx timeout [ 80.751924][ T1212] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,,errors=continue. Quota mode: none. [ 80.766991][ T1212] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 80.826063][ T1211] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 81.128278][ T1224] loop2: detected capacity change from 0 to 256 [ 81.147490][ T1224] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.161614][ T1224] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 81.172888][ T1224] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 81.377346][ T1228] xt_CT: No such helper "snmp" [ 82.327292][ T1246] hub 8-0:1.0: USB hub found [ 82.332529][ T1246] hub 8-0:1.0: 1 port detected [ 82.725074][ T1235] loop1: detected capacity change from 0 to 40427 [ 83.064405][ T1235] F2FS-fs (loop1): Found nat_bits in checkpoint [ 83.299902][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 83.299935][ T30] audit: type=1400 audit(1751598769.275:253): avc: denied { watch watch_reads } for pid=1260 comm="syz.3.289" path="/71/file0" dev="tmpfs" ino=401 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 83.453238][ T30] audit: type=1326 audit(1751598769.405:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1263 comm="syz.0.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91c743929 code=0x7ffc0000 [ 83.480640][ T1235] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 83.489671][ T30] audit: type=1326 audit(1751598769.405:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1263 comm="syz.0.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe91c743929 code=0x7ffc0000 [ 83.541959][ T30] audit: type=1326 audit(1751598769.405:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1263 comm="syz.0.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91c743929 code=0x7ffc0000 [ 83.565425][ T30] audit: type=1326 audit(1751598769.405:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1263 comm="syz.0.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe91c743929 code=0x7ffc0000 [ 83.670217][ T1273] loop4: detected capacity change from 0 to 16 [ 83.710898][ T1273] erofs: Unknown parameter '0177777777777777777777701777777777777777777777184467440737095516150xffffffffffffffff' [ 83.936420][ T1273] loop4: detected capacity change from 0 to 512 [ 83.996751][ T30] audit: type=1326 audit(1751598769.425:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1263 comm="syz.0.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91c743929 code=0x7ffc0000 [ 84.147193][ T1273] EXT4-fs (loop4): orphan cleanup on readonly fs [ 84.156188][ T1273] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.292: bg 0: block 248: padding at end of block bitmap is not set [ 84.171571][ T1273] Quota error (device loop4): write_blk: dquota write failed [ 84.179104][ T1273] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 84.189175][ T1273] EXT4-fs error (device loop4): ext4_acquire_dquot:6195: comm syz.4.292: Failed to acquire dquot type 1 [ 84.202320][ T1273] EXT4-fs (loop4): 1 truncate cleaned up [ 84.213787][ T1273] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,,errors=continue. Quota mode: writeback. [ 84.562704][ T1255] loop2: detected capacity change from 0 to 40427 [ 84.712454][ T1255] F2FS-fs (loop2): fault_injection options not supported [ 84.746633][ T1255] F2FS-fs (loop2): invalid crc value [ 84.775094][ T1255] F2FS-fs (loop2): Found nat_bits in checkpoint [ 84.873490][ T1255] F2FS-fs (loop2): Start checkpoint disabled! [ 84.893453][ T1255] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 85.185210][ T1297] netlink: 68 bytes leftover after parsing attributes in process `syz.2.288'. [ 85.800568][ T1305] hub 8-0:1.0: USB hub found [ 85.805655][ T1305] hub 8-0:1.0: 1 port detected [ 86.064416][ T45] attempt to access beyond end of device [ 86.064416][ T45] loop2: rw=2049, want=45104, limit=40427 [ 86.220321][ T1309] loop2: detected capacity change from 0 to 256 [ 86.247276][ T1309] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 86.272979][ T1309] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 86.288453][ T1309] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 87.829183][ T1315] xt_CT: No such helper "snmp" [ 87.971763][ T1317] loop3: detected capacity change from 0 to 1024 [ 88.072916][ T1317] EXT4-fs (loop3): Ignoring removed bh option [ 88.079078][ T1317] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 88.198468][ T1317] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000001,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,sysvgroups,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 89.210333][ T1335] loop4: detected capacity change from 0 to 16 [ 89.300803][ T1335] erofs: Unknown parameter '0177777777777777777777701777777777777777777777184467440737095516150xffffffffffffffff' [ 89.381397][ T1335] loop4: detected capacity change from 0 to 512 [ 89.514500][ T1335] EXT4-fs (loop4): orphan cleanup on readonly fs [ 89.524048][ T1335] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.308: bg 0: block 248: padding at end of block bitmap is not set [ 89.539204][ T1335] Quota error (device loop4): write_blk: dquota write failed [ 89.546663][ T1335] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 89.556639][ T1335] EXT4-fs error (device loop4): ext4_acquire_dquot:6195: comm syz.4.308: Failed to acquire dquot type 1 [ 89.671563][ T1335] EXT4-fs (loop4): 1 truncate cleaned up [ 89.678813][ T1335] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,,errors=continue. Quota mode: writeback. [ 89.903042][ T1345] syz.2.310[1345] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.903130][ T1345] syz.2.310[1345] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.916282][ T1346] loop3: detected capacity change from 0 to 256 [ 89.969641][ T1346] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 90.019309][ T1346] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 90.038267][ T1346] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 90.705586][ T30] audit: type=1400 audit(1751598776.705:259): avc: denied { read write } for pid=1354 comm="syz.1.315" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 90.756373][ T30] audit: type=1400 audit(1751598776.745:260): avc: denied { open } for pid=1354 comm="syz.1.315" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 90.805312][ T1360] xt_CT: No such helper "snmp" [ 90.923954][ T1362] loop4: detected capacity change from 0 to 256 [ 90.980591][ T30] audit: type=1400 audit(1751598776.745:261): avc: denied { ioctl } for pid=1354 comm="syz.1.315" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 90.991953][ T1338] loop0: detected capacity change from 0 to 40427 [ 91.015437][ T1362] exfat: Unknown parameter 'Ϙ' [ 91.028012][ T1338] F2FS-fs (loop0): fault_injection options not supported [ 91.094312][ T1338] F2FS-fs (loop0): invalid crc value [ 91.129880][ T26] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 91.166923][ T1338] F2FS-fs (loop0): Found nat_bits in checkpoint [ 91.251000][ T1338] F2FS-fs (loop0): Start checkpoint disabled! [ 91.258631][ T1338] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 91.747410][ T1374] netlink: 68 bytes leftover after parsing attributes in process `syz.0.311'. [ 92.460204][ T26] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 92.483650][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.492207][ T302] attempt to access beyond end of device [ 92.492207][ T302] loop0: rw=2049, want=40976, limit=40427 [ 92.521743][ T26] usb 2-1: config 0 descriptor?? [ 92.683169][ T1382] loop4: detected capacity change from 0 to 1024 [ 92.827309][ T1382] EXT4-fs (loop4): Ignoring removed bh option [ 92.833516][ T1382] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 93.646697][ T1382] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000001,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,sysvgroups,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 94.209878][ T26] usb 2-1: Cannot read MAC address [ 94.223224][ T26] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 94.254426][ T26] usb 2-1: USB disconnect, device number 2 [ 94.675423][ T1403] hub 8-0:1.0: USB hub found [ 94.680334][ T1403] hub 8-0:1.0: 1 port detected [ 96.109734][ T30] audit: type=1326 audit(1751598782.105:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1423 comm="syz.0.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91c743929 code=0x7ffc0000 [ 96.142524][ T30] audit: type=1326 audit(1751598782.135:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1423 comm="syz.0.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe91c743929 code=0x7ffc0000 [ 96.204986][ T30] audit: type=1326 audit(1751598782.135:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1423 comm="syz.0.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91c743929 code=0x7ffc0000 [ 96.402050][ T30] audit: type=1326 audit(1751598782.135:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1423 comm="syz.0.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fe91c743929 code=0x7ffc0000 [ 96.475473][ T30] audit: type=1326 audit(1751598782.135:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1423 comm="syz.0.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91c743929 code=0x7ffc0000 [ 96.567138][ T1432] loop4: detected capacity change from 0 to 2048 [ 97.042399][ T1432] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 97.136519][ T1446] loop0: detected capacity change from 0 to 40427 [ 97.182576][ T1446] F2FS-fs (loop0): Found nat_bits in checkpoint [ 97.298818][ T1446] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 97.412190][ T1445] loop3: detected capacity change from 0 to 40427 [ 97.462376][ T1445] F2FS-fs (loop3): fault_injection options not supported [ 97.481830][ T1445] F2FS-fs (loop3): invalid crc value [ 97.510656][ T1445] F2FS-fs (loop3): Found nat_bits in checkpoint [ 97.574920][ T1445] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 97.985669][ T286] attempt to access beyond end of device [ 97.985669][ T286] loop3: rw=2049, want=45104, limit=40427 [ 99.307510][ T1486] loop2: detected capacity change from 0 to 2048 [ 99.447026][ T1486] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.504171][ T1500] hub 8-0:1.0: USB hub found [ 100.510696][ T1500] hub 8-0:1.0: 1 port detected [ 100.925805][ T1502] loop1: detected capacity change from 0 to 2048 [ 101.239667][ T1502] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.470295][ T30] audit: type=1326 audit(1751598787.445:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1510 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177248b929 code=0x7ffc0000 [ 101.935464][ T30] audit: type=1326 audit(1751598787.445:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1510 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177248b929 code=0x7ffc0000 [ 101.959354][ T30] audit: type=1326 audit(1751598787.445:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1510 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f177248b929 code=0x7ffc0000 [ 101.993575][ T30] audit: type=1326 audit(1751598787.445:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1510 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177248b929 code=0x7ffc0000 [ 102.017881][ T30] audit: type=1326 audit(1751598787.445:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1510 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177248b929 code=0x7ffc0000 [ 102.066909][ T30] audit: type=1326 audit(1751598787.445:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1510 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f177248b929 code=0x7ffc0000 [ 102.097528][ T1524] loop0: detected capacity change from 0 to 128 [ 102.142170][ T1524] EXT4-fs (loop0): Test dummy encryption mode enabled [ 102.150739][ T30] audit: type=1326 audit(1751598787.445:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1510 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177248b929 code=0x7ffc0000 [ 102.174670][ T1524] EXT4-fs (loop0): Test dummy encryption mode enabled [ 102.181684][ T1524] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 102.189150][ T30] audit: type=1326 audit(1751598787.445:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1510 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177248b929 code=0x7ffc0000 [ 102.218620][ T1524] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 102.240723][ T1524] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,nomblk_io_submit,,errors=continue. Quota mode: none. [ 102.276031][ T1524] ext4 filesystem being mounted at /87/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 103.396112][ T1546] loop1: detected capacity change from 0 to 40427 [ 103.501339][ T1546] F2FS-fs (loop1): Found nat_bits in checkpoint [ 103.567746][ T1546] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 103.865194][ T1559] loop3: detected capacity change from 0 to 2048 [ 104.041651][ T1559] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 104.363302][ T30] audit: type=1400 audit(1751598790.365:275): avc: denied { watch watch_reads } for pid=1557 comm="syz.4.365" path="/syzcgroup/net/syz4/syz0" dev="cgroup" ino=232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 105.018123][ T1573] 9pnet: Insufficient options for proto=fd [ 105.174446][ T1587] loop3: detected capacity change from 0 to 16 [ 105.240639][ T1587] erofs: Unknown parameter '0177777777777777777777701777777777777777777777184467440737095516150xffffffffffffffff' [ 105.308215][ T1587] loop3: detected capacity change from 0 to 512 [ 105.393698][ T1587] EXT4-fs (loop3): orphan cleanup on readonly fs [ 105.402203][ T1587] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.368: bg 0: block 248: padding at end of block bitmap is not set [ 105.417331][ T1587] Quota error (device loop3): write_blk: dquota write failed [ 105.424929][ T1587] EXT4-fs error (device loop3): ext4_acquire_dquot:6195: comm syz.3.368: Failed to acquire dquot type 1 [ 105.437396][ T1587] EXT4-fs (loop3): 1 truncate cleaned up [ 105.486957][ T1587] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,,errors=continue. Quota mode: writeback. [ 105.728931][ T1587] device vlan2 entered promiscuous mode [ 106.675608][ T1607] loop3: detected capacity change from 0 to 2048 [ 106.769054][ T1607] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 106.850416][ T1581] loop0: detected capacity change from 0 to 40427 [ 106.963355][ T1581] F2FS-fs (loop0): fault_injection options not supported [ 107.214441][ T1581] F2FS-fs (loop0): invalid crc value [ 107.253932][ T1581] F2FS-fs (loop0): Found nat_bits in checkpoint [ 107.480667][ T1623] 9pnet: Insufficient options for proto=fd [ 107.495372][ T1581] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 107.598463][ T1627] loop2: detected capacity change from 0 to 128 [ 107.754936][ T1629] loop4: detected capacity change from 0 to 2048 [ 107.954219][ T1629] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.052467][ T1627] EXT4-fs (loop2): Test dummy encryption mode enabled [ 108.209667][ T1627] EXT4-fs (loop2): Test dummy encryption mode enabled [ 108.245330][ T1627] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 108.253018][ T1627] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 108.334965][ T1627] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,nomblk_io_submit,,errors=continue. Quota mode: none. [ 108.360175][ T1627] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 108.626304][ T281] attempt to access beyond end of device [ 108.626304][ T281] loop0: rw=2049, want=45104, limit=40427 [ 108.691153][ T1639] loop3: detected capacity change from 0 to 128 [ 108.833432][ T1639] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,,errors=continue. Quota mode: none. [ 108.848967][ T1639] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 109.756438][ T1658] loop1: detected capacity change from 0 to 256 [ 109.851512][ T1658] exfat: Unknown parameter 'Ϙ' [ 110.389347][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 110.389363][ T30] audit: type=1326 audit(1751598796.385:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1671 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462f6f5929 code=0x7ffc0000 [ 110.420074][ T30] audit: type=1326 audit(1751598796.385:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1671 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f462f6f5929 code=0x7ffc0000 [ 110.495999][ T30] audit: type=1326 audit(1751598796.385:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1671 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462f6f5929 code=0x7ffc0000 [ 110.532859][ T1676] loop1: detected capacity change from 0 to 2048 [ 111.499419][ T1682] loop2: detected capacity change from 0 to 1024 [ 113.218479][ T30] audit: type=1326 audit(1751598796.385:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1671 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f462f6f5929 code=0x7ffc0000 [ 113.252267][ T1682] EXT4-fs (loop2): Ignoring removed bh option [ 113.259100][ T1682] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 113.296193][ T30] audit: type=1326 audit(1751598796.385:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1671 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462f6f5929 code=0x7ffc0000 [ 113.338094][ T1676] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 113.349723][ T1682] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000001,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,sysvgroups,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 114.590037][ T1711] loop2: detected capacity change from 0 to 16 [ 114.660485][ T1711] erofs: Unknown parameter '0177777777777777777777701777777777777777777777184467440737095516150xffffffffffffffff' [ 114.730151][ T1711] loop2: detected capacity change from 0 to 512 [ 114.814692][ T1711] EXT4-fs (loop2): orphan cleanup on readonly fs [ 114.823461][ T1711] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.404: bg 0: block 248: padding at end of block bitmap is not set [ 114.839053][ T1711] Quota error (device loop2): write_blk: dquota write failed [ 114.846611][ T1711] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 114.856679][ T1711] EXT4-fs error (device loop2): ext4_acquire_dquot:6195: comm syz.2.404: Failed to acquire dquot type 1 [ 114.869602][ T1711] EXT4-fs (loop2): 1 truncate cleaned up [ 114.876006][ T1711] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,,errors=continue. Quota mode: writeback. [ 115.291284][ T1713] loop3: detected capacity change from 0 to 256 [ 115.383153][ T1713] exfat: Unknown parameter 'Ϙ' [ 115.396936][ T1723] loop1: detected capacity change from 0 to 128 [ 115.953926][ T1723] EXT4-fs (loop1): Test dummy encryption mode enabled [ 115.969121][ T1723] EXT4-fs (loop1): Test dummy encryption mode enabled [ 116.001039][ T1723] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 116.036772][ T1723] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 116.068263][ T1723] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,nomblk_io_submit,,errors=continue. Quota mode: none. [ 116.158442][ T1723] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 116.475113][ T1739] loop2: detected capacity change from 0 to 128 [ 116.548619][ T1739] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,,errors=continue. Quota mode: none. [ 116.564175][ T1739] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 117.451276][ T30] audit: type=1326 audit(1751598803.455:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1742 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91c743929 code=0x7ffc0000 [ 117.514375][ T30] audit: type=1326 audit(1751598803.485:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1742 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91c743929 code=0x7ffc0000 [ 117.617549][ T1753] loop4: detected capacity change from 0 to 1024 [ 117.702169][ T1753] EXT4-fs (loop4): Ignoring removed bh option [ 117.708365][ T1753] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 117.879955][ T1753] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000001,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,sysvgroups,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 118.009839][ T30] audit: type=1326 audit(1751598803.485:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1742 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe91c743929 code=0x7ffc0000 [ 118.296198][ T30] audit: type=1326 audit(1751598803.485:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1742 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91c743929 code=0x7ffc0000 [ 118.475174][ T30] audit: type=1326 audit(1751598803.485:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1742 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91c743929 code=0x7ffc0000 [ 118.536778][ T30] audit: type=1326 audit(1751598803.485:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1742 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe91c743929 code=0x7ffc0000 [ 118.569880][ T30] audit: type=1326 audit(1751598803.485:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1742 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91c743929 code=0x7ffc0000 [ 119.357549][ T1771] loop2: detected capacity change from 0 to 16 [ 119.450464][ T1771] erofs: Unknown parameter '0177777777777777777777701777777777777777777777184467440737095516150xffffffffffffffff' [ 119.519317][ T1771] loop2: detected capacity change from 0 to 512 [ 119.943233][ T1771] EXT4-fs (loop2): orphan cleanup on readonly fs [ 120.045483][ T1771] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.420: bg 0: block 248: padding at end of block bitmap is not set [ 120.118704][ T1771] Quota error (device loop2): write_blk: dquota write failed [ 120.126772][ T1771] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 120.395507][ T1771] EXT4-fs error (device loop2): ext4_acquire_dquot:6195: comm syz.2.420: Failed to acquire dquot type 1 [ 120.411053][ T1771] EXT4-fs (loop2): 1 truncate cleaned up [ 120.420754][ T1771] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,,errors=continue. Quota mode: writeback. [ 120.645126][ T1771] syz.2.420 (1771) used greatest stack depth: 21128 bytes left [ 120.700617][ T30] audit: type=1326 audit(1751598806.705:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1778 comm="syz.3.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462f6f5929 code=0x7ffc0000 [ 121.353816][ T1796] loop2: detected capacity change from 0 to 128 [ 122.439906][ T1796] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,,errors=continue. Quota mode: none. [ 122.455237][ T1796] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 124.884482][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 124.884495][ T30] audit: type=1326 audit(1751598810.885:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1816 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462f6f5929 code=0x7ffc0000 [ 124.933671][ T30] audit: type=1326 audit(1751598810.895:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1816 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462f6f5929 code=0x7ffc0000 [ 125.008452][ T30] audit: type=1326 audit(1751598810.925:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1816 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f462f6f5929 code=0x7ffc0000 [ 125.032153][ T30] audit: type=1326 audit(1751598810.925:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1816 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462f6f5929 code=0x7ffc0000 [ 125.055520][ T30] audit: type=1326 audit(1751598810.925:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1816 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462f6f5929 code=0x7ffc0000 [ 125.573348][ T1826] loop0: detected capacity change from 0 to 16 [ 125.619897][ T30] audit: type=1326 audit(1751598810.925:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1816 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f462f6f5929 code=0x7ffc0000 [ 125.716522][ T1826] erofs: Unknown parameter '0177777777777777777777701777777777777777777777184467440737095516150xffffffffffffffff' [ 125.769439][ T1826] loop0: detected capacity change from 0 to 512 [ 125.863703][ T30] audit: type=1326 audit(1751598810.925:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1816 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462f6f5929 code=0x7ffc0000 [ 125.889007][ T30] audit: type=1326 audit(1751598810.925:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1816 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462f6f5929 code=0x7ffc0000 [ 126.074281][ T1826] EXT4-fs (loop0): orphan cleanup on readonly fs [ 126.084194][ T1826] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.435: bg 0: block 248: padding at end of block bitmap is not set [ 126.099531][ T1826] Quota error (device loop0): write_blk: dquota write failed [ 126.107097][ T1826] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 126.117118][ T1826] EXT4-fs error (device loop0): ext4_acquire_dquot:6195: comm syz.0.435: Failed to acquire dquot type 1 [ 126.131154][ T1826] EXT4-fs (loop0): 1 truncate cleaned up [ 126.137662][ T1826] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,,errors=continue. Quota mode: writeback. [ 126.385552][ T1826] syz.0.435 (1826) used greatest stack depth: 20288 bytes left [ 126.700965][ T1840] loop0: detected capacity change from 0 to 128 [ 126.752075][ T1841] loop3: detected capacity change from 0 to 128 [ 126.978744][ T1841] EXT4-fs (loop3): Test dummy encryption mode enabled [ 126.985612][ T1841] EXT4-fs (loop3): Test dummy encryption mode enabled [ 126.992404][ T1841] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 126.999682][ T1841] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 127.196478][ T1847] loop2: detected capacity change from 0 to 2048 [ 127.246967][ T1840] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,,errors=continue. Quota mode: none. [ 127.262552][ T1840] ext4 filesystem being mounted at /104/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 127.451001][ T1847] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 127.931178][ T1841] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,nomblk_io_submit,,errors=continue. Quota mode: none. [ 127.949084][ T1841] ext4 filesystem being mounted at /104/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 128.635529][ T1861] hub 8-0:1.0: USB hub found [ 128.640445][ T1861] hub 8-0:1.0: 1 port detected [ 131.133825][ T1889] loop0: detected capacity change from 0 to 128 [ 131.302413][ T1897] syz.3.452[1897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.302745][ T1897] syz.3.452[1897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.333521][ T1897] loop3: detected capacity change from 0 to 512 [ 132.493245][ T1889] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,,errors=continue. Quota mode: none. [ 132.509200][ T1897] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 132.516406][ T1897] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 132.542903][ T1903] loop4: detected capacity change from 0 to 128 [ 132.544916][ T1898] loop2: detected capacity change from 0 to 1024 [ 132.567762][ T1897] EXT4-fs (loop3): 1 truncate cleaned up [ 132.573915][ T1897] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,discard,grpquota,,errors=continue. Quota mode: writeback. [ 132.594486][ T1889] ext4 filesystem being mounted at /108/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 132.616169][ T1903] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,,errors=continue. Quota mode: none. [ 132.631277][ T1903] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 132.646802][ T1898] EXT4-fs (loop2): Ignoring removed bh option [ 132.681447][ T1898] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 132.726632][ T1898] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000001,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,sysvgroups,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 132.759191][ T1910] loop1: detected capacity change from 0 to 2048 [ 132.827126][ T1915] loop0: detected capacity change from 0 to 256 [ 132.883278][ T1915] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 132.929819][ T1915] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 132.942808][ T1915] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 132.950595][ T1910] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 133.377314][ T1921] xt_CT: No such helper "snmp" [ 134.414179][ T30] audit: type=1326 audit(1751598820.415:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1936 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462f6f5929 code=0x7ffc0000 [ 134.446782][ T30] audit: type=1326 audit(1751598820.415:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1936 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f462f6f5929 code=0x7ffc0000 [ 134.488500][ T30] audit: type=1326 audit(1751598820.415:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1936 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462f6f5929 code=0x7ffc0000 [ 134.516331][ T30] audit: type=1326 audit(1751598820.415:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1936 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f462f6f5929 code=0x7ffc0000 [ 134.627276][ T1943] loop3: detected capacity change from 0 to 1024 [ 134.668098][ T1943] EXT4-fs (loop3): Ignoring removed bh option [ 134.674315][ T1943] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 134.898173][ T1943] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000001,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,sysvgroups,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 134.944914][ T1950] loop2: detected capacity change from 0 to 128 [ 134.969290][ T30] audit: type=1326 audit(1751598820.415:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1936 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462f6f5929 code=0x7ffc0000 [ 135.107194][ T1955] loop4: detected capacity change from 0 to 128 [ 135.229430][ T1950] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,,errors=continue. Quota mode: none. [ 135.244805][ T1950] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 135.305529][ T1955] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,,errors=continue. Quota mode: none. [ 135.320877][ T1955] ext4 filesystem being mounted at /80/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 135.737182][ T1964] loop0: detected capacity change from 0 to 256 [ 135.806246][ T1964] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 136.033593][ T30] audit: type=1400 audit(1751598821.875:309): avc: denied { ioctl } for pid=1957 comm="syz.1.468" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=20067 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 136.051429][ T1964] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 137.153468][ T1973] loop2: detected capacity change from 0 to 1024 [ 138.011934][ T1974] loop3: detected capacity change from 0 to 40427 [ 138.035162][ T1964] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 138.099090][ T1973] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.472: Invalid block bitmap block 0 in block_group 0 [ 138.114484][ T1973] Quota error (device loop2): write_blk: dquota write failed [ 138.121886][ T1973] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 138.131823][ T1973] EXT4-fs error (device loop2): ext4_acquire_dquot:6195: comm syz.2.472: Failed to acquire dquot type 0 [ 138.143431][ T1973] EXT4-fs error (device loop2): ext4_free_blocks:6223: comm syz.2.472: Freeing blocks not in datazone - block = 0, count = 4096 [ 138.157586][ T1973] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.472: Invalid inode bitmap blk 0 in block_group 0 [ 138.170251][ T816] Quota error (device loop2): remove_tree: Getting block too big (0 >= 9) [ 138.178746][ T816] EXT4-fs error (device loop2): ext4_release_dquot:6231: comm kworker/u4:5: Failed to release dquot type 0 [ 138.190526][ T1973] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 138.199113][ T1973] EXT4-fs (loop2): 1 orphan inode deleted [ 138.204889][ T1973] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue. Quota mode: writeback. [ 138.244666][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 138.253115][ T30] audit: type=1400 audit(1751598824.225:310): avc: denied { append } for pid=1965 comm="syz.2.472" name="001" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 138.288476][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.299053][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 138.307447][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.316746][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.336530][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.382200][ T1974] F2FS-fs (loop3): Found nat_bits in checkpoint [ 138.398196][ T1964] xt_CT: No such helper "snmp" [ 138.414743][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.422816][ T1974] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 138.424657][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.772459][ T1992] loop4: detected capacity change from 0 to 16 [ 138.870035][ T1992] erofs: Unknown parameter '0177777777777777777777701777777777777777777777184467440737095516150xffff' [ 139.372361][ T1989] loop4: detected capacity change from 0 to 512 [ 139.405068][ T1989] EXT4-fs (loop4): orphan cleanup on readonly fs [ 139.412047][ T1989] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.473: bg 0: block 248: padding at end of block bitmap is not set [ 139.427708][ T1989] __quota_error: 1 callbacks suppressed [ 139.427721][ T1989] Quota error (device loop4): write_blk: dquota write failed [ 139.440911][ T1989] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 139.450936][ T1989] EXT4-fs error (device loop4): ext4_acquire_dquot:6195: comm syz.4.473: Failed to acquire dquot type 1 [ 139.462912][ T1989] EXT4-fs (loop4): 1 truncate cleaned up [ 139.470560][ T1989] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,,errors=continue. Quota mode: writeback. [ 139.753502][ T2013] loop1: detected capacity change from 0 to 128 [ 139.806625][ T2013] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,,errors=continue. Quota mode: none. [ 139.821724][ T2013] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 140.014504][ T816] Bluetooth: hci0: Frame reassembly failed (-84) [ 140.035129][ T30] audit: type=1326 audit(1751598826.035:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2018 comm="syz.4.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d0bd9d929 code=0x7ffc0000 [ 140.059188][ T30] audit: type=1326 audit(1751598826.035:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2018 comm="syz.4.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d0bd9d929 code=0x7ffc0000 [ 140.390760][ T2030] loop4: detected capacity change from 0 to 128 [ 141.729103][ T30] audit: type=1400 audit(1751598827.725:314): avc: denied { mounton } for pid=2031 comm="syz.0.488" path="/114/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 141.761088][ T2032] incfs_lookup_dentry err:-14 [ 141.769954][ T2032] incfs: Can't find or create .incomplete dir in ./file0 [ 141.777435][ T2030] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,,errors=continue. Quota mode: none. [ 141.792832][ T2030] ext4 filesystem being mounted at /83/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 141.847766][ T2032] incfs: mount failed -14 [ 141.852404][ T30] audit: type=1400 audit(1751598827.845:315): avc: denied { remove_name } for pid=2031 comm="syz.0.488" name=".index" dev="9p" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 141.881469][ T30] audit: type=1400 audit(1751598827.845:316): avc: denied { rmdir } for pid=2031 comm="syz.0.488" name=".index" dev="9p" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 142.060567][ T313] Bluetooth: hci0: command 0x1003 tx timeout [ 142.066698][ T470] Bluetooth: hci0: sending frame failed (-49) [ 142.615127][ T2038] loop1: detected capacity change from 0 to 40427 [ 142.634014][ T2038] F2FS-fs (loop1): fault_injection options not supported [ 142.651707][ T2038] F2FS-fs (loop1): invalid crc value [ 142.658204][ T2038] F2FS-fs (loop1): Found nat_bits in checkpoint [ 142.691056][ T2038] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 143.190065][ T2063] loop3: detected capacity change from 0 to 2048 [ 143.322167][ T2063] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 143.462720][ T284] attempt to access beyond end of device [ 143.462720][ T284] loop1: rw=2049, want=45104, limit=40427 [ 143.559821][ T30] audit: type=1400 audit(1751598829.555:317): avc: denied { connect } for pid=2067 comm="syz.0.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 143.776386][ T816] Bluetooth: hci1: Frame reassembly failed (-84) [ 143.787235][ T816] Bluetooth: hci1: Frame reassembly failed (-84) [ 143.942830][ T2072] hub 8-0:1.0: USB hub found [ 143.948542][ T2072] hub 8-0:1.0: 1 port detected [ 144.581923][ T313] Bluetooth: hci0: command 0x1001 tx timeout [ 144.588002][ T500] Bluetooth: hci0: sending frame failed (-49) [ 144.610077][ T30] audit: type=1400 audit(1751598829.805:318): avc: denied { ioctl } for pid=2067 comm="syz.0.498" path="socket:[20644]" dev="sockfs" ino=20644 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.915668][ T2083] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 144.937688][ T30] audit: type=1400 audit(1751598830.905:319): avc: denied { read } for pid=2082 comm="syz.1.503" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 144.960954][ T30] audit: type=1400 audit(1751598830.905:320): avc: denied { open } for pid=2082 comm="syz.1.503" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 144.986465][ T30] audit: type=1400 audit(1751598830.915:321): avc: denied { ioctl } for pid=2082 comm="syz.1.503" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 145.181547][ T2092] loop1: detected capacity change from 0 to 40427 [ 145.214570][ T2092] F2FS-fs (loop1): Found nat_bits in checkpoint [ 145.238345][ T2092] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 145.876264][ T320] Bluetooth: hci1: command 0x1003 tx timeout [ 145.890613][ T500] Bluetooth: hci1: sending frame failed (-49) [ 146.021257][ T2108] loop1: detected capacity change from 0 to 256 [ 146.052692][ T2108] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 146.063372][ T2108] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 146.073048][ T2108] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 146.111316][ T2108] xt_CT: No such helper "snmp" [ 146.619815][ T315] Bluetooth: hci0: command 0x1009 tx timeout [ 147.071874][ T2129] loop3: detected capacity change from 0 to 2048 [ 147.159249][ T2129] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 147.232752][ T2134] loop1: detected capacity change from 0 to 256 [ 147.262311][ T2134] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 147.273366][ T2134] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 147.290363][ T2134] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 147.433215][ T2134] xt_CT: No such helper "snmp" [ 147.535721][ T30] audit: type=1326 audit(1751598833.535:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2138 comm="syz.1.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07eac29929 code=0x7ffc0000 [ 147.920004][ T2140] loop4: detected capacity change from 0 to 40427 [ 147.962561][ T311] Bluetooth: hci1: command 0x1001 tx timeout [ 147.968592][ T500] Bluetooth: hci1: sending frame failed (-49) [ 147.975929][ T2140] F2FS-fs (loop4): Found nat_bits in checkpoint [ 147.980932][ T30] audit: type=1326 audit(1751598833.985:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2138 comm="syz.1.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07eac29929 code=0x7ffc0000 [ 148.005494][ T30] audit: type=1326 audit(1751598833.985:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2138 comm="syz.1.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07eac29929 code=0x7ffc0000 [ 148.028755][ T30] audit: type=1326 audit(1751598833.985:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2138 comm="syz.1.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07eac29929 code=0x7ffc0000 [ 148.052039][ T2140] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 148.052081][ T30] audit: type=1326 audit(1751598833.985:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2138 comm="syz.1.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07eac29929 code=0x7ffc0000 [ 148.083008][ T30] audit: type=1326 audit(1751598833.985:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2138 comm="syz.1.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07eac29929 code=0x7ffc0000 [ 148.130482][ T2148] serio: Serial port ptm2 [ 148.219961][ T2153] loop3: detected capacity change from 0 to 512 [ 148.292804][ T2153] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 148.300136][ T2153] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 148.311760][ T2153] EXT4-fs (loop3): 1 truncate cleaned up [ 148.317401][ T2153] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,discard,grpquota,,errors=continue. Quota mode: writeback. [ 148.677039][ T2172] loop3: detected capacity change from 0 to 1024 [ 148.711939][ T2172] EXT4-fs (loop3): Ignoring removed bh option [ 148.718140][ T2172] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 148.791469][ T2172] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000001,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,sysvgroups,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 149.822502][ T2185] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.829607][ T2185] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.837310][ T2185] device bridge_slave_0 entered promiscuous mode [ 149.846826][ T2185] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.854075][ T2185] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.861647][ T2185] device bridge_slave_1 entered promiscuous mode [ 149.907127][ T2189] loop3: detected capacity change from 0 to 40427 [ 149.924716][ T2185] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.931765][ T2185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.938994][ T2185] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.946005][ T2185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.963669][ T1975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.971519][ T1975] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.978674][ T1975] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.988969][ T1975] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.997060][ T313] Bluetooth: hci1: command 0x1009 tx timeout [ 149.999045][ T1975] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.010061][ T1975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.023272][ T1975] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.031994][ T2189] F2FS-fs (loop3): Found nat_bits in checkpoint [ 150.033307][ T1975] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.045271][ T1975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.063641][ T2189] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 150.063926][ T1975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.084740][ T1975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.097392][ T1975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.108256][ T1975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.116408][ T1975] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.123848][ T1975] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.133586][ T2185] device veth0_vlan entered promiscuous mode [ 150.143272][ T1975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.152206][ T2185] device veth1_macvtap entered promiscuous mode [ 150.162690][ T1975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 150.172505][ T1975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 150.190302][ T816] device bridge_slave_1 left promiscuous mode [ 150.196519][ T816] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.206512][ T816] device bridge_slave_0 left promiscuous mode [ 150.212936][ T816] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.221833][ T816] device veth1_macvtap left promiscuous mode [ 150.227889][ T816] device veth0_vlan left promiscuous mode [ 150.304140][ T2200] loop4: detected capacity change from 0 to 256 [ 150.357740][ T2200] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 150.411504][ T2200] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 150.426643][ T2200] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 150.600613][ T2206] syz.2.538[2206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.600997][ T2206] syz.2.538[2206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.639490][ T2206] loop2: detected capacity change from 0 to 512 [ 150.705744][ T2206] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 150.713282][ T2206] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 150.876742][ T2206] EXT4-fs (loop2): 1 truncate cleaned up [ 150.882483][ T2206] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,discard,grpquota,,errors=continue. Quota mode: writeback. [ 151.135421][ T2207] xt_CT: No such helper "snmp" [ 151.592997][ T2221] loop3: detected capacity change from 0 to 16 [ 151.640809][ T2221] erofs: Unknown parameter '0177777777777777777777701777777777777777777777184467440737095516150xffffffffffffffff' [ 151.698408][ T2221] loop3: detected capacity change from 0 to 512 [ 151.785552][ T2221] EXT4-fs (loop3): orphan cleanup on readonly fs [ 151.795143][ T2221] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.539: bg 0: block 248: padding at end of block bitmap is not set [ 151.810708][ T2221] __quota_error: 133 callbacks suppressed [ 151.810734][ T2221] Quota error (device loop3): write_blk: dquota write failed [ 151.824111][ T2221] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 151.834149][ T2221] EXT4-fs error (device loop3): ext4_acquire_dquot:6195: comm syz.3.539: Failed to acquire dquot type 1 [ 151.847947][ T2221] EXT4-fs (loop3): 1 truncate cleaned up [ 151.855495][ T2221] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,,errors=continue. Quota mode: writeback. [ 151.894858][ T2221] Zero length message leads to an empty skb [ 152.761926][ T2232] loop2: detected capacity change from 0 to 512 [ 152.841369][ T2232] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 152.951905][ T2232] EXT4-fs (loop2): 1 orphan inode deleted [ 152.957704][ T2232] EXT4-fs (loop2): mounted filesystem without journal. Opts: inlinecrypt,minixdf,stripe=0x0000000000000000,sb=0x0000000000000007,jqfmt=vfsv0,dioread_nolock,stripe=0x0000000000000374,,errors=continue. Quota mode: writeback. [ 152.979419][ T2232] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.062479][ T2241] syz.3.547[2241] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.062547][ T2241] syz.3.547[2241] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.697543][ T2256] hub 8-0:1.0: USB hub found [ 154.713647][ T2256] hub 8-0:1.0: 1 port detected [ 156.214287][ T30] audit: type=1400 audit(1751598841.975:461): avc: denied { create } for pid=2259 comm="syz.5.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 156.250122][ T30] audit: type=1400 audit(1751598842.015:462): avc: denied { setopt } for pid=2259 comm="syz.5.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 156.573975][ T30] audit: type=1400 audit(1751598842.015:463): avc: denied { map } for pid=2259 comm="syz.5.553" path="socket:[21803]" dev="sockfs" ino=21803 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 156.627558][ T30] audit: type=1400 audit(1751598842.015:464): avc: denied { read accept } for pid=2259 comm="syz.5.553" path="socket:[21803]" dev="sockfs" ino=21803 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 156.680882][ T30] audit: type=1326 audit(1751598842.245:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2269 comm="syz.2.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177248b929 code=0x7ffc0000 [ 156.790395][ T30] audit: type=1326 audit(1751598842.245:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2269 comm="syz.2.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f177248b929 code=0x7ffc0000 [ 156.817987][ T30] audit: type=1326 audit(1751598842.245:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2269 comm="syz.2.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177248b929 code=0x7ffc0000 [ 156.841919][ T30] audit: type=1326 audit(1751598842.245:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2269 comm="syz.2.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f177248b929 code=0x7ffc0000 [ 156.865653][ T30] audit: type=1326 audit(1751598842.245:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2269 comm="syz.2.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177248b929 code=0x7ffc0000 [ 156.889142][ T30] audit: type=1400 audit(1751598842.665:470): avc: denied { bind } for pid=2267 comm="syz.5.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 156.909942][ T30] audit: type=1400 audit(1751598842.845:471): avc: denied { write } for pid=2280 comm="syz.4.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 156.982636][ T2292] loop2: detected capacity change from 0 to 256 [ 157.011273][ T2294] serio: Serial port ptm0 [ 157.050531][ T2292] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 157.069795][ T2292] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 157.095007][ T2292] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 157.170804][ T2279] loop3: detected capacity change from 0 to 40427 [ 157.190273][ T2279] F2FS-fs (loop3): fault_injection options not supported [ 157.205061][ T2279] F2FS-fs (loop3): invalid crc value [ 157.211539][ T2279] F2FS-fs (loop3): Found nat_bits in checkpoint [ 157.245532][ T30] audit: type=1400 audit(1751598843.245:472): avc: denied { create } for pid=2297 comm="syz.0.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 157.246016][ T2298] futex_wake_op: syz.0.567 tries to shift op by 32; fix this program [ 157.282250][ T2279] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 157.308212][ T2302] xt_CT: No such helper "snmp" [ 157.711280][ T2308] 9pnet: Insufficient options for proto=fd [ 157.788598][ T286] attempt to access beyond end of device [ 157.788598][ T286] loop3: rw=2049, want=45104, limit=40427 [ 158.850685][ T2325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.578'. [ 158.908093][ T2325] netlink: 28 bytes leftover after parsing attributes in process `syz.4.578'. [ 159.000050][ T2330] netlink: 40 bytes leftover after parsing attributes in process `syz.5.579'. [ 159.506414][ T2337] hub 8-0:1.0: USB hub found [ 159.511815][ T2337] hub 8-0:1.0: 1 port detected [ 159.554854][ T30] audit: type=1400 audit(1751598845.535:473): avc: denied { ioctl } for pid=2324 comm="syz.4.578" path="socket:[21927]" dev="sockfs" ino=21927 ioctlcmd=0x891b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 160.009340][ T2346] 9pnet: Insufficient options for proto=fd [ 160.048505][ T2351] serio: Serial port ptm0 [ 160.100805][ T30] audit: type=1326 audit(1751598846.105:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2355 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177248b929 code=0x7ffc0000 [ 160.135371][ T30] audit: type=1326 audit(1751598846.105:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2355 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f177248b929 code=0x7ffc0000 [ 160.159056][ T30] audit: type=1326 audit(1751598846.105:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2355 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177248b929 code=0x7ffc0000 [ 160.182720][ T30] audit: type=1326 audit(1751598846.105:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2355 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f177248b929 code=0x7ffc0000 [ 161.327116][ T2380] hub 8-0:1.0: USB hub found [ 161.332292][ T2380] hub 8-0:1.0: 1 port detected [ 161.789759][ T2387] netlink: 200 bytes leftover after parsing attributes in process `syz.0.595'. [ 161.948819][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 161.948833][ T30] audit: type=1400 audit(1751598847.945:480): avc: denied { bind } for pid=2388 comm="syz.3.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 162.027816][ T30] audit: type=1326 audit(1751598848.025:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2391 comm="syz.5.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aabcdd929 code=0x7ffc0000 [ 162.057181][ T30] audit: type=1326 audit(1751598848.025:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2391 comm="syz.5.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aabcdd929 code=0x7ffc0000 [ 162.081152][ T30] audit: type=1326 audit(1751598848.025:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2391 comm="syz.5.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3aabcdd929 code=0x7ffc0000 [ 162.112823][ T30] audit: type=1326 audit(1751598848.025:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2391 comm="syz.5.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aabcdd929 code=0x7ffc0000 [ 162.136377][ T30] audit: type=1326 audit(1751598848.025:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2391 comm="syz.5.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aabcdd929 code=0x7ffc0000 [ 162.170801][ T2399] serio: Serial port ptm0 [ 162.175209][ T816] Bluetooth: hci0: Frame reassembly failed (-84) [ 162.201020][ T30] audit: type=1326 audit(1751598848.025:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2391 comm="syz.5.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f3aabcdd929 code=0x7ffc0000 [ 162.210863][ T2389] loop3: detected capacity change from 0 to 40427 [ 162.254162][ T2389] ================================================================================ [ 162.258921][ T30] audit: type=1326 audit(1751598848.035:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2391 comm="syz.5.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aabcdd929 code=0x7ffc0000 [ 162.264412][ T2389] UBSAN: shift-out-of-bounds in fs/f2fs/super.c:911:5 [ 162.329855][ T2389] shift exponent 78 is too large for 32-bit type 'int' [ 162.369815][ T2389] CPU: 1 PID: 2389 Comm: syz.3.597 Not tainted 5.15.185-syzkaller-00073-g41b0e17cc2ca #0 [ 162.379631][ T2389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 162.389690][ T2389] Call Trace: [ 162.392960][ T2389] [ 162.395884][ T2389] __dump_stack+0x21/0x30 [ 162.400207][ T2389] dump_stack_lvl+0xee/0x150 [ 162.404787][ T2389] ? show_regs_print_info+0x20/0x20 [ 162.409978][ T2389] ? slab_free_freelist_hook+0xc2/0x190 [ 162.415524][ T2389] dump_stack+0x15/0x20 [ 162.419670][ T2389] ubsan_epilogue+0xe/0x40 [ 162.424081][ T2389] __ubsan_handle_shift_out_of_bounds+0x37c/0x400 [ 162.430497][ T2389] ? match_int+0x13c/0x190 [ 162.434916][ T2389] parse_options+0x442f/0x4460 [ 162.439682][ T2389] ? default_options+0xb10/0xb10 [ 162.444615][ T2389] ? __kmalloc_track_caller+0x13c/0x2c0 [ 162.450158][ T2389] ? memcpy+0x56/0x70 [ 162.454136][ T2389] f2fs_fill_super+0x1f9d/0x6d10 [ 162.459074][ T2389] ? kill_f2fs_super+0x390/0x390 [ 162.464005][ T2389] ? vscnprintf+0x80/0x80 [ 162.468335][ T2389] ? mutex_unlock+0x89/0x220 [ 162.472919][ T2389] ? set_blocksize+0x1fc/0x380 [ 162.477685][ T2389] ? sb_set_blocksize+0xaa/0xf0 [ 162.482532][ T2389] ? kill_f2fs_super+0x390/0x390 [ 162.487468][ T2389] mount_bdev+0x2ae/0x3e0 [ 162.491791][ T2389] ? kill_f2fs_super+0x390/0x390 [ 162.496727][ T2389] f2fs_mount+0x34/0x40 [ 162.500884][ T2389] legacy_get_tree+0xed/0x190 [ 162.505556][ T2389] ? trace_raw_output_f2fs__rw_end+0x110/0x110 [ 162.511709][ T2389] vfs_get_tree+0x89/0x260 [ 162.516210][ T2389] do_new_mount+0x25a/0xa20 [ 162.520718][ T2389] path_mount+0x675/0x1020 [ 162.525126][ T2389] ? user_path_at_empty+0x161/0x1c0 [ 162.530323][ T2389] __se_sys_mount+0x318/0x380 [ 162.535005][ T2389] ? __x64_sys_mount+0xd0/0xd0 [ 162.539769][ T2389] ? __kasan_check_write+0x14/0x20 [ 162.544909][ T2389] __x64_sys_mount+0xbf/0xd0 [ 162.549497][ T2389] x64_sys_call+0x6bf/0x9a0 [ 162.553996][ T2389] do_syscall_64+0x4c/0xa0 [ 162.558417][ T2389] ? clear_bhb_loop+0x50/0xa0 [ 162.563099][ T2389] ? clear_bhb_loop+0x50/0xa0 [ 162.567772][ T2389] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 162.573674][ T2389] RIP: 0033:0x7f462f6f70ca [ 162.578090][ T2389] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.597827][ T2389] RSP: 002b:00007f462dd5de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 162.606265][ T2389] RAX: ffffffffffffffda RBX: 00007f462dd5def0 RCX: 00007f462f6f70ca [ 162.614244][ T2389] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 00007f462dd5deb0 [ 162.622217][ T2389] RBP: 0000200000000000 R08: 00007f462dd5def0 R09: 0000000000000004 [ 162.630188][ T2389] R10: 0000000000000004 R11: 0000000000000246 R12: 0000200000000040 [ 162.638156][ T2389] R13: 00007f462dd5deb0 R14: 000000000000550b R15: 0000200000000080 [ 162.646145][ T2389] [ 162.659808][ T2389] ================================================================================ [ 162.674566][ T2389] F2FS-fs (loop3): Not support 16384, larger than 256 [ 163.089790][ T1076] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 163.329784][ T1076] usb 4-1: Using ep0 maxpacket: 16 [ 163.449842][ T1076] usb 4-1: config index 0 descriptor too short (expected 1051, got 27) [ 163.458154][ T1076] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 52, changing to 9 [ 163.469130][ T1076] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 58074, setting to 1024 [ 163.639870][ T1076] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 163.648898][ T1076] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.656883][ T1076] usb 4-1: Product: syz [ 163.661039][ T1076] usb 4-1: Manufacturer: syz [ 163.665607][ T1076] usb 4-1: SerialNumber: syz [ 163.670760][ T1076] usb 4-1: config 0 descriptor?? [ 163.911676][ T1076] usb 4-1: USB disconnect, device number 2 [ 164.219828][ T39] Bluetooth: hci0: command 0x1003 tx timeout [ 164.225939][ T47] Bluetooth: hci0: sending frame failed (-49) [ 166.299822][ T39] Bluetooth: hci0: command 0x1001 tx timeout [ 166.305863][ T47] Bluetooth: hci0: sending frame failed (-49) [ 168.379814][ T505] Bluetooth: hci0: command 0x1009 tx timeout