last executing test programs: 23.615582744s ago: executing program 2 (id=11): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devtmpfs\x00', 0x0, &(0x7f0000000380)='source') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018ed8, &(0x7f0000000280)={[{@usrjquota}, {@noload}, {@nobh}, {@jqfmt_vfsv0}, {@acl}, {@data_ordered}, {@errors_continue}, {@quota}]}, 0x6, 0x644, &(0x7f00000006c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 22.970108194s ago: executing program 2 (id=20): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x13, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000010000000000000000000000071107c000000000095000000000000005de07ebc2189fc614ffa0e70e9c3d788a756a5d246433fdf684e8da7a1d989fa54cd049f23af5f5d246c506498e98e2e763bf190f6931e737f1e01649e92af798ab3dc2dbcdb257a5d73f20fdb5bf90d89b8033a97a0de60ba2967b8c2d7e76cf28b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = syz_usb_connect(0x5, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101292100090509"], 0x0) r2 = epoll_create1(0x0) fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0xa0179e08}) r3 = gettid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x0, 0xc, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="d80100001c0001"], 0x1d8}}, 0x0) 20.897892306s ago: executing program 2 (id=46): ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") r2 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x101000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c03, r3) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000900)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x800) ioctl$UFFDIO_API(r6, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) mkdirat(r5, &(0x7f0000000180)='./bus\x00', 0x0) 20.531197152s ago: executing program 2 (id=48): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x804498, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c757466383d302c73686f77657865632c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c757466383d302c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c002d43c85feaa91b9c2c7e69443d6987a2f44801578200aa8d73d6b7d88bb2056dee1336c0e6a2b0376b8bd2"], 0xfd, 0x2a1, &(0x7f00000006c0)="$eJzs3E1rE0EYwPGnadOXlDY5iKAgPuhFL0sbP0GQFsSAUhtRD8LUbjRkTUo2RiJie/Pq5ygevQnWL9CLN+/ipQiClx6kK90Xsy3Bvth20+b/g7CTnXl2Zje74dmFnY0H755Xy65VNk1JjaqkRFZkUyS3XQoNhMuUXx6WuBW5Pv7r66V7Dx/dLhSLM3Oqs4X5G3lVnbz86eXr91c+N8fvf5j8OCLruccbP/Pf1s+vX9jYmo+2Xm+q0YV6vWkWHFsXK27VUr3r2Ma1tVJz7caO+rJTX1pqq6ktTmSWGrbrqqm1tWq3tVnXZqOt5qmp1NSyLJ3ISL8ZPHBEaXVuzhSOZTBIwli3lY1GwQx2rSytnsSgAABAb0kq/39WcbXiam2v/D8lR5P/j57I0Txt/Px/q2vSiLMhvX0DUDCZ8PrdifwfAAAAAAAAAAAAAAAAAAAAAIDTYNPzsp7nZaNl9BkJ35mJvic9ThyPQ/z+AwkOF0cs9uLeqIjztlVqlYJlUF8oS0UcsWUqLfLbPx9CQXn2VnFmSn05WXOWw3j/JcGRKD6S6x4/HcRrLH65VUpLJt5/XrJyrnt8fld8WkRapWG5djUWb0lWvjyRujiy6J/Xnfg306o37xR39T/mtwMAAAAA4Cyw9K/czvvfYDZJy9Jo2pBd9cHKzvMBye7xfEBlbVg68UNycSi5/QYAAAAAoJ+47VdV4zh2g8LBCv146KxwFuV/NvY8b3m70f93mhKRhPb0h4j0wAGPFdJHccF+fxFsZD+Nk/pHAgAAAHBcOkl/0iMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKB/7XfysKj9YeYei3U3mMxeAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3hTwAAAP//Q1YX+Q==") creat(&(0x7f0000000040)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 20.464058563s ago: executing program 2 (id=51): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x5000, 0x3000, 0x0, 0xffffffffffffffff, 0x5}) 20.344293605s ago: executing program 2 (id=53): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x4012, &(0x7f00000000c0), 0x2, 0xbd4, &(0x7f0000001040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x161000, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000200)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 20.344076565s ago: executing program 32 (id=53): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x4012, &(0x7f00000000c0), 0x2, 0xbd4, &(0x7f0000001040)="$eJzs3M1rHOcZAPBnRquVbKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8FC2llhNYfSCquZEFX7T9Q2p4DuQSSmIQc4rMvCck1l8S+JuQQMEGxEgghUZj9kGRpV5KjXY+Qfz94d9933lk9z7PD7syLdjeA59ZIdpNGnIqIq0lEqbk9jYhivTcYUWvst7a6PPnF6vJkEuvrf/k0iSQiHq8uT9Z3W2/4Z0ScyMZJ/ZHx3u+T+MG/d8adX1yanahWK3PN8dmF67fOzi8u/Wrm+sS1yrXKjbHzvxk/N35+9MJ412r98sNL9z7/2R8/rn31ytd3P/vfS0lciqHm3EYdXTQSI/XnaLtCREx0O1hO+pr1bK0zKezxoLTHSQEA0FG65RruR1GKvti8eCvFW+/nmhwAAADQFet9G/+6AwAAAI6sxPofAAAAjrjW5wAery5Ptlq+n0h4th5djojhRv1rzdaYKUStfj8Y/RFx/HESW7/WmjQedmAjEfHRwwuvZy169D3k3dRWIuLH7Y5/Uq9/uP4t7p31pxEx2oX4I9vGe9Tf14WQTzhI/Ze6EP8p6weArrh/uXEi23n+Szeuf6LN+a/Q5tz1XbQ5/3X9HL+b1vXf2o7rv836+zpc//15nzHuvPzC7U5zWf2/vfeH11oti5/dH6iop/BoJeInhXb1Jxv1Jx3qv7rPGKVvblc6zeVd//qLEaejff0tye6/T3R2eqZaGW3cto2x8u74q53i511/dvyPd6i/9ftPnY7/rX3G+NuVK2/s2Phws7t7/eknxeSv9V6xueUfEwsLc2MRxeRPO7ef2z2X1j6tv5HVf+bnu7/+29WfvSfUms9DthZYad5n439ti/m7u3fe7JRPa/2X5/Gf6nD8t9b/TmHn8f/PPmP84u3/nuk0t3X9m7UsfmstDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtAxExFElajoi03k/TcjniRET8MI6n1ZvzC7+cvvn3G1PZXMRw9KfTM9XKaESUGuMkG4/V+5vjc9vGv46IkxHx/9Kx+rg8ebM6lXfxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbDgREUORpOWISCNirZSm5XLeWQEAAABdN5x3AgAAAEDPWf8DAADA0Wf9DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQI+d/On9B0lE1C4eq7dMsTnXn2tmQK+l2c1U3lkAeejLOwEgN4W8EwBy85RrfJcLcAQle8wPdpwZ6HouAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABxep0/df5BERO3isXrLFJtz/blmBvRamncCQG76dpssPLs8gGfPSxyeX9b4QLLH/ODmPrUnZwZ6lhMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAh89QvSVpOSKKzW3lcsT3ImI4+pPpmWplNCK+HxEflPoHsvFYzjkDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQffOLS7MT1WplLuuk0exsbNHZ7CSNZ6x2WPLROWCnGIcijUPayfudCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPMwvLs1OVKuVufm8MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyNr+4NDtRrVbmetjJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzbQAAAP//7HcR9w==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x161000, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000200)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 13.216019525s ago: executing program 3 (id=232): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000080)={[{@errors_remount}, {@lazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@block_validity}, {@block_validity}, {@quota}]}, 0x1, 0x45d, &(0x7f0000000540)="$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") socket(0x10, 0x80002, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 11.349846684s ago: executing program 3 (id=272): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000b80), 0x3, 0x4d5, &(0x7f0000001300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r0, r2, r3) 10.97873476s ago: executing program 3 (id=282): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x27) 10.869477972s ago: executing program 3 (id=286): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', 0x89901) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x810082, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x2c3, &(0x7f0000000740)="$eJzs3T9rc1UcB/DfTdObqEMyu3hBB6eHp4KTS6r0gUczKRnUQR5sC9IUoYWCfzDt5Ori6CsQBDcHF1+Ai4O74Cq42aFw5d7cm6RtGhNsKvb5fJb8es753nPuyW1Kh56+GhG7Weyfff5btNtJNHrRi/MkutGI2mlc0vsqAID/s/M8jz/zPG+umEsior2mNQEA61X//C8sFfh+7UsCANbsnXffe2u73995O8va8ejwy5NB8Zt98Tru396Pj2IYe/EwOnERkU+M60d5no+aWaEbLx2OTgZF8vCDn6vrb/8RUea3ohPdsuly/nF/Zysbm8mPinU8W83fG07Xe23+x/2dV+bkY5DGyy/OrP9BdOKXD+PjGMZueZ1p/outLHsj//qvz94vZijyyehk0CrHzcy8cVfvCQAAAAAAAAAAAAAAAAAAAAAA99+D6uycVpTn9xRN1fk7GxfFF5uR1bqXz+cZ55P6QlfOBxrl8U19vs7DLMvyauA034znm7HqscMAAAAAAAAAAAAAAAAAAABwLx1/8unBk+Fw76gs3syrYtKyWlGfBtCMSIvXpVK//jgOzXT1JmOaRy/E4ngrJvFGVS6YNDbqMUnEwoUVN/HvdmPp4pmb1vztd6tesP3PYzanc0W32oxbvq/66Tp4kszfw1bULe36ff9hdkwaS86V3tSVL/v4lUU6t6uz8r2nz5XFaMGYSBYt7LXfxztXtVTfUKeTMWm5q3Pjm1UxE7/ybKz0PF//rEiSW//4AQAAAAAAAAAAAAAAAAAAZkz/6HdO59nCaCNvrW1ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCnpv//f1I0r7VcLUZVeNzy0+sLBqdxdPwf3yIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABPgb8DAAD//+j1VZQ=") 10.726155654s ago: executing program 3 (id=294): r0 = socket(0x2, 0x3, 0xff) sendmmsg$sock(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=[@timestamping={{0x14, 0x1, 0x25, 0x509c}}], 0x18}}], 0x1, 0x40) 10.652557575s ago: executing program 3 (id=300): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x6c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_b, @from_mac=@device_b, {0x0, 0x40}}, 0x0, @random=0xa, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x90}]]}, 0x6c}, 0x1, 0x0, 0x0, 0x11}, 0x0) 10.588270866s ago: executing program 33 (id=300): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x6c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_b, @from_mac=@device_b, {0x0, 0x40}}, 0x0, @random=0xa, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x90}]]}, 0x6c}, 0x1, 0x0, 0x0, 0x11}, 0x0) 1.710750224s ago: executing program 6 (id=486): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 1.30845572s ago: executing program 6 (id=490): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000), 0x10) read(r0, &(0x7f0000002500)=""/4103, 0x1007) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000340)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000440)={&(0x7f0000000140)=@can={{}, 0x0, 0x1, 0x0, 0x0, "b9fe997a1675ec25"}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x80) 1.197184742s ago: executing program 0 (id=492): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r1 = dup(r0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000080)=0xff, 0x4) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) read$FUSE(r1, &(0x7f0000003d00)={0x2020}, 0x2020) 1.162985612s ago: executing program 0 (id=494): socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000000)={0x20002015}) close_range(r3, r4, 0x0) 743.108479ms ago: executing program 5 (id=508): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001540)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x260, 0x20a, 0x278, 0x260, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3c}, @private1, [], [], 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) 709.6608ms ago: executing program 5 (id=509): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)={0x38, r0, 0x801, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "c19e7bee6e"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_SEQ={0x4}]}]}, 0x38}}, 0x0) 636.522901ms ago: executing program 5 (id=511): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0xfffffeff, @empty, 0x4000000}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, 0x4}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108bfaffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 576.770442ms ago: executing program 5 (id=514): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x9a, 0x2a9, &(0x7f0000000500)="$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") creat(0x0, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000200), 0x175d9003) write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0xe}}, 0x18) 524.231133ms ago: executing program 4 (id=518): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0) 432.997424ms ago: executing program 4 (id=520): r0 = socket$vsock_stream(0x28, 0x1, 0x0) poll(&(0x7f0000004040)=[{r0, 0x202}], 0x1, 0x4) 432.464304ms ago: executing program 6 (id=522): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa}, {}, {0x1c, 0xfff9}}, [@TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x5, 0x1, 0xf5, 0x6}]}}]}}, @TCA_CHAIN={0x8, 0xb, 0x800}]}, 0x54}}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 410.018144ms ago: executing program 4 (id=523): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) 357.919445ms ago: executing program 6 (id=525): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x9, 0x2, 0x0, 0x0, 0x4, 0xfffd}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 357.623115ms ago: executing program 4 (id=526): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0xe) wait4(0x0, &(0x7f0000000240), 0x4, &(0x7f0000000500)) 356.981935ms ago: executing program 5 (id=527): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, r1, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x24}}, 0x4000) 296.334146ms ago: executing program 6 (id=529): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d80)=@delchain={0x1e0, 0x65, 0x2, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1ac, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x190, 0x1, [@m_sample={0x18c, 0x10, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x2, 0x0, 0x6, 0xa}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x200}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0x674, 0x20000000, 0x5, 0x8}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x800}]}, {0xff, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 296.087446ms ago: executing program 4 (id=530): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@mcast1, @in=@empty, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x40, 0x0, 0x88}, {0x10001, 0x0, 0xc, 0x0, 0x4, 0x0, 0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 266.779176ms ago: executing program 6 (id=532): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a959fc5ec5071900", "8e083700daf38a6d69e9b5e9c2f133d7", "e2739528", "12772541f8ebfebb"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff004) 209.112007ms ago: executing program 5 (id=533): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) preadv(r2, &(0x7f0000000400)=[{&(0x7f0000000440)=""/257, 0x101}], 0x1, 0x20001, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 208.008487ms ago: executing program 4 (id=534): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r1, 0x2) 169.228578ms ago: executing program 1 (id=535): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000100)={r0, r0, 0x0, 0x0, 0x0, 0xc2, 0xff, 0x15c2, 0x5886, 0x6, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 168.711558ms ago: executing program 1 (id=536): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file0\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x0, 0x0, &(0x7f0000000d40)) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) open_tree(0xffffffffffffff9c, 0x0, 0x89901) umount2(&(0x7f0000000000)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 84.918829ms ago: executing program 1 (id=537): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000001840)=0x3d5, 0x4) accept4(r0, 0x0, 0x0, 0x0) 78.926639ms ago: executing program 1 (id=538): r0 = socket(0x2a, 0x2, 0xffffffff) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@delqdisc={0x24, 0x25, 0x800, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6, 0x7}, {0x3, 0x8}, {0xfff1, 0x54ace61ca367eb27}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004000) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x1, 0x0, 0xa3cc}, 'p'}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}, @TCA_BASIC_ACT={0x34, 0x3, [@m_skbedit={0x30, 0x3, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x88}}, 0x40808c4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 48.81356ms ago: executing program 0 (id=539): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x2c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x80) 18.42078ms ago: executing program 1 (id=540): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0, 0x58}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0xfff3}, {0x10, 0xffe0}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 18.17057ms ago: executing program 0 (id=541): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000040)=@routing={0x3a, 0x2, 0x1, 0x5, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}]}, 0x18) 17.91128ms ago: executing program 1 (id=542): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0x0, 0xc6, &(0x7f00000003c0)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0xde, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df85000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000096000a0002000180c200000300000600050001"], 0x30}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010125bd70000000000000000000", @ANYRES32, @ANYBLOB="4010000000280200"], 0x20}}, 0x400c004) close(0x3) 17.67546ms ago: executing program 0 (id=543): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000000206000000", @ANYRESHEX], 0x30}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@dellinkprop={0x38, 0x6d, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'vlan0\x00'}, @IFLA_PROP_LIST={0x4}]}, 0x38}}, 0x0) 0s ago: executing program 0 (id=544): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffff4f7}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d6, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x40) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000020ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.123' (ED25519) to the list of known hosts. [ 23.377255][ T30] audit: type=1400 audit(1744116683.639:66): avc: denied { integrity } for pid=279 comm="syz-executor" lockdown_reason="debugfs access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 23.404921][ T30] audit: type=1400 audit(1744116683.659:67): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.406562][ T279] cgroup: Unknown subsys name 'net' [ 23.430961][ T30] audit: type=1400 audit(1744116683.659:68): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.459489][ T30] audit: type=1400 audit(1744116683.699:69): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.459763][ T279] cgroup: Unknown subsys name 'devices' [ 23.727640][ T279] cgroup: Unknown subsys name 'hugetlb' [ 23.733367][ T279] cgroup: Unknown subsys name 'rlimit' [ 23.904857][ T30] audit: type=1400 audit(1744116684.159:70): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.923686][ T282] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.931026][ T30] audit: type=1400 audit(1744116684.159:71): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.972063][ T30] audit: type=1400 audit(1744116684.159:72): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.978225][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.997817][ T30] audit: type=1400 audit(1744116684.199:73): avc: denied { relabelto } for pid=282 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.034066][ T30] audit: type=1400 audit(1744116684.199:74): avc: denied { write } for pid=282 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.062198][ T30] audit: type=1400 audit(1744116684.229:75): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.107191][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.115067][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.126913][ T289] device bridge_slave_0 entered promiscuous mode [ 25.136526][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.144627][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.153830][ T289] device bridge_slave_1 entered promiscuous mode [ 25.161263][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.169803][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.179176][ T290] device bridge_slave_0 entered promiscuous mode [ 25.190801][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.198775][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.207525][ T290] device bridge_slave_1 entered promiscuous mode [ 25.278233][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.286929][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.295482][ T293] device bridge_slave_0 entered promiscuous mode [ 25.306896][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.314099][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.322584][ T293] device bridge_slave_1 entered promiscuous mode [ 25.412271][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.420382][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.429397][ T291] device bridge_slave_0 entered promiscuous mode [ 25.437862][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.445681][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.454599][ T291] device bridge_slave_1 entered promiscuous mode [ 25.466754][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.473632][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.482814][ T292] device bridge_slave_0 entered promiscuous mode [ 25.506195][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.513929][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.524113][ T292] device bridge_slave_1 entered promiscuous mode [ 25.660644][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.668575][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.676528][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.686394][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.728061][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.735106][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.743029][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.750582][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.776473][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.784737][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.793960][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.803772][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.821877][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.829761][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.837390][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.846453][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.857853][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.865446][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.874999][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.886070][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.894040][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.904291][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.913014][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.922541][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.931636][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.942081][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.977452][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.994018][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.012981][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.048634][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.057000][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.068287][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.077447][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.088491][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.097670][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.107635][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.116352][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.139438][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.147562][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.157093][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.170540][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.182983][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.192190][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.200881][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.210632][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.220625][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.229120][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.239183][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.250228][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.260679][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.270890][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.281861][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.290692][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.306199][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.314930][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.327499][ T290] device veth0_vlan entered promiscuous mode [ 26.335944][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.344173][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.354138][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.366235][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.378660][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.388113][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.416045][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.425147][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.433982][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.442969][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.452401][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.461480][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.479193][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.488485][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.498086][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.507877][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.520504][ T290] device veth1_macvtap entered promiscuous mode [ 26.537967][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.547659][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.558192][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.567824][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.575750][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.584105][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.592768][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.601578][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.609680][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.618289][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.627681][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.636109][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.643944][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.652278][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.662079][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.672100][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 26.697033][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.707405][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.717128][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.727769][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.737315][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.752473][ T292] device veth0_vlan entered promiscuous mode [ 26.763536][ T289] device veth0_vlan entered promiscuous mode [ 26.772301][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.781061][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.790116][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.799409][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.807892][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.819530][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.827925][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.835950][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.844404][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.852999][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.861913][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.875244][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.889241][ T290] request_module fs-gadgetfs succeeded, but still no fs? [ 26.893576][ T293] device veth0_vlan entered promiscuous mode [ 26.905698][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.914819][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.923813][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.931589][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.940751][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.949693][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.972853][ T293] device veth1_macvtap entered promiscuous mode [ 26.982850][ T289] device veth1_macvtap entered promiscuous mode [ 26.991033][ T316] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.995839][ T292] device veth1_macvtap entered promiscuous mode [ 27.019515][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.028873][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.038549][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.050018][ T316] capability: warning: `syz.1.2' uses 32-bit capabilities (legacy support in use) [ 27.064340][ T291] device veth0_vlan entered promiscuous mode [ 27.080245][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.090415][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.099910][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.110462][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.121950][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.132529][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.141555][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.150431][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.161094][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.169877][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.178526][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.187035][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.195804][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.214364][ T291] device veth1_macvtap entered promiscuous mode [ 27.225575][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.234080][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.243140][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.252314][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.261290][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.297643][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.308596][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.318014][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.327422][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.388771][ T326] loop0: detected capacity change from 0 to 512 [ 27.399334][ T328] loop3: detected capacity change from 0 to 512 [ 27.417384][ T326] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 27.482734][ T328] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 27.485462][ T326] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 27.537533][ T326] EXT4-fs (loop0): 1 truncate cleaned up [ 27.557082][ T326] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 27.575406][ T328] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 27.626402][ T328] EXT4-fs error (device loop3): ext4_do_update_inode:5205: inode #2: comm syz.3.4: corrupted inode contents [ 27.645011][ T328] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #2: comm syz.3.4: mark_inode_dirty error [ 27.658769][ T328] EXT4-fs error (device loop3): ext4_do_update_inode:5205: inode #2: comm syz.3.4: corrupted inode contents [ 27.686295][ T328] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.4: mark_inode_dirty error [ 27.742358][ T328] EXT4-fs error (device loop3): ext4_get_first_dir_block:3608: inode #18: comm syz.3.4: directory missing '.' [ 27.813913][ T344] loop0: detected capacity change from 0 to 8192 [ 27.845719][ T351] Non-string source [ 27.873993][ T344] incfs: ino conflict with backing FS 1 [ 27.905751][ T352] loop2: detected capacity change from 0 to 1024 [ 27.968865][ T357] loop1: detected capacity change from 0 to 16 [ 27.976067][ T358] xt_bpf: check failed: parse error [ 27.976685][ T352] ======================================================= [ 27.976685][ T352] WARNING: The mand mount option has been deprecated and [ 27.976685][ T352] and is ignored by this kernel. Remove the mand [ 27.976685][ T352] option from the mount to silence this warning. [ 27.976685][ T352] ======================================================= [ 28.026583][ T357] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 125300) [ 28.041557][ T352] EXT4-fs (loop2): Ignoring removed nobh option [ 28.058091][ T352] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 28.073812][ T352] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz.2.11: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 28.084831][ T363] binder_alloc: 361: binder_alloc_buf size 4120 failed, no address space [ 28.109490][ T352] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.11: couldn't read orphan inode 11 (err -117) [ 28.126830][ T352] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,noload,nobh,jqfmt=vfsv0,acl,data=ordered,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 28.136469][ T363] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 28.283974][ T348] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.11: Invalid block bitmap block 0 in block_group 0 [ 28.316752][ T371] loop3: detected capacity change from 0 to 256 [ 28.323192][ T372] loop4: detected capacity change from 0 to 512 [ 28.324188][ T348] EXT4-fs error (device loop2): ext4_acquire_dquot:6188: comm syz.2.11: Failed to acquire dquot type 0 [ 28.387410][ T374] loop0: detected capacity change from 0 to 256 [ 28.414289][ T372] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,nobarrier,,errors=continue. Quota mode: writeback. [ 28.420929][ T348] syz.2.11 (348) used greatest stack depth: 20296 bytes left [ 28.432132][ T372] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.448059][ T371] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 28.471274][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 28.471292][ T30] audit: type=1400 audit(1744116688.729:150): avc: denied { rename } for pid=370 comm="syz.4.18" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 28.476309][ T371] FAT-fs (loop3): Filesystem has been set read-only [ 28.485429][ T30] audit: type=1400 audit(1744116688.739:151): avc: denied { unlink } for pid=370 comm="syz.4.18" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 28.508741][ T382] FAT-fs (loop3): error, clusters badly computed (0 != 128) [ 28.522257][ T30] audit: type=1400 audit(1744116688.739:152): avc: denied { rename } for pid=370 comm="syz.4.18" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 28.569523][ T382] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 28.582912][ T30] audit: type=1400 audit(1744116688.739:153): avc: denied { unlink } for pid=370 comm="syz.4.18" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 28.619259][ T368] loop0: detected capacity change from 0 to 512 [ 28.637287][ T30] audit: type=1400 audit(1744116688.889:154): avc: denied { create } for pid=388 comm="syz.2.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 28.690150][ T30] audit: type=1400 audit(1744116688.919:155): avc: denied { read write } for pid=388 comm="syz.2.20" name="raw-gadget" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.729932][ T30] audit: type=1400 audit(1744116688.919:156): avc: denied { open } for pid=388 comm="syz.2.20" path="/dev/raw-gadget" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.760071][ T30] audit: type=1400 audit(1744116688.919:157): avc: denied { ioctl } for pid=388 comm="syz.2.20" path="/dev/raw-gadget" dev="devtmpfs" ino=250 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.803221][ T396] loop0: detected capacity change from 0 to 2048 [ 28.840707][ T30] audit: type=1400 audit(1744116689.099:158): avc: denied { create } for pid=400 comm="syz.4.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.863855][ T30] audit: type=1400 audit(1744116689.099:159): avc: denied { setopt } for pid=400 comm="syz.4.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.877294][ T396] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv0,lazytime,debug_want_extra_isize=0x0000000000000040,bsdgroups,nombcache,minixdf,noload,debug_want_extra_isize=0x0000000000000004,grpquota,,errors=continue. Quota mode: writeback. [ 28.943536][ T396] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 28.967555][ T393] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 28.982160][ T393] EXT4-fs (loop0): This should not happen!! Data will be lost [ 28.982160][ T393] [ 28.993866][ T313] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 29.003063][ T393] EXT4-fs (loop0): Total free blocks count 0 [ 29.009364][ T393] EXT4-fs (loop0): Free/Dirty block details [ 29.015618][ T393] EXT4-fs (loop0): free_blocks=2415919104 [ 29.022122][ T393] EXT4-fs (loop0): dirty_blocks=32 [ 29.028092][ T393] EXT4-fs (loop0): Block reservation details [ 29.034756][ T393] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 29.048218][ T10] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 66049 with max blocks 1 with error 28 [ 29.062879][ T10] EXT4-fs (loop0): This should not happen!! Data will be lost [ 29.062879][ T10] [ 29.089866][ T413] loop4: detected capacity change from 0 to 256 [ 29.097250][ T6] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 29.345498][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 29.405469][ T294] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 29.416303][ T428] loop4: detected capacity change from 0 to 512 [ 29.465649][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.477755][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.490181][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 29.504309][ T6] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 29.514841][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.517627][ T428] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000001,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 29.524280][ T313] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 29.540631][ T428] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 29.552085][ T6] usb 4-1: config 0 descriptor?? [ 29.568683][ T313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.576546][ T313] usb 3-1: Product: syz [ 29.581122][ T313] usb 3-1: Manufacturer: syz [ 29.586128][ T313] usb 3-1: SerialNumber: syz [ 29.591556][ T313] usb 3-1: config 0 descriptor?? [ 29.656453][ T428] EXT4-fs error (device loop4): ext4_do_update_inode:5205: inode #2: comm syz.4.39: corrupted inode contents [ 29.671331][ T428] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #2: comm syz.4.39: mark_inode_dirty error [ 29.683392][ T428] EXT4-fs error (device loop4): ext4_do_update_inode:5205: inode #2: comm syz.4.39: corrupted inode contents [ 29.698358][ T428] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.39: mark_inode_dirty error [ 29.824377][ T294] usb 1-1: config 1 has an invalid descriptor of length 220, skipping remainder of the config [ 29.835498][ T294] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 29.845077][ T294] usb 1-1: config 1 has no interface number 0 [ 29.852067][ T294] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.863603][ T294] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 29.874109][ T294] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 26447, setting to 1024 [ 29.885791][ T389] netlink: 452 bytes leftover after parsing attributes in process `syz.2.20'. [ 29.886764][ T294] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 29.909228][ T313] usb 3-1: USB disconnect, device number 2 [ 29.915393][ T294] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 30.092000][ T6] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 30.100524][ T294] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 30.115543][ T6] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 30.129669][ T294] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.142142][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.167550][ T294] usb 1-1: Product: syz [ 30.178210][ T294] usb 1-1: Manufacturer: syz [ 30.182915][ T294] usb 1-1: SerialNumber: syz [ 30.429276][ T419] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 30.577997][ T452] loop2: detected capacity change from 0 to 2048 [ 30.790455][ T452] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 30.821951][ T452] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 30.890729][ T463] loop2: detected capacity change from 0 to 128 [ 31.105116][ T470] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.113492][ T470] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.123084][ T470] device bridge_slave_0 entered promiscuous mode [ 31.134564][ T470] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.142896][ T470] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.151367][ T470] device bridge_slave_1 entered promiscuous mode [ 31.175651][ T419] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 31.196132][ T294] cdc_ncm 1-1:1.1: bind() failure [ 31.234225][ T470] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.243170][ T470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.252134][ T470] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.262684][ T470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.278081][ T39] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 31.296490][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.304927][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.314508][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.326951][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.335553][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.344938][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.352894][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.364012][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.371237][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.388637][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.407297][ T449] usb 1-1: USB disconnect, device number 2 [ 31.414299][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.433026][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.449538][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.459050][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.467525][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.480667][ T470] device veth0_vlan entered promiscuous mode [ 31.494350][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.505049][ T470] device veth1_macvtap entered promiscuous mode [ 31.520833][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.535424][ T39] usb 5-1: Using ep0 maxpacket: 32 [ 31.543222][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.561996][ T10] device bridge_slave_1 left promiscuous mode [ 31.574524][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.583942][ T10] device bridge_slave_0 left promiscuous mode [ 31.590976][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.601088][ T10] device veth1_macvtap left promiscuous mode [ 31.607221][ T10] device veth0_vlan left promiscuous mode [ 31.665861][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.679438][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.690698][ T39] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 31.700720][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.720466][ T39] usb 5-1: config 0 descriptor?? [ 31.726821][ T492] loop5: detected capacity change from 0 to 256 [ 31.895200][ T494] netlink: 220 bytes leftover after parsing attributes in process `syz.3.62'. [ 32.019634][ T503] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 32.028462][ T294] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 32.201794][ T518] netlink: 160 bytes leftover after parsing attributes in process `syz.1.72'. [ 32.216643][ T320] usb 4-1: USB disconnect, device number 2 [ 32.228167][ T39] savu 0003:1E7D:2D5A.0002: hiddev97,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 32.449625][ T39] usb 5-1: USB disconnect, device number 2 [ 32.645547][ T294] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 32.656427][ T294] usb 6-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 32.665469][ T294] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.678251][ T294] usb 6-1: config 0 descriptor?? [ 33.017096][ T294] rndis_host 6-1:0.0: skipping garbage [ 33.023458][ T294] usb 6-1: bad CDC descriptors [ 33.221049][ T320] usb 6-1: USB disconnect, device number 2 [ 33.237132][ T542] loop0: detected capacity change from 0 to 512 [ 33.336300][ T542] EXT4-fs (loop0): Ignoring removed oldalloc option [ 33.357762][ T542] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000100,quota,oldalloc,,errors=continue. Quota mode: writeback. [ 33.375067][ T542] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.615395][ T294] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 33.954650][ T554] loop0: detected capacity change from 0 to 256 [ 33.985443][ T294] usb 5-1: config 8 has an invalid interface number: 235 but max is 0 [ 33.994246][ T294] usb 5-1: config 8 has no interface number 0 [ 34.002028][ T294] usb 5-1: config 8 interface 235 has no altsetting 0 [ 34.009628][ T294] usb 5-1: New USB device found, idVendor=06cd, idProduct=0118, bcdDevice=3e.1f [ 34.020100][ T294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.035500][ T554] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 34.053900][ T554] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 34.071369][ T554] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 34.139587][ T562] loop5: detected capacity change from 0 to 128 [ 34.167393][ T562] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 34.201223][ T562] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 34.238642][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 34.238657][ T30] audit: type=1400 audit(1744116694.499:228): avc: denied { ioctl } for pid=569 comm="syz.3.91" path="socket:[17138]" dev="sockfs" ino=17138 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.270344][ T30] audit: type=1400 audit(1744116694.519:229): avc: denied { write } for pid=569 comm="syz.3.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.335114][ T579] loop3: detected capacity change from 0 to 512 [ 34.345423][ T294] usb 5-1: string descriptor 0 read error: -71 [ 34.356996][ T294] usb 5-1: USB disconnect, device number 3 [ 34.383405][ T579] EXT4-fs (loop3): Test dummy encryption mode enabled [ 34.392993][ T577] loop5: detected capacity change from 0 to 8192 [ 34.401040][ T579] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2816: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 34.408348][ T30] audit: type=1400 audit(1744116694.659:230): avc: denied { ioctl } for pid=585 comm="syz.0.97" path="socket:[17156]" dev="sockfs" ino=17156 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.414732][ T579] EXT4-fs (loop3): 1 truncate cleaned up [ 34.447849][ T579] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=continue,nojournal_checksum,data_err=abort,barrier,test_dummy_encryption,noauto_da_alloc,,errors=continue. Quota mode: none. [ 34.483553][ T579] EXT4-fs (loop3): shut down requested (1) [ 34.532341][ T577] process 'syz.5.94' launched './file1' with NULL argv: empty string added [ 34.541848][ T599] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 34.625996][ T605] loop0: detected capacity change from 0 to 2048 [ 34.677727][ T605] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 34.690349][ T30] audit: type=1400 audit(1744116694.949:231): avc: denied { mounton } for pid=602 comm="syz.0.107" path="/27/file0/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 34.726203][ T30] audit: type=1400 audit(1744116694.979:232): avc: denied { write } for pid=602 comm="syz.0.107" name="/" dev="incremental-fs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 34.750408][ T30] audit: type=1400 audit(1744116694.979:233): avc: denied { add_name } for pid=602 comm="syz.0.107" name=".pending_reads" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 34.772552][ T30] audit: type=1400 audit(1744116694.979:234): avc: denied { associate } for pid=602 comm="syz.0.107" name=".pending_reads" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 34.798677][ T30] audit: type=1400 audit(1744116694.979:235): avc: denied { append } for pid=602 comm="syz.0.107" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 34.833830][ T30] audit: type=1400 audit(1744116694.979:236): avc: denied { open } for pid=602 comm="syz.0.107" path="/27/file0/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 34.859088][ T621] loop5: detected capacity change from 0 to 256 [ 34.864467][ T30] audit: type=1400 audit(1744116694.979:237): avc: denied { ioctl } for pid=602 comm="syz.0.107" path="/27/file0/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 34.928994][ T621] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 34.969239][ T630] loop0: detected capacity change from 0 to 1024 [ 34.977906][ T621] netlink: 48 bytes leftover after parsing attributes in process `syz.5.113'. [ 34.989818][ T621] tmpfs: Bad value for 'nr_blocks' [ 35.011186][ T634] loop4: detected capacity change from 0 to 512 [ 35.034988][ T636] loop5: detected capacity change from 0 to 512 [ 35.042580][ T630] EXT4-fs (loop0): Ignoring removed bh option [ 35.048858][ T630] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 35.066620][ T630] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=b842c018, mo2=0002] [ 35.075123][ T630] System zones: 1-12 [ 35.076453][ T636] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 35.081694][ T630] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,data_err=abort,debug,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,data_err=abort,max_batch_time=0x00000000000000ef,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none. [ 35.094153][ T636] EXT4-fs (loop5): 1 truncate cleaned up [ 35.122661][ T636] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,resuid=0x000000000000ee01,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 35.154420][ T630] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3876: comm syz.0.118: Allocating blocks 497-513 which overlap fs metadata [ 35.168781][ T630] EXT4-fs (loop0): pa ffff8881126221f8: logic 128, phys. 385, len 8 [ 35.169419][ T636] EXT4-fs (loop5): re-mounted. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 35.176889][ T630] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 35.195709][ T320] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 35.206324][ T634] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 35.220262][ T630] EXT4-fs error (device loop0): mb_free_blocks:1865: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 35.252081][ T634] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.288379][ T643] loop5: detected capacity change from 0 to 16 [ 35.324641][ T643] erofs: (device loop5): mounted with root inode @ nid 36. [ 35.326557][ T643] erofs: (device loop5): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 35.326584][ T643] erofs: (device loop5): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 35.326602][ T643] erofs: (device loop5): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 35.470066][ T664] loop4: detected capacity change from 0 to 1024 [ 35.553439][ T677] Non-string source [ 35.563871][ T677] loop0: detected capacity change from 0 to 1024 [ 35.606855][ T664] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 35.630276][ T677] EXT4-fs (loop0): Ignoring removed nobh option [ 35.645401][ T320] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.649760][ T677] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 35.662073][ T687] netlink: 452 bytes leftover after parsing attributes in process `syz.1.140'. [ 35.667156][ T677] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz.0.137: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 35.673876][ T320] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 35.711178][ T677] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.137: couldn't read orphan inode 11 (err -117) [ 35.725063][ T689] xt_TCPMSS: Only works on TCP SYN packets [ 35.737492][ T677] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=,noload,nobh,jqfmt=vfsv0,acl,data=ordered,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 35.773888][ T677] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.137: Invalid block bitmap block 0 in block_group 0 [ 35.797242][ T677] EXT4-fs error (device loop0): ext4_acquire_dquot:6188: comm syz.0.137: Failed to acquire dquot type 0 [ 35.835969][ T677] syz.0.137 (677) used greatest stack depth: 20256 bytes left [ 35.925429][ T320] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 35.946578][ T320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.966415][ T320] usb 4-1: Product: syz [ 35.972117][ T320] usb 4-1: Manufacturer: syz [ 35.978983][ T320] usb 4-1: SerialNumber: syz [ 36.147646][ T738] xt_bpf: check failed: parse error [ 36.204088][ T748] netlink: 16 bytes leftover after parsing attributes in process `syz.4.168'. [ 36.218327][ T750] loop0: detected capacity change from 0 to 256 [ 36.247545][ T752] Non-string source [ 36.257721][ T752] loop4: detected capacity change from 0 to 1024 [ 36.287633][ T752] EXT4-fs (loop4): Ignoring removed nobh option [ 36.294510][ T752] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 36.307439][ T320] usb 4-1: 0:2 : does not exist [ 36.318686][ T752] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz.4.170: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 36.321221][ T755] loop0: detected capacity change from 0 to 256 [ 36.340964][ T752] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.170: couldn't read orphan inode 11 (err -117) [ 36.361123][ T752] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,noload,nobh,jqfmt=vfsv0,acl,data=ordered,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 36.385382][ T752] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.170: Invalid block bitmap block 0 in block_group 0 [ 36.399455][ T752] EXT4-fs error (device loop4): ext4_acquire_dquot:6188: comm syz.4.170: Failed to acquire dquot type 0 [ 36.419533][ T320] usb 4-1: USB disconnect, device number 3 [ 36.462394][ T755] loop0: detected capacity change from 0 to 512 [ 36.493008][ T766] loop4: detected capacity change from 0 to 256 [ 36.567991][ T771] xt_bpf: check failed: parse error [ 36.569809][ T766] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 36.626770][ T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.673248][ T777] loop5: detected capacity change from 0 to 1024 [ 36.744128][ T777] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 36.768806][ T777] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.786537][ T786] netlink: 16 bytes leftover after parsing attributes in process `syz.3.182'. [ 36.798243][ T777] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 36.853195][ T786] netlink: 16 bytes leftover after parsing attributes in process `syz.3.182'. [ 36.881530][ T790] Non-string source [ 37.016142][ T805] loop5: detected capacity change from 0 to 512 [ 37.049927][ T809] loop4: detected capacity change from 0 to 1024 [ 37.096850][ T809] EXT4-fs (loop4): Ignoring removed bh option [ 37.100238][ T815] loop3: detected capacity change from 0 to 128 [ 37.106711][ T809] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 37.128820][ T817] xt_bpf: check failed: parse error [ 37.154123][ T809] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=b842c018, mo2=0002] [ 37.168202][ T809] System zones: 1-12 [ 37.172563][ T809] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,data_err=abort,debug,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,data_err=abort,max_batch_time=0x00000000000000ef,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none. [ 37.176500][ T805] EXT4-fs (loop5): Test dummy encryption mode enabled [ 37.225788][ T815] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 37.238595][ T815] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 37.261602][ T827] Non-string source [ 37.267720][ T805] EXT4-fs (loop5): 1 truncate cleaned up [ 37.273431][ T805] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=continue,nojournal_checksum,data_err=abort,barrier,test_dummy_encryption,noauto_da_alloc,,errors=continue. Quota mode: none. [ 37.315067][ T805] EXT4-fs (loop5): shut down requested (1) [ 37.321723][ T805] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 37.331099][ T805] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 37.372751][ T837] loop4: detected capacity change from 0 to 512 [ 37.483939][ T837] EXT4-fs (loop4): Value of option "test_dummy_encryption=discard" is unrecognized [ 37.503921][ T848] xt_bpf: check failed: parse error [ 37.553078][ T855] SELinux: policydb string does not match my string SE Linux [ 37.561372][ T857] loop5: detected capacity change from 0 to 512 [ 37.562106][ T855] SELinux: failed to load policy [ 37.579682][ T859] Non-string source [ 37.589724][ T859] loop4: detected capacity change from 0 to 1024 [ 37.600180][ T861] loop0: detected capacity change from 0 to 256 [ 37.616185][ T859] EXT4-fs (loop4): Ignoring removed nobh option [ 37.622635][ T859] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 37.632630][ T861] exfat: Deprecated parameter 'utf8' [ 37.641773][ T859] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz.4.214: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 37.665919][ T859] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.214: couldn't read orphan inode 11 (err -117) [ 37.681753][ T861] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xc61f63e4, utbl_chksum : 0xe619d30d) [ 37.703159][ T859] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,noload,nobh,jqfmt=vfsv0,acl,data=ordered,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 37.726749][ T857] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 37.742303][ T857] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.771443][ T871] loop3: detected capacity change from 0 to 512 [ 37.779872][ T859] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.214: Invalid block bitmap block 0 in block_group 0 [ 37.794128][ T859] EXT4-fs error (device loop4): ext4_acquire_dquot:6188: comm syz.4.214: Failed to acquire dquot type 0 [ 37.795146][ T871] EXT4-fs error (device loop3): ext4_fill_super:4832: inode #2: comm syz.3.219: casefold flag without casefold feature [ 37.822358][ T871] EXT4-fs (loop3): get root inode failed [ 37.828878][ T871] EXT4-fs (loop3): mount failed [ 37.897715][ T885] loop4: detected capacity change from 0 to 128 [ 37.950482][ T885] EXT4-fs (loop4): Ignoring removed nobh option [ 37.988721][ T885] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 38.005800][ T885] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 38.229008][ T903] loop3: detected capacity change from 0 to 512 [ 38.280023][ T910] loop0: detected capacity change from 0 to 512 [ 38.294552][ T912] loop4: detected capacity change from 0 to 256 [ 38.305757][ T903] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 38.321137][ T903] EXT4-fs error (device loop3): __ext4_iget:4903: inode #16: block 256: comm syz.3.232: invalid block [ 38.332726][ T910] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 38.332855][ T903] EXT4-fs (loop3): Remounting filesystem read-only [ 38.349581][ T903] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.232: couldn't read orphan inode 16 (err -117) [ 38.362581][ T903] EXT4-fs (loop3): Remounting filesystem read-only [ 38.371604][ T910] EXT4-fs (loop0): 1 truncate cleaned up [ 38.378441][ T903] EXT4-fs (loop3): 1 orphan inode deleted [ 38.384859][ T910] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 38.413321][ T903] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,lazytime,debug_want_extra_isize=0x000000000000006e,block_validity,block_validity,quota,. Quota mode: writeback. [ 38.476285][ T912] loop4: detected capacity change from 0 to 512 [ 38.570330][ T921] Non-string source [ 38.592035][ T921] loop0: detected capacity change from 0 to 1024 [ 38.628630][ T921] EXT4-fs (loop0): Ignoring removed nobh option [ 38.641658][ T921] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 38.650875][ T925] loop5: detected capacity change from 0 to 2048 [ 38.671712][ T921] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz.0.239: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 38.700324][ T921] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.239: couldn't read orphan inode 11 (err -117) [ 38.713513][ T450] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 38.730808][ T930] loop4: detected capacity change from 0 to 1024 [ 38.738702][ T925] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 38.779836][ T921] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=,noload,nobh,jqfmt=vfsv0,acl,data=ordered,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 38.804246][ T921] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.239: Invalid block bitmap block 0 in block_group 0 [ 38.821584][ T930] EXT4-fs (loop4): Test dummy encryption mode enabled [ 38.826393][ T921] EXT4-fs error (device loop0): ext4_acquire_dquot:6188: comm syz.0.239: Failed to acquire dquot type 0 [ 38.845686][ T930] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,stripe=0x0000000000000007,discard,data=ordered,debug_want_extra_isize=0x0000000000000084,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 39.071369][ T938] loop0: detected capacity change from 0 to 1024 [ 39.145486][ T450] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.156225][ T938] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 39.157219][ T450] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 39.187223][ T938] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,min_batch_time=0x0000000000000005,dioread_nolock,. Quota mode: none. [ 39.202671][ T938] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.219002][ T938] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 39.234538][ T938] EXT4-fs (loop0): Remounting filesystem read-only [ 39.255470][ T450] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 39.266187][ T450] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 39.274720][ T450] usb 4-1: SerialNumber: syz [ 39.296892][ T949] loop0: detected capacity change from 0 to 256 [ 39.429319][ T949] loop0: detected capacity change from 0 to 512 [ 39.451457][ T952] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=952 comm=syz.0.249 [ 39.465002][ T952] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2568 sclass=netlink_tcpdiag_socket pid=952 comm=syz.0.249 [ 39.502893][ T956] capability: warning: `syz.0.251' uses deprecated v2 capabilities in a way that may be insecure [ 39.556277][ T450] usb 4-1: 0:2 : does not exist [ 39.570313][ T450] usb 4-1: USB disconnect, device number 4 [ 39.620594][ T962] loop0: detected capacity change from 0 to 512 [ 39.683803][ T962] EXT4-fs (loop0): orphan cleanup on readonly fs [ 39.700694][ T962] EXT4-fs warning (device loop0): ext4_enable_quotas:6423: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 39.715934][ T962] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 39.722742][ T962] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #13: comm syz.0.255: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 39.741291][ T962] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.255: couldn't read orphan inode 13 (err -117) [ 39.754643][ T962] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 39.763261][ T972] xt_bpf: check failed: parse error [ 39.776678][ T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.780382][ T962] EXT4-fs error (device loop0): ext4_lookup:1858: comm syz.0.255: inode #15: comm syz.0.255: iget: illegal inode # [ 39.848148][ T979] loop4: detected capacity change from 0 to 2048 [ 39.888385][ T979] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,,errors=continue. Quota mode: none. [ 39.905977][ T986] loop0: detected capacity change from 0 to 256 [ 39.914429][ T979] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 39.933332][ T979] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 39.945652][ T979] EXT4-fs (loop4): This should not happen!! Data will be lost [ 39.945652][ T979] [ 39.956025][ T979] EXT4-fs (loop4): Total free blocks count 0 [ 39.961995][ T979] EXT4-fs (loop4): Free/Dirty block details [ 39.969074][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 39.969090][ T30] audit: type=1400 audit(1744116700.229:278): avc: denied { remove_name } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.976672][ T979] EXT4-fs (loop4): free_blocks=2415919104 [ 40.005336][ T30] audit: type=1400 audit(1744116700.229:279): avc: denied { rename } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.015734][ T979] EXT4-fs (loop4): dirty_blocks=32 [ 40.043237][ T30] audit: type=1400 audit(1744116700.229:280): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.048192][ T979] EXT4-fs (loop4): Block reservation details [ 40.071279][ T1000] loop5: detected capacity change from 0 to 128 [ 40.078099][ T979] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 40.085579][ T998] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 40.099286][ T998] EXT4-fs (loop4): This should not happen!! Data will be lost [ 40.099286][ T998] [ 40.122490][ T986] loop0: detected capacity change from 0 to 512 [ 40.133911][ T1009] loop3: detected capacity change from 0 to 512 [ 40.147927][ T1011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.276'. [ 40.161983][ T1000] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 40.173358][ T1000] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 40.284352][ T1009] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 40.296291][ T1009] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.319600][ T1009] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 40.344304][ T1009] Quota error (device loop3): write_blk: dquota write failed [ 40.352173][ T1024] Non-string source [ 40.367720][ T1009] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 40.369824][ T1026] loop4: detected capacity change from 0 to 256 [ 40.379739][ T1009] EXT4-fs error (device loop3): ext4_acquire_dquot:6188: comm syz.3.272: Failed to acquire dquot type 0 [ 40.431198][ T1032] device sit0 entered promiscuous mode [ 40.440784][ T1032] netlink: 'syz.0.283': attribute type 1 has an invalid length. [ 40.448759][ T1026] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 40.467710][ T30] audit: type=1400 audit(1744116700.729:281): avc: denied { getopt } for pid=1023 comm="syz.4.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.491216][ T1032] netlink: 1 bytes leftover after parsing attributes in process `syz.0.283'. [ 40.505625][ T60] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 40.558093][ T1042] loop3: detected capacity change from 0 to 256 [ 40.616889][ T1054] xt_bpf: check failed: parse error [ 40.640388][ T1055] netlink: 80 bytes leftover after parsing attributes in process `syz.0.292'. [ 40.649739][ T1055] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.656834][ T1055] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.857440][ T30] audit: type=1400 audit(1744116701.119:282): avc: denied { remount } for pid=1071 comm="syz.4.303" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 40.875511][ T60] usb 6-1: config 0 has no interfaces? [ 40.882519][ T60] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 40.911603][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.921261][ T1075] Non-string source [ 40.943454][ T60] usb 6-1: config 0 descriptor?? [ 40.975420][ T320] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 41.008041][ T1080] xt_bpf: check failed: parse error [ 41.046055][ T1074] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.061010][ T1074] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.073591][ T1074] device bridge_slave_0 entered promiscuous mode [ 41.090403][ T1074] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.103827][ T1074] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.117826][ T1074] device bridge_slave_1 entered promiscuous mode [ 41.202295][ T39] usb 6-1: USB disconnect, device number 3 [ 41.225336][ T320] usb 1-1: Using ep0 maxpacket: 32 [ 41.306464][ T312] device bridge_slave_1 left promiscuous mode [ 41.313878][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.331478][ T312] device bridge_slave_0 left promiscuous mode [ 41.340488][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.345558][ T320] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 41.357910][ T312] device veth1_macvtap left promiscuous mode [ 41.363665][ T320] usb 1-1: config 0 has no interface number 0 [ 41.369893][ T312] device veth0_vlan left promiscuous mode [ 41.381249][ T320] usb 1-1: config 0 interface 184 has no altsetting 0 [ 41.555521][ T320] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 41.570273][ T1074] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.578988][ T1074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.585366][ T320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.586311][ T1074] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.594328][ T320] usb 1-1: Product: syz [ 41.601284][ T1074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.621921][ T320] usb 1-1: Manufacturer: syz [ 41.626561][ T320] usb 1-1: SerialNumber: syz [ 41.631864][ T320] usb 1-1: config 0 descriptor?? [ 41.648385][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.656510][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.664221][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.676499][ T320] smsc75xx v1.0.0 [ 41.682448][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.693098][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.700716][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.718348][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.734305][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.741307][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.760446][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.769119][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.799567][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.821976][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.833507][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.843877][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.863298][ T1074] device veth0_vlan entered promiscuous mode [ 41.887609][ T1122] Non-string source [ 41.900630][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.913427][ T1074] device veth1_macvtap entered promiscuous mode [ 41.934973][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.945219][ T1124] loop5: detected capacity change from 0 to 256 [ 41.950573][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.999352][ T1124] loop5: detected capacity change from 0 to 512 [ 42.008508][ T1132] loop6: detected capacity change from 0 to 256 [ 42.039942][ T30] audit: type=1400 audit(1744116702.299:283): avc: denied { map } for pid=1136 comm="syz.1.330" path="socket:[20488]" dev="sockfs" ino=20488 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 42.114592][ T30] audit: type=1400 audit(1744116702.369:284): avc: denied { append } for pid=1142 comm="syz.5.333" name="001" dev="devtmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 42.362799][ T1148] loop6: detected capacity change from 0 to 512 [ 42.437782][ T1148] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 42.451768][ T1148] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.467118][ T1148] EXT4-fs (loop6): shut down requested (2) [ 42.515215][ T1154] Non-string source [ 42.523222][ T1154] loop6: detected capacity change from 0 to 1024 [ 42.575728][ T1154] EXT4-fs (loop6): Ignoring removed nobh option [ 42.581913][ T1154] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 42.593068][ T1154] EXT4-fs error (device loop6): ext4_ext_check_inode:501: inode #11: comm syz.6.336: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 42.606480][ T1157] xt_TCPMSS: Only works on TCP SYN packets [ 42.620193][ T1154] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.336: couldn't read orphan inode 11 (err -117) [ 42.633482][ T1154] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrjquota=,noload,nobh,jqfmt=vfsv0,acl,data=ordered,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 42.658598][ T1154] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:476: comm syz.6.336: Invalid block bitmap block 0 in block_group 0 [ 42.672784][ T1154] Quota error (device loop6): write_blk: dquota write failed [ 42.681197][ T1154] EXT4-fs error (device loop6): ext4_acquire_dquot:6188: comm syz.6.336: Failed to acquire dquot type 0 [ 42.858719][ T1193] Non-string source [ 42.868949][ T1193] loop6: detected capacity change from 0 to 1024 [ 42.886611][ T1193] EXT4-fs (loop6): Ignoring removed nobh option [ 42.893472][ T1193] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 42.907133][ T1193] EXT4-fs error (device loop6): ext4_ext_check_inode:501: inode #11: comm syz.6.354: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 42.930107][ T1193] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.354: couldn't read orphan inode 11 (err -117) [ 42.943799][ T1193] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrjquota=,noload,nobh,jqfmt=vfsv0,acl,data=ordered,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 42.981689][ T1193] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:476: comm syz.6.354: Invalid block bitmap block 0 in block_group 0 [ 42.996114][ T1193] EXT4-fs error (device loop6): ext4_acquire_dquot:6188: comm syz.6.354: Failed to acquire dquot type 0 [ 43.013717][ T320] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 43.025145][ T320] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 43.055520][ T320] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 43.066498][ T320] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 43.076319][ T320] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 43.086866][ T320] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 43.096504][ T320] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 43.113861][ T320] usb 1-1: USB disconnect, device number 3 [ 43.126371][ T1198] netlink: 616 bytes leftover after parsing attributes in process `syz.5.356'. [ 43.156409][ T1201] loop5: detected capacity change from 0 to 256 [ 43.272478][ T1201] loop5: detected capacity change from 0 to 512 [ 43.540125][ T1225] Non-string source [ 43.583005][ T1225] loop6: detected capacity change from 0 to 1024 [ 43.619152][ T1225] EXT4-fs (loop6): Ignoring removed nobh option [ 43.640073][ T1225] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 43.674313][ T1225] EXT4-fs error (device loop6): ext4_ext_check_inode:501: inode #11: comm syz.6.365: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 43.695548][ T1225] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.365: couldn't read orphan inode 11 (err -117) [ 43.714406][ T1225] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrjquota=,noload,nobh,jqfmt=vfsv0,acl,data=ordered,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 43.719118][ T1245] bridge: RTM_DELNEIGH with unconfigured vlan 1 on bridge_slave_1 [ 43.749849][ T1225] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:476: comm syz.6.365: Invalid block bitmap block 0 in block_group 0 [ 43.763914][ T1225] EXT4-fs error (device loop6): ext4_acquire_dquot:6188: comm syz.6.365: Failed to acquire dquot type 0 [ 44.327986][ T1273] loop6: detected capacity change from 0 to 256 [ 44.486916][ T1273] loop6: detected capacity change from 0 to 512 [ 44.623702][ T1288] loop0: detected capacity change from 0 to 256 [ 44.640991][ T1290] loop6: detected capacity change from 0 to 512 [ 44.676632][ T1288] exfat: Deprecated parameter 'utf8' [ 44.691562][ T1288] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xc61f63e4, utbl_chksum : 0xe619d30d) [ 44.809054][ T1290] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 44.888538][ T1290] EXT4-fs error (device loop6): __ext4_iget:4903: inode #16: block 256: comm syz.6.391: invalid block [ 44.901630][ T1290] EXT4-fs (loop6): Remounting filesystem read-only [ 44.910086][ T1290] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.391: couldn't read orphan inode 16 (err -117) [ 44.928373][ T1290] EXT4-fs (loop6): Remounting filesystem read-only [ 44.935841][ T1290] EXT4-fs (loop6): 1 orphan inode deleted [ 44.945496][ T1290] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,lazytime,debug_want_extra_isize=0x000000000000006e,block_validity,block_validity,quota,. Quota mode: writeback. [ 44.988790][ T1290] EXT4-fs error (device loop6): ext4_lookup:1858: inode #15: comm syz.6.391: iget: bad extra_isize 46 (inode size 256) [ 45.028207][ T1290] EXT4-fs (loop6): Remounting filesystem read-only [ 45.053337][ T1304] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.6.391: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 45.179072][ T1304] EXT4-fs (loop6): Remounting filesystem read-only [ 45.194810][ T1313] Non-string source [ 45.485382][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 45.485402][ T30] audit: type=1400 audit(1744116705.719:287): avc: denied { bind } for pid=1317 comm="syz.6.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.578820][ T30] audit: type=1400 audit(1744116705.809:288): avc: denied { bind } for pid=1323 comm="syz.6.403" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 45.612302][ T30] audit: type=1400 audit(1744116705.809:289): avc: denied { name_bind } for pid=1323 comm="syz.6.403" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 45.700185][ T30] audit: type=1400 audit(1744116705.809:290): avc: denied { node_bind } for pid=1323 comm="syz.6.403" saddr=255.255.255.255 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 45.784313][ T1339] Non-string source [ 45.812357][ T1339] loop5: detected capacity change from 0 to 1024 [ 45.826136][ T1341] loop6: detected capacity change from 0 to 256 [ 45.870122][ T1339] EXT4-fs (loop5): Ignoring removed nobh option [ 45.883204][ T1339] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 45.895908][ T1339] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #11: comm syz.5.411: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 45.915700][ T1339] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.411: couldn't read orphan inode 11 (err -117) [ 45.928909][ T1339] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrjquota=,noload,nobh,jqfmt=vfsv0,acl,data=ordered,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 45.955402][ T1341] loop6: detected capacity change from 0 to 512 [ 45.961905][ T1339] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:476: comm syz.5.411: Invalid block bitmap block 0 in block_group 0 [ 45.975651][ T1339] Quota error (device loop5): write_blk: dquota write failed [ 45.985255][ T1339] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 45.996514][ T1339] EXT4-fs error (device loop5): ext4_acquire_dquot:6188: comm syz.5.411: Failed to acquire dquot type 0 [ 46.030183][ T1353] loop6: detected capacity change from 0 to 1024 [ 46.106559][ T1353] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 46.221951][ T1370] loop6: detected capacity change from 0 to 8192 [ 46.233255][ T1376] loop5: detected capacity change from 0 to 128 [ 46.329007][ T1370] FAT-fs (loop6): error, clusters badly computed (775 != 1) [ 46.345038][ T1370] FAT-fs (loop6): Filesystem has been set read-only [ 46.355915][ T1370] FAT-fs (loop6): error, clusters badly computed (776 != 2) [ 46.374842][ T1370] FAT-fs (loop6): error, clusters badly computed (777 != 3) [ 46.382906][ T1370] FAT-fs (loop6): error, clusters badly computed (778 != 4) [ 46.391670][ T1370] FAT-fs (loop6): error, clusters badly computed (779 != 5) [ 46.498789][ T1405] loop5: detected capacity change from 0 to 256 [ 46.724222][ T1410] loop5: detected capacity change from 0 to 512 [ 46.745493][ T449] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 46.767629][ T1410] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 46.784030][ T1410] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.135451][ T449] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.147461][ T449] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.157658][ T449] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 47.167349][ T449] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.176402][ T449] usb 7-1: config 0 descriptor?? [ 47.225384][ T39] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 47.585567][ T39] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 47.595229][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.606070][ T39] usb 6-1: config 0 descriptor?? [ 47.658371][ T449] wacom 0003:056A:0063.0003: ignoring exceeding usage max [ 47.676674][ T449] wacom 0003:056A:0063.0003: ignoring exceeding usage max [ 47.684519][ T449] wacom 0003:056A:0063.0003: Unknown device_type for 'HID 056a:0063'. Assuming pen. [ 47.697653][ T449] wacom 0003:056A:0063.0003: hidraw0: USB HID v0.00 Device [HID 056a:0063] on usb-dummy_hcd.6-1/input0 [ 47.710215][ T449] input: Wacom Volito2 2x3 Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:0063.0003/input/input5 [ 47.867821][ T60] usb 7-1: USB disconnect, device number 2 [ 47.935363][ T39] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 48.295428][ T39] usb 1-1: config 8 has an invalid interface number: 235 but max is 0 [ 48.304627][ T39] usb 1-1: config 8 has no interface number 0 [ 48.311004][ T39] usb 1-1: config 8 interface 235 has no altsetting 0 [ 48.318145][ T39] usb 1-1: New USB device found, idVendor=06cd, idProduct=0118, bcdDevice=3e.1f [ 48.328012][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.539864][ T1461] kvm: pic: non byte read [ 48.553065][ T1461] kvm: pic: non byte read [ 48.559993][ T1461] kvm: pic: non byte read [ 48.569335][ T1461] kvm: pic: non byte read [ 48.579763][ T1461] kvm: pic: non byte read [ 48.592502][ T1461] kvm: pic: level sensitive irq not supported [ 48.593726][ T1461] kvm: pic: non byte read [ 48.609550][ T1461] kvm: pic: non byte read [ 48.614188][ T1461] kvm: pic: non byte read [ 48.618893][ T1461] kvm: pic: non byte read [ 48.721980][ T39] usb 1-1: string descriptor 0 read error: -71 [ 48.730895][ T39] usb 1-1: USB disconnect, device number 4 [ 48.829678][ T30] audit: type=1400 audit(1744116709.089:291): avc: denied { create } for pid=1486 comm="syz.1.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 48.849701][ T30] audit: type=1400 audit(1744116709.089:292): avc: denied { connect } for pid=1486 comm="syz.1.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 48.870180][ T30] audit: type=1400 audit(1744116709.089:293): avc: denied { write } for pid=1486 comm="syz.1.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 49.114204][ T1489] loop0: detected capacity change from 0 to 512 [ 49.126401][ T1489] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 49.143186][ T1489] EXT4-fs (loop0): 1 orphan inode deleted [ 49.150018][ T1489] EXT4-fs (loop0): 1 truncate cleaned up [ 49.156705][ T1489] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x0000000000000001,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,jqfmt=vfsold,noload,sysvgroups,init_itable,debug_want_extra_isize=0x0000000000000006,. Quota mode: none. [ 49.255242][ T30] audit: type=1400 audit(1744116709.509:294): avc: denied { ioctl } for pid=1498 comm="syz.1.477" path="socket:[21141]" dev="sockfs" ino=21141 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.938997][ T39] usb 6-1: USB disconnect, device number 4 [ 50.094664][ T1529] netlink: 4 bytes leftover after parsing attributes in process `syz.5.489'. [ 50.214475][ T1538] loop5: detected capacity change from 0 to 512 [ 50.273285][ T1538] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 50.282482][ T1538] EXT4-fs (loop5): orphan cleanup on readonly fs [ 50.292670][ T1545] bridge: RTM_DELNEIGH with unconfigured vlan 1 on bridge_slave_1 [ 50.301404][ T1538] EXT4-fs warning (device loop5): ext4_enable_quotas:6423: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 50.316699][ T1538] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 50.323780][ T1538] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #13: comm syz.5.493: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 50.343186][ T1538] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.493: couldn't read orphan inode 13 (err -117) [ 50.360305][ T1538] EXT4-fs (loop5): mounted filesystem without journal. Opts: noquota,noblock_validity,min_batch_time=0x000000000000082f,grpquota,debug,debug,grpid,,errors=continue. Quota mode: writeback. [ 50.533106][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 50.533122][ T30] audit: type=1400 audit(1744116710.789:305): avc: denied { ioctl } for pid=1556 comm="syz.5.501" path="socket:[21244]" dev="sockfs" ino=21244 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 50.655466][ T1569] device veth0 entered promiscuous mode [ 50.669758][ T1568] device veth0 left promiscuous mode [ 50.801837][ T1585] loop5: detected capacity change from 0 to 256 [ 50.829213][ T30] audit: type=1400 audit(1744116711.089:306): avc: denied { create } for pid=1590 comm="syz.1.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 50.878772][ T30] audit: type=1400 audit(1744116711.109:307): avc: denied { setopt } for pid=1590 comm="syz.1.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 50.927655][ T30] audit: type=1400 audit(1744116711.119:308): avc: denied { ioctl } for pid=1590 comm="syz.1.516" path="socket:[20231]" dev="sockfs" ino=20231 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 50.959748][ T1599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.521'. [ 50.991342][ T30] audit: type=1400 audit(1744116711.119:309): avc: denied { write } for pid=1590 comm="syz.1.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 51.075820][ T30] audit: type=1400 audit(1744116711.239:310): avc: denied { create } for pid=1600 comm="syz.6.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 51.149493][ T30] audit: type=1400 audit(1744116711.279:311): avc: denied { create } for pid=1604 comm="syz.1.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 51.173229][ T30] audit: type=1400 audit(1744116711.349:312): avc: denied { read } for pid=1612 comm="syz.4.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.274567][ T30] audit: type=1400 audit(1744116711.529:313): avc: denied { create } for pid=1633 comm="syz.1.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 51.327084][ T1637] Zero length message leads to an empty skb [ 51.383193][ T1647] bridge: RTM_DELNEIGH with unconfigured vlan 1 on bridge_slave_1 [ 51.396494][ T30] audit: type=1400 audit(1744116711.659:314): avc: denied { setopt } for pid=1648 comm="syz.0.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 51.402567][ T1649] ================================================================== [ 51.425963][ T1649] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x5b0/0x660 [ 51.435073][ T1649] Read of size 1 at addr ffff88810d8903f8 by task syz.0.544/1649 [ 51.442627][ T1649] [ 51.444796][ T1649] CPU: 0 PID: 1649 Comm: syz.0.544 Not tainted 5.15.178-syzkaller-00255-g8b377d8dcfe4 #0 [ 51.454541][ T1649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 51.464557][ T1649] Call Trace: [ 51.467663][ T1649] [ 51.470776][ T1649] dump_stack_lvl+0x151/0x1c0 [ 51.475304][ T1649] ? io_uring_drop_tctx_refs+0x190/0x190 [ 51.480767][ T1649] ? panic+0x760/0x760 [ 51.484938][ T1649] print_address_description+0x87/0x3b0 [ 51.490430][ T1649] ? stack_trace_save+0x113/0x1c0 [ 51.496762][ T1649] ? ___sys_sendmsg+0x252/0x2e0 [ 51.502438][ T1649] kasan_report+0x179/0x1c0 [ 51.506799][ T1649] ? xfrm_policy_inexact_list_reinsert+0x5b0/0x660 [ 51.513118][ T1649] ? xfrm_policy_inexact_list_reinsert+0x5b0/0x660 [ 51.519850][ T1649] __asan_report_load1_noabort+0x14/0x20 [ 51.525339][ T1649] xfrm_policy_inexact_list_reinsert+0x5b0/0x660 [ 51.531676][ T1649] ? ____kasan_kmalloc+0xed/0x110 [ 51.536921][ T1649] ? ____kasan_kmalloc+0xdb/0x110 [ 51.542689][ T1649] ? xfrm_policy_addr_delta+0x23b/0x370 [ 51.548320][ T1649] xfrm_policy_inexact_insert_node+0x917/0xb00 [ 51.554493][ T1649] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.560573][ T1649] ? xfrm_policy_inexact_alloc_bin+0x5ad/0x13f0 [ 51.566660][ T1649] xfrm_policy_inexact_alloc_chain+0x4ec/0xaf0 [ 51.572633][ T1649] xfrm_policy_inexact_insert+0x6a/0x1160 [ 51.578448][ T1649] ? __kasan_check_write+0x14/0x20 [ 51.583493][ T1649] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 51.588449][ T1649] ? policy_hash_bysel+0x137/0x700 [ 51.593396][ T1649] xfrm_policy_insert+0xe7/0x940 [ 51.598290][ T1649] xfrm_add_policy+0x4f2/0x980 [ 51.603396][ T1649] ? cap_capable+0x1d2/0x270 [ 51.608505][ T1649] ? xfrm_dump_sa_done+0xc0/0xc0 [ 51.613297][ T1649] xfrm_user_rcv_msg+0x4f3/0x7d0 [ 51.618475][ T1649] ? xfrm_netlink_rcv+0x90/0x90 [ 51.623476][ T1649] ? avc_has_perm+0x16f/0x260 [ 51.628175][ T1649] ? ____kasan_kmalloc+0xed/0x110 [ 51.633529][ T1649] ? avc_has_perm_noaudit+0x430/0x430 [ 51.639083][ T1649] ? x64_sys_call+0x16a/0x9a0 [ 51.644027][ T1649] netlink_rcv_skb+0x1cf/0x410 [ 51.648630][ T1649] ? xfrm_netlink_rcv+0x90/0x90 [ 51.653518][ T1649] ? netlink_ack+0xb10/0xb10 [ 51.657947][ T1649] ? mutex_lock+0xb6/0x1e0 [ 51.662379][ T1649] ? wait_for_completion_killable_timeout+0x10/0x10 [ 51.668790][ T1649] ? __netlink_lookup+0x37b/0x3a0 [ 51.673733][ T1649] xfrm_netlink_rcv+0x72/0x90 [ 51.678245][ T1649] netlink_unicast+0x8df/0xac0 [ 51.683040][ T1649] ? netlink_detachskb+0x90/0x90 [ 51.687796][ T1649] ? security_netlink_send+0x7b/0xa0 [ 51.692912][ T1649] netlink_sendmsg+0xa0a/0xd20 [ 51.697517][ T1649] ? netlink_getsockopt+0x560/0x560 [ 51.702571][ T1649] ? x64_sys_call+0x147/0x9a0 [ 51.707215][ T1649] ? security_socket_sendmsg+0x82/0xb0 [ 51.712542][ T1649] ? netlink_getsockopt+0x560/0x560 [ 51.717662][ T1649] ____sys_sendmsg+0x59e/0x8f0 [ 51.722444][ T1649] ? __sys_sendmsg_sock+0x40/0x40 [ 51.727356][ T1649] ? import_iovec+0xe5/0x120 [ 51.731803][ T1649] ___sys_sendmsg+0x252/0x2e0 [ 51.736293][ T1649] ? __sys_sendmsg+0x260/0x260 [ 51.741174][ T1649] ? percpu_counter_add_batch+0x13d/0x160 [ 51.746924][ T1649] ? __fdget+0x1bc/0x240 [ 51.751006][ T1649] __se_sys_sendmsg+0x19a/0x260 [ 51.755774][ T1649] ? __x64_sys_sendmsg+0x90/0x90 [ 51.760556][ T1649] ? __kasan_check_write+0x14/0x20 [ 51.765493][ T1649] ? switch_fpu_return+0x15f/0x2e0 [ 51.770436][ T1649] __x64_sys_sendmsg+0x7b/0x90 [ 51.775037][ T1649] x64_sys_call+0x16a/0x9a0 [ 51.779382][ T1649] do_syscall_64+0x3b/0xb0 [ 51.783631][ T1649] ? clear_bhb_loop+0x35/0x90 [ 51.788362][ T1649] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.794181][ T1649] RIP: 0033:0x7f86a545c169 [ 51.798423][ T1649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.817853][ T1649] RSP: 002b:00007f86a3ac6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.826100][ T1649] RAX: ffffffffffffffda RBX: 00007f86a5674fa0 RCX: 00007f86a545c169 [ 51.833907][ T1649] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 51.841734][ T1649] RBP: 00007f86a54dd2a0 R08: 0000000000000000 R09: 0000000000000000 [ 51.849573][ T1649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.857346][ T1649] R13: 0000000000000000 R14: 00007f86a5674fa0 R15: 00007fffa5c412e8 [ 51.865171][ T1649] [ 51.868018][ T1649] [ 51.870451][ T1649] Allocated by task 1649: [ 51.874831][ T1649] ____kasan_kmalloc+0xdb/0x110 [ 51.879868][ T1649] __kasan_kmalloc+0x9/0x10 [ 51.884212][ T1649] __kmalloc+0x13f/0x2c0 [ 51.888533][ T1649] sk_prot_alloc+0xf9/0x330 [ 51.893162][ T1649] sk_alloc+0x38/0x430 [ 51.897449][ T1649] pfkey_create+0x12c/0x620 [ 51.902237][ T1649] __sock_create+0x3be/0x7e0 [ 51.907202][ T1649] __sys_socket+0x132/0x370 [ 51.911627][ T1649] __x64_sys_socket+0x7a/0x90 [ 51.916139][ T1649] x64_sys_call+0x147/0x9a0 [ 51.920468][ T1649] do_syscall_64+0x3b/0xb0 [ 51.924720][ T1649] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.930450][ T1649] [ 51.932705][ T1649] The buggy address belongs to the object at ffff88810d890000 [ 51.932705][ T1649] which belongs to the cache kmalloc-1k of size 1024 [ 51.946601][ T1649] The buggy address is located 1016 bytes inside of [ 51.946601][ T1649] 1024-byte region [ffff88810d890000, ffff88810d890400) [ 51.959873][ T1649] The buggy address belongs to the page: [ 51.965524][ T1649] page:ffffea0004362400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10d890 [ 51.975768][ T1649] head:ffffea0004362400 order:3 compound_mapcount:0 compound_pincount:0 [ 51.984201][ T1649] flags: 0x4000000000010200(slab|head|zone=1) [ 51.990119][ T1649] raw: 4000000000010200 0000000000000000 0000000a00000001 ffff888100043080 [ 51.999012][ T1649] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 52.007693][ T1649] page dumped because: kasan: bad access detected [ 52.014058][ T1649] page_owner tracks the page as allocated [ 52.019693][ T1649] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 90, ts 7138119323, free_ts 0 [ 52.038756][ T1649] post_alloc_hook+0x1a3/0x1b0 [ 52.043367][ T1649] prep_new_page+0x1b/0x110 [ 52.048013][ T1649] get_page_from_freelist+0x3550/0x35d0 [ 52.053687][ T1649] __alloc_pages+0x27e/0x8f0 [ 52.058493][ T1649] new_slab+0x9a/0x4e0 [ 52.062596][ T1649] ___slab_alloc+0x39e/0x830 [ 52.067009][ T1649] __slab_alloc+0x4a/0x90 [ 52.071303][ T1649] kmem_cache_alloc_trace+0x147/0x270 [ 52.076525][ T1649] syslog_print+0x11d/0x990 [ 52.080848][ T1649] do_syslog+0x340/0x830 [ 52.084915][ T1649] __x64_sys_syslog+0x7c/0x90 [ 52.089540][ T1649] x64_sys_call+0x2f9/0x9a0 [ 52.093874][ T1649] do_syscall_64+0x3b/0xb0 [ 52.098215][ T1649] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 52.103942][ T1649] page_owner free stack trace missing [ 52.109250][ T1649] [ 52.111536][ T1649] Memory state around the buggy address: [ 52.117235][ T1649] ffff88810d890280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 52.125520][ T1649] ffff88810d890300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 52.133926][ T1649] >ffff88810d890380: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 52.141974][ T1649] ^ [ 52.150424][ T1649] ffff88810d890400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 52.158526][ T1649] ffff88810d890480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 52.166412][ T1649] ================================================================== [ 52.174536][ T1649] Disabling lock debugging due to kernel taint