last executing test programs: 4.275444997s ago: executing program 3 (id=298): syz_mount_image$ext4(&(0x7f0000000340)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f00000000c0)={[{@prjquota}, {@noload}, {@errors_remount}, {@resgid={'resgid', 0x3d, 0xee00}}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@usrjquota}, {@nombcache}, {@noquota}, {@grpquota}, {@norecovery}]}, 0x0, 0x464, &(0x7f0000000a40)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x22) 4.143885276s ago: executing program 3 (id=301): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x14510, &(0x7f0000000780), 0xe, 0x4e7, &(0x7f0000000200)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4], 0x18}}], 0x1, 0x0) r6 = dup3(r5, r4, 0x0) connect$unix(r6, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0xca0, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0xc70, 0x2, [@TCA_BASIC_POLICE={0xc6c, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4cbe, 0x80000000, 0x10001, 0x4, 0x1, 0x10001, 0xb9, 0x5, 0x0, 0xb, 0x0, 0x5, 0x800, 0x3, 0xd0c8, 0x2, 0xfffffff8, 0x80000001, 0x6, 0x1, 0x9f72, 0xffffffff, 0x6e7c, 0x3, 0xfffffffc, 0x0, 0x1, 0x4, 0x1, 0x4, 0x200, 0x9, 0x7, 0x9, 0x7, 0xe9d, 0x8, 0x6, 0x9, 0x1f, 0x1, 0xffffffc5, 0x80, 0x40, 0x0, 0x10000, 0x3ff, 0x1ff, 0x6, 0x3, 0x2, 0x80, 0x0, 0x6, 0x22, 0x400, 0x5, 0x200, 0x4, 0xfffffff9, 0x2, 0x800, 0x14, 0x1, 0x1, 0x7fffffff, 0x0, 0x9, 0x8, 0xfdec, 0xe0, 0x5, 0x200, 0x2, 0x8, 0x6, 0x9, 0x5, 0x8, 0x2, 0xd9, 0xfffffff8, 0x1f, 0x401, 0x3, 0x6a89, 0x4, 0x7fffffff, 0xffffff18, 0x3, 0x4, 0x200, 0x8, 0x1, 0x7, 0x2000, 0x9, 0x0, 0x5, 0x100, 0x9, 0x6, 0x1ff, 0x3, 0x2c, 0xffffff1c, 0x3, 0xfff, 0xffff, 0x0, 0x3, 0xddd2, 0x80000000, 0xff, 0x5, 0x9167, 0x2, 0x0, 0x0, 0x0, 0x8, 0x1f, 0x7, 0x8000, 0x7f, 0x1, 0x9, 0x6, 0xfffff001, 0x7, 0x7bc, 0x80, 0x1, 0x80, 0x8, 0x8, 0x0, 0x101, 0x7ff, 0x4, 0x0, 0xf59, 0x3, 0x7, 0x1, 0x7e30, 0x5a, 0xd55, 0x7fffffff, 0x3, 0x7, 0x6, 0x39, 0x80000000, 0x5c88, 0x1000, 0x2, 0x3, 0x20, 0x6, 0x178, 0x5, 0x1, 0x7, 0x100, 0xe4, 0x0, 0x3ff, 0x6, 0x6, 0xfffff7ac, 0x3, 0x7bf4d43, 0x22d4, 0x4c3, 0x7fffffff, 0x10001, 0x3ff, 0x800, 0x80, 0x7, 0x9d1, 0xdb, 0x9b0, 0x7, 0x4, 0xffffffff, 0x1, 0x5b7, 0x7, 0x7fff, 0x7f, 0x1, 0x8, 0x0, 0x7, 0x100, 0x7fff, 0x0, 0xffff, 0xffffffff, 0xfffff0e3, 0x4, 0x40, 0x453, 0x80000001, 0x1, 0x1ff, 0x4, 0xa303, 0x800, 0x9, 0xd471, 0x0, 0xff, 0x8, 0x80000000, 0xdae9, 0x6d0, 0x7c000000, 0x2, 0x9, 0x3ff, 0x7fffffff, 0xffff, 0x3, 0x29, 0x7fffffff, 0x1dbc, 0x8, 0x5c07, 0x24bd, 0x6, 0x9, 0x8, 0x4, 0x3020, 0x6, 0x4, 0x2, 0x8, 0x0, 0x5, 0x3b50548b, 0x3, 0x8, 0x9, 0x1, 0x9, 0x5, 0x7, 0x3, 0xda6b, 0x4, 0x80000001, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8000, 0x4b, 0x0, 0x0, 0x8, 0xce32, 0x5, 0x3, 0x6, 0x4, 0x7, 0x3, 0x823, 0x7ff, 0x900, 0x5, 0x0, 0x9, 0x43ce8422, 0x2, 0x2, 0x401, 0x100, 0x9, 0x0, 0x60000, 0x7, 0x4, 0x1ff, 0x1c1b, 0x77c, 0x6, 0x1, 0x0, 0x3, 0x13b0, 0x40, 0x9, 0xb2, 0x9, 0x5, 0xffffffff, 0x8, 0x200, 0xffffff00, 0x1, 0xffff, 0x1, 0x6c0, 0x40, 0x800, 0x8, 0x101, 0x3, 0x2, 0x8, 0x8000, 0xffff0000, 0x8, 0x5, 0x9f26, 0x8, 0x8, 0x21, 0x1, 0x8, 0x1, 0x5, 0x3, 0xffffdac2, 0x8, 0x0, 0x0, 0x9, 0x0, 0x7fffffff, 0x4, 0x401, 0xffffffff, 0x7fffffff, 0x1f, 0xb2, 0x3, 0xefa1, 0xffffffc1, 0x40000000, 0x8000, 0xffff, 0xaa14, 0x9, 0x7, 0x865, 0x9, 0x5, 0xf1c, 0x3f, 0xffffffff, 0x800, 0x1ff, 0x7, 0x5, 0x40, 0x5a59, 0x7, 0x7fff, 0x71, 0x2, 0x2, 0x5, 0x101, 0x214c, 0x3f, 0x25, 0x1, 0x7d5, 0xff, 0x9, 0x7f, 0xfffffff8, 0xfffffffc, 0x80000000, 0x1, 0x74b, 0x80, 0x2b09, 0x70fb, 0x1f, 0x7, 0x1a836288, 0x8000, 0x0, 0x319cbc86, 0x3, 0x1, 0xd8, 0xfcf, 0x0, 0x4, 0x1ff, 0x3, 0x0, 0x9, 0x5, 0x80, 0x7f, 0xbedf, 0x8000, 0x4d, 0x4e, 0xb6c1, 0x1ff, 0xffff, 0xf47, 0x6fc5, 0x7fffffff, 0xbe, 0x4, 0x5, 0x3, 0xffff, 0x7fffffff, 0x80, 0x9, 0x400, 0x6, 0x10000, 0xffffffff, 0xffff, 0x401, 0x1, 0x400, 0xb41, 0x6, 0x4, 0x7, 0xfff, 0x5, 0x3, 0x1, 0x7fff, 0x1, 0x715, 0x9, 0x9, 0xf20d, 0x23, 0x400, 0xdd, 0x6, 0x10000, 0x1, 0x401, 0x345, 0x3, 0x1, 0x400, 0x7, 0x7ff, 0x2, 0xfffffeff, 0x2, 0x7, 0x65, 0x8, 0x7fffffff, 0x400, 0x4, 0x5, 0x1000, 0xffffff7f, 0x8, 0x9, 0xe07, 0x8001, 0x200, 0x1, 0xff, 0x5, 0x531bda26, 0x9, 0x0, 0x5, 0x0, 0x3f, 0x3471, 0x20, 0x7, 0x0, 0x400, 0x1000, 0x4, 0x5, 0xfffffffb, 0x80000001, 0x9, 0x57, 0xffffffff, 0xff, 0x3ff, 0x7f, 0xd87, 0x5, 0x80000000, 0x691, 0x0, 0x7fff, 0x0, 0x3, 0x9, 0x1, 0x3, 0x4c00, 0x40, 0xfffffff7, 0x0, 0x7]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x9, 0x81, 0xaf, 0x6, 0x7fffffff, 0xd5, 0x5, 0x1, 0x1, 0x59f, 0x2, 0x4, 0x10001, 0x0, 0x5, 0x4, 0x80000000, 0x5, 0x6, 0xffff, 0x6, 0x5, 0x8000, 0xf2, 0x7ff, 0x6, 0x2, 0x8, 0x3, 0x3c5, 0xffffff81, 0x7, 0x80000001, 0x7, 0x3, 0x4, 0x4, 0x80000001, 0xb87, 0x10000, 0x10000, 0x5, 0xe2, 0x7, 0x4a7b827c, 0x1, 0x401, 0x7a6, 0x6, 0xffffffc1, 0x5, 0x0, 0x5, 0x7, 0x6, 0x2745, 0x4, 0xffffffff, 0x7, 0x5, 0xffff, 0x69, 0x5, 0x7fff, 0xffffffff, 0x2, 0x5, 0x0, 0x9, 0x100, 0x0, 0x81, 0x1ff, 0x3, 0x6, 0x3, 0x6, 0x1, 0x5, 0x3, 0x4, 0xa8, 0x8, 0x5f8, 0x0, 0x5, 0x6, 0xff, 0x9, 0x800, 0x9, 0x40, 0x0, 0x6, 0x3f, 0x10000, 0x9, 0xb16, 0x400, 0xffffffff, 0x7, 0x8, 0x4, 0x1, 0x9, 0x9, 0xfffffffe, 0x3, 0x2, 0x6, 0xffffffff, 0x10001, 0x3, 0x8, 0xfffffffd, 0x400, 0x8, 0x40, 0x2, 0x27b3, 0x3, 0x6, 0x4a99, 0x200, 0x10001, 0x7, 0x3ff, 0x101, 0x52fe, 0x1, 0x800, 0x4, 0xf957, 0x9, 0x8000, 0x1, 0x401, 0x7, 0x200, 0x1000, 0x9, 0x8, 0x0, 0x99, 0x1, 0x3ff, 0x2, 0x9, 0xa2, 0x0, 0x7fff, 0x80, 0x0, 0x6, 0x1, 0x9, 0x10000, 0x6, 0x8, 0x101, 0x87d9, 0x2, 0x420, 0x3, 0x7fff, 0xfffff4a7, 0x5, 0x3, 0x80, 0x5, 0x9, 0x4, 0x2, 0x80, 0x7fffffff, 0x7fff, 0x4, 0x7, 0xffff7fff, 0x4, 0x6, 0x3, 0x8, 0x1, 0x3, 0x0, 0x7f, 0x6, 0x8, 0x3, 0x4, 0x69d, 0x0, 0x8, 0x80000001, 0x3, 0x80, 0x1, 0x81, 0x0, 0x3f, 0x0, 0x1, 0x10001, 0x4, 0x9, 0x3, 0x3f, 0xf507, 0x1, 0xfffffffc, 0x6, 0x4, 0x101, 0x96e, 0x1, 0x6ff1, 0x10000, 0x4, 0x1, 0x0, 0x8, 0x5, 0x0, 0x100, 0x6, 0x20, 0x100, 0x3, 0x5, 0x5, 0x1ff, 0x8c6, 0x0, 0x0, 0x7, 0x5, 0x8, 0x0, 0x4, 0x6, 0x10000, 0x101, 0x4, 0x7fff, 0x1, 0x80000001, 0x1, 0x6d, 0x1ff, 0x1, 0x41122446, 0x8, 0x8, 0x94]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x5695, 0x3, 0x2, {0x2, 0x1, 0xe8, 0xdb65, 0x40, 0x8}, {0x6, 0x2, 0x4, 0x1, 0x3, 0x9}, 0x195, 0x6, 0x20}}, @TCA_POLICE_RATE64={0xc}]}]}}]}, 0xca0}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000f40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000f00)={&(0x7f0000001f80)={0x160, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r7}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x10081}, 0x0) fallocate(r0, 0x20, 0x0, 0x140000) 3.190603482s ago: executing program 3 (id=310): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000010000850000007d000000180100002020752500000000002020327b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x4, &(0x7f0000000240)) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) r2 = epoll_create1(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000000380)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, 0x0, &(0x7f0000000480)) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$pid(0x1, 0x0, 0x4004) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x40}}, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r2, &(0x7f0000000380)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000540)) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000cc0)={0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000080)='ext4_es_find_extent_range_exit\x00', r0}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000100), 0x1001) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r8) sendmsg$TIPC_NL_PEER_REMOVE(r9, &(0x7f0000000940)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000001000)=ANY=[@ANYBLOB="505e0000d81e070e29d7109524f1fcbc91805afd6d07fc2122b1944e7b435c28", @ANYRES16=r10, @ANYBLOB="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"], 0x2d4}}, 0x0) 2.088017021s ago: executing program 3 (id=324): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000080000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000f00)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x8901, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x400) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r4 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x0, 0x2}, {0x8000000000000}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x6c}}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 1.709729249s ago: executing program 0 (id=328): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0xfffffd62) lseek(r0, 0xfffffffffffffff5, 0x1) 1.698380721s ago: executing program 0 (id=329): r0 = epoll_create(0x536) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@o_path={&(0x7f00000004c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/igmp6\x00') preadv(r1, &(0x7f00000007c0)=[{&(0x7f0000000a80)=""/196, 0xc4}], 0x1, 0x4fe, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000640)={0xfffffffffffffc8f, 0x9, 0x2, {0x9, 0x6, 0xfffffffffffffffd, 0x5, 0xfffffffffffffc00, 0x3, 0x8, 0x5, 0xffff}}, 0x43) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000600)) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000000)={@rand_addr=0x64010100, @broadcast}, 0x8) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000440)=0x4, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x538, 0x1a0, 0x290, 0x380, 0x1a0, 0x0, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@ipv6={@private1, @local, [], [], 'macsec0\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@ipv6={@empty, @private2, [], [], 'rose0\x00', 'lo\x00', {}, {}, 0x16}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@empty, @dev, [0x0, 0xffffffff], [], 'batadv_slave_1\x00', 'veth1_to_bond\x00', {}, {0xff}}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'netdevsim0\x00'}}}, {{@ipv6={@local, @private1, [], [], 'veth1_to_bridge\x00', 'team_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv4=@dev, 0x2}}}, {{@ipv6={@private1, @local, [0x0, 0x0, 0xffffffff], [], 'pim6reg1\x00', 'pim6reg1\x00', {}, {}, 0x0, 0x0, 0x5, 0x17be8f9aed8887b4}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x40, @private0, 0xe36c}, 0x1c) fsmount(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000200)="aebfad411acbdb0d9edcccefe0072ba2e85c544e151bcbaf982ee1faaba8f720bd218f3894ca9b4ab65cd054a3a308c4d5424e38b2bec9e3ad52b712211d79087c96fe4b7c1942df1d83b458c9a9d4b9b5fca4459b", 0x78, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x80000000}, 0x1c) 1.656862527s ago: executing program 1 (id=330): unshare(0x400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001439) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000240)) 1.644107479s ago: executing program 0 (id=331): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000010000000100000a980df23ce8efae1000000000e0000000000000000002e2e5f3e00b315a8d0c80deabbef6294e7cd58f0039d2f01c85f4d7f6dfe8e41fab62e070bb6e37fa0"], 0x0, 0x2e}, 0x20) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES32=r1]) read$FUSE(r0, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pread64(r3, &(0x7f0000000100)=""/147, 0x93, 0x0) ioctl$RTC_PIE_ON(r3, 0x7005) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r2}, 0x50) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x2, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000080)={r6, 0x1, 0x6, @multicast}, 0x10) lgetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="6274d5e748fb4d7266732e2f6465362f6675736500"], 0x0, 0x0) read$FUSE(r0, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000200)={0x10, 0xffffffffffffffda, r7}, 0x10) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000380)=0x14) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000001040)={0xc, {"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", 0x7c4}}, 0x1006) 1.600450486s ago: executing program 1 (id=332): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)={0x77540947ad9a1689}) epoll_wait(r1, &(0x7f00000018c0)=[{}], 0x1, 0x0) 1.546953594s ago: executing program 1 (id=333): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback={0xfe80ffff, 0x7ffffffff000}, 0x0, 0x0, 0xff, 0x1}, 0x20) 1.474385415s ago: executing program 1 (id=334): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001439) close(r0) 1.399016096s ago: executing program 0 (id=335): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000010000850000007d000000180100002020752500000000002020327b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x4, &(0x7f0000000240)) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) r2 = epoll_create1(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000000380)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, 0x0, &(0x7f0000000480)) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$pid(0x1, 0x0, 0x4004) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x40}}, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r2, &(0x7f0000000380)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000540)) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000cc0)={0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000080)='ext4_es_find_extent_range_exit\x00', r0}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000100), 0x1001) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r8) sendmsg$TIPC_NL_PEER_REMOVE(r9, &(0x7f0000000940)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000001000)=ANY=[@ANYBLOB="505e0000d81e070e29d7109524f1fcbc91805afd6d07fc2122b1944e7b435c28", @ANYRES16=r10, @ANYBLOB="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"], 0x2d4}}, 0x0) 1.271437856s ago: executing program 2 (id=336): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x18, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="bb"], 0x0) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r5) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) 468.897479ms ago: executing program 4 (id=339): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) syz_open_pts(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000080)=ANY=[@ANYRES16=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000005, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 444.586552ms ago: executing program 4 (id=340): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x440, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000008ec0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000002580)="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", 0x2000, &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x18, 0x0, 0x0, {0x2000000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000004e40)={0x50, 0x0, r4, {0x7, 0x9}}, 0x50) llistxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 378.309853ms ago: executing program 3 (id=341): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000680)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001f80)=[{0x0}, {0x0}, {0xffffffffffffffff}], 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) 377.929673ms ago: executing program 0 (id=342): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000180)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x1, 0x0, 0x6, 0x2, 0xff}, @map_fd={0x18, 0x5, 0x1, 0x0, r0}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0xf, &(0x7f00000003c0)={0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00', 0x2}, &(0x7f0000000040)=0x1e) 358.484446ms ago: executing program 2 (id=343): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)={0x77540947ad9a1689}) epoll_wait(r1, &(0x7f00000018c0)=[{}], 0x1, 0x0) 349.416107ms ago: executing program 0 (id=344): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback={0xfe80ffff, 0x7ffffffff000}, 0x0, 0x0, 0xff, 0x1}, 0x20) 336.781149ms ago: executing program 2 (id=345): unshare(0x2000400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="b40800000000000073114100000000008510000002000000b7000000000000009500c200000000009500001200000000f6642d47ec42f7fcd5c9bb742e94f50daf43694d3afb462a8f2c2dc0e996cd6cd9a2340f1b5ee66edcfb05961b41a14d592a57e3042ef73fecfd689a916a48d491bc227a0000000000000000150000000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x8, 0x0, 0x0}}, 0x10) 292.304286ms ago: executing program 1 (id=347): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000f47f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 291.765896ms ago: executing program 2 (id=348): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x0, 0x0, 0xd4a4}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f00000003c0)) fcntl$lock(r1, 0x24, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x3}) 283.614177ms ago: executing program 4 (id=349): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="a800000000010104000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) 208.741488ms ago: executing program 2 (id=350): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x32) ioctl$PPPIOCGMRU(r1, 0x80047453, 0x0) 165.149165ms ago: executing program 4 (id=351): r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x20040001) 149.287618ms ago: executing program 1 (id=352): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000080000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000f00)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x8901, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x400) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r4 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x0, 0x2}, {0x8000000000000}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x6c}}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 128.241001ms ago: executing program 4 (id=353): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x102004, 0x0, 0x0, 0x0, &(0x7f0000000100)) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) chdir(&(0x7f00000000c0)='./file0/../file0\x00') mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) rmdir(&(0x7f00000001c0)='./file0/../file0\x00') 124.268102ms ago: executing program 2 (id=354): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x18, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="bb"], 0x0) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r5) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) 114.021273ms ago: executing program 3 (id=355): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)={0x77540947ad9a1689}) epoll_wait(r1, &(0x7f00000018c0)=[{}], 0x1, 0x0) 0s ago: executing program 4 (id=356): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000940)={0x42, 0x4}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xffffffff}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4}, 0x10) close(r0) kernel console output (not intermixed with test programs): [ 7.108927][ T23] audit: type=1400 audit(1719312002.550:37): avc: denied { getattr } for pid=197 comm="dhcpcd" path="/run/dhcpcd/pid" dev="tmpfs" ino=1583 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 7.112112][ T23] audit: type=1400 audit(1719312002.550:38): avc: denied { sys_chroot } for pid=197 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 7.114885][ T23] audit: type=1400 audit(1719312002.550:39): avc: denied { setgid } for pid=197 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 7.117796][ T23] audit: type=1400 audit(1719312002.550:40): avc: denied { setuid } for pid=197 comm="dhcpcd" capability=7 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 14.549037][ T23] kauditd_printk_skb: 20 callbacks suppressed [ 14.549049][ T23] audit: type=1400 audit(1719312010.020:61): avc: denied { transition } for pid=286 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.555070][ T23] audit: type=1400 audit(1719312010.020:62): avc: denied { noatsecure } for pid=286 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.559229][ T23] audit: type=1400 audit(1719312010.020:63): avc: denied { write } for pid=286 comm="sh" path="pipe:[10433]" dev="pipefs" ino=10433 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 14.563436][ T23] audit: type=1400 audit(1719312010.020:64): avc: denied { rlimitinh } for pid=286 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.567147][ T23] audit: type=1400 audit(1719312010.020:65): avc: denied { siginh } for pid=286 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.213' (ED25519) to the list of known hosts. [ 20.950335][ T23] audit: type=1400 audit(1719312016.420:66): avc: denied { mounton } for pid=341 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.952355][ T341] cgroup1: Unknown subsys name 'net' [ 20.972991][ T23] audit: type=1400 audit(1719312016.420:67): avc: denied { mount } for pid=341 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.978384][ T341] cgroup1: Unknown subsys name 'net_prio' [ 21.005716][ T341] cgroup1: Unknown subsys name 'devices' [ 21.013132][ T23] audit: type=1400 audit(1719312016.480:68): avc: denied { unmount } for pid=341 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.181770][ T341] cgroup1: Unknown subsys name 'hugetlb' [ 21.187406][ T341] cgroup1: Unknown subsys name 'rlimit' [ 21.383898][ T23] audit: type=1400 audit(1719312016.850:69): avc: denied { setattr } for pid=341 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=1207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.407048][ T23] audit: type=1400 audit(1719312016.850:70): avc: denied { mounton } for pid=341 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.431667][ T23] audit: type=1400 audit(1719312016.850:71): avc: denied { mount } for pid=341 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.439857][ T343] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.463394][ T23] audit: type=1400 audit(1719312016.930:72): avc: denied { relabelto } for pid=343 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.488631][ T23] audit: type=1400 audit(1719312016.930:73): avc: denied { write } for pid=343 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.520194][ T23] audit: type=1400 audit(1719312016.990:74): avc: denied { read } for pid=341 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.545587][ T23] audit: type=1400 audit(1719312016.990:75): avc: denied { open } for pid=341 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.571542][ T341] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.902669][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.909589][ T351] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.916967][ T351] device bridge_slave_0 entered promiscuous mode [ 21.930812][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.937650][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.945320][ T351] device bridge_slave_1 entered promiscuous mode [ 22.026958][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.033846][ T352] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.041237][ T352] device bridge_slave_0 entered promiscuous mode [ 22.059454][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.066292][ T352] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.073961][ T352] device bridge_slave_1 entered promiscuous mode [ 22.103511][ T350] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.110575][ T350] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.117837][ T350] device bridge_slave_0 entered promiscuous mode [ 22.149966][ T350] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.156801][ T350] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.164305][ T350] device bridge_slave_1 entered promiscuous mode [ 22.186891][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.193855][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.201162][ T353] device bridge_slave_0 entered promiscuous mode [ 22.207672][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.214848][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.222261][ T354] device bridge_slave_0 entered promiscuous mode [ 22.239570][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.246411][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.253993][ T353] device bridge_slave_1 entered promiscuous mode [ 22.260409][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.267232][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.274833][ T354] device bridge_slave_1 entered promiscuous mode [ 22.435201][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.442074][ T352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.449184][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.455919][ T352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.512155][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.519022][ T351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.530675][ T350] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.537773][ T350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.544916][ T350] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.551687][ T350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.574988][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.582000][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.589122][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.595947][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.616981][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.623834][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.630981][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.637891][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.666170][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.674051][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.681627][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.688658][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.695620][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.703224][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.710605][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.717556][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.724681][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.731813][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.748843][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.756914][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.763765][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.770947][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.779057][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.785964][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.816689][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.824884][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.833027][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.839891][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.849958][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.857936][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.864791][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.902413][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.925450][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.933633][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.940491][ T356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.947929][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.956766][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.963622][ T356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.970794][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.978068][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.985947][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.993794][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.002150][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.010194][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.017009][ T356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.024243][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.032804][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.040898][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.047718][ T356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.054962][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.063189][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.071181][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.078612][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.085906][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.094019][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.125391][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.133430][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.141432][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.150137][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.158059][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.166288][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.174256][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.181095][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.188262][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.196533][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.204589][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.211466][ T372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.218739][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.226722][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.234683][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.242597][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.282326][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.290625][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.298799][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.306606][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.315211][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.323387][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.331680][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.340056][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.348184][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.356403][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.364404][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.378860][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.386689][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.395136][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.432209][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.440745][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.450047][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.470540][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.479141][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.487301][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.495830][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.504160][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.512433][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.520839][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.529048][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.563278][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.571770][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.580824][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.589676][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.598974][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.607391][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.616390][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.624949][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.633154][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.730614][ T380] xt_TCPMSS: Only works on TCP SYN packets [ 23.738593][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.746765][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.765354][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.028980][ T18] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.087538][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.095925][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.104146][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.112415][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.120637][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.128997][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.137186][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.159123][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.167245][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.195264][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.205126][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.213801][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.222163][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.278464][ T18] usb 3-1: Using ep0 maxpacket: 16 [ 24.328475][ T400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=112 sclass=netlink_route_socket pid=400 comm=syz.3.9 [ 24.411486][ T400] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 24.512722][ T408] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.535562][ T400] syz.3.9 (400) used greatest stack depth: 22776 bytes left [ 24.568623][ T18] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 24.579324][ T18] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.587410][ T18] usb 3-1: Product: syz [ 24.591880][ T18] usb 3-1: Manufacturer: syz [ 24.596294][ T18] usb 3-1: SerialNumber: syz [ 24.603300][ T18] usb 3-1: config 0 descriptor?? [ 24.689567][ T414] syz.0.14 (414) used greatest stack depth: 22616 bytes left [ 24.740078][ T419] ====================================================== [ 24.740078][ T419] WARNING: the mand mount option is being deprecated and [ 24.740078][ T419] will be removed in v5.15! [ 24.740078][ T419] ====================================================== [ 24.772233][ T419] FAT-fs (loop0): Directory bread(block 64) failed [ 24.778754][ T419] FAT-fs (loop0): Directory bread(block 65) failed [ 24.785058][ T419] FAT-fs (loop0): Directory bread(block 66) failed [ 24.791419][ T419] FAT-fs (loop0): Directory bread(block 67) failed [ 24.797727][ T419] FAT-fs (loop0): Directory bread(block 68) failed [ 24.804064][ T419] FAT-fs (loop0): Directory bread(block 69) failed [ 24.810695][ T419] FAT-fs (loop0): Directory bread(block 70) failed [ 24.817035][ T419] FAT-fs (loop0): Directory bread(block 71) failed [ 24.823651][ T419] FAT-fs (loop0): Directory bread(block 72) failed [ 24.830031][ T419] FAT-fs (loop0): Directory bread(block 73) failed [ 24.858607][ T18] r8152 3-1:0.0: Unknown version 0x0000 [ 25.183074][ T425] netlink: 172 bytes leftover after parsing attributes in process `syz.0.16'. [ 25.295555][ T393] usb 3-1: USB disconnect, device number 2 [ 25.351136][ T392] F2FS-fs (loop1): invalid crc value [ 25.380473][ T430] EXT4-fs (loop3): Ignoring removed orlov option [ 25.407375][ T430] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000001000,data_err=abort,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,max_dir_size_kb=0x00000000000007b1,orlov,bsdgroups,max_batch_time=0x0000000000000400,user_xattr,quota,,errors=continue [ 25.437728][ T392] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 25.631649][ T438] syz.3.18 (438) used greatest stack depth: 21688 bytes left [ 25.702710][ T446] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 25.783885][ T350] syz-executor (350) used greatest stack depth: 20760 bytes left [ 25.796971][ T446] attempt to access beyond end of device [ 25.796971][ T446] loop4: rw=2051, want=7894, limit=128 [ 25.838131][ T449] FAT-fs (loop4): FAT read failed (blocknr 128) [ 25.887754][ T454] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=112 sclass=netlink_route_socket pid=454 comm=syz.2.28 [ 26.023360][ T456] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.030253][ T456] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.037796][ T456] device bridge_slave_0 entered promiscuous mode [ 26.045493][ T456] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.054125][ T456] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.061855][ T456] device bridge_slave_1 entered promiscuous mode [ 26.107297][ T454] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 26.159252][ T456] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.166119][ T456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.173401][ T456] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.180339][ T456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.215953][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.252474][ T18] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.260997][ T23] kauditd_printk_skb: 70 callbacks suppressed [ 26.261008][ T23] audit: type=1326 audit(1719312021.730:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=453 comm="syz.2.28" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6cf9d68d39 code=0x0 [ 26.290163][ T18] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.323312][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.338438][ T23] audit: type=1400 audit(1719312021.800:147): avc: denied { write } for pid=475 comm="syz.0.34" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.364808][ T393] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.371743][ T393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.390792][ T9] device bridge_slave_1 left promiscuous mode [ 26.396775][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.404440][ T9] device bridge_slave_0 left promiscuous mode [ 26.434585][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.495310][ T486] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 26.528806][ T486] attempt to access beyond end of device [ 26.528806][ T486] loop0: rw=2051, want=7894, limit=128 [ 26.554344][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.573266][ T18] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.580143][ T18] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.592014][ T486] FAT-fs (loop0): FAT read failed (blocknr 128) [ 26.610191][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.629364][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.650214][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.668703][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.677515][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.703777][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.713064][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.744255][ T23] audit: type=1400 audit(1719312022.210:148): avc: denied { create } for pid=492 comm="syz.2.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 26.768526][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.843471][ T5] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.865466][ T23] audit: type=1400 audit(1719312022.230:149): avc: denied { bind } for pid=492 comm="syz.2.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 26.947650][ T23] audit: type=1400 audit(1719312022.360:150): avc: denied { setopt } for pid=492 comm="syz.2.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.086083][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.094416][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.103180][ T5] usb 2-1: Using ep0 maxpacket: 16 [ 27.108816][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.152523][ T499] device syzkaller0 entered promiscuous mode [ 27.172257][ T23] audit: type=1400 audit(1719312022.640:151): avc: denied { mounton } for pid=456 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=11061 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 27.248657][ T502] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 27.270668][ T502] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000003,delalloc,,errors=continue [ 27.286667][ T502] ext4 filesystem being mounted at /root/syzkaller.PhUVTy/0/file0 supports timestamps until 2038 (0x7fffffff) [ 27.299240][ T493] tipc: Failed to remove local publication {66,0,0}/1218612335 [ 27.308381][ T493] tipc: Failed to remove local publication {66,0,0}/1218612335 [ 27.321477][ T502] EXT4-fs error (device loop3): ext4_xattr_block_get:544: inode #15: comm syz.3.26: corrupted xattr block 32 [ 27.328175][ T493] tipc: Failed to remove local publication {66,0,0}/1218612334 [ 27.333156][ T502] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 27.349799][ T23] audit: type=1400 audit(1719312022.820:152): avc: denied { rename } for pid=501 comm="syz.3.26" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 27.349820][ T502] EXT4-fs error (device loop3): ext4_xattr_block_get:544: inode #15: comm syz.3.26: corrupted xattr block 32 [ 27.400522][ T502] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 27.408671][ T5] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 27.412343][ T502] EXT4-fs error (device loop3): __ext4_new_inode:1122: comm syz.3.26: failed to insert inode 16: doubly allocated? [ 27.418345][ T23] audit: type=1400 audit(1719312022.880:153): avc: denied { unlink } for pid=501 comm="syz.3.26" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 27.452091][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.460161][ T5] usb 2-1: Product: syz [ 27.460924][ T507] EXT4-fs (loop2): Ignoring removed orlov option [ 27.464200][ T5] usb 2-1: Manufacturer: syz [ 27.471229][ T23] audit: type=1400 audit(1719312022.900:154): avc: denied { setattr } for pid=501 comm="syz.3.26" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.479694][ T5] usb 2-1: SerialNumber: syz [ 27.503095][ T5] usb 2-1: config 0 descriptor?? [ 27.504525][ T507] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000001000,data_err=abort,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,max_dir_size_kb=0x00000000000007b1,orlov,bsdgroups,max_batch_time=0x0000000000000400,user_xattr,quota,,errors=continue [ 27.510500][ T502] incfs: mount failed -22 [ 27.535182][ T23] audit: type=1400 audit(1719312022.980:155): avc: denied { mount } for pid=501 comm="syz.3.26" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 27.574190][ T456] EXT4-fs error (device loop3) in ext4_free_inode:352: Corrupt filesystem [ 27.584875][ T456] EXT4-fs error (device loop3) in ext4_free_inode:352: Corrupt filesystem [ 27.606844][ T464] F2FS-fs (loop4): invalid crc value [ 27.616510][ T456] EXT4-fs error (device loop3) in ext4_free_inode:352: Corrupt filesystem [ 27.646826][ T456] EXT4-fs error (device loop3) in ext4_free_inode:352: Corrupt filesystem [ 27.679507][ T456] EXT4-fs error (device loop3): ext4_xattr_block_get:544: inode #15: comm syz-executor: corrupted xattr block 32 [ 27.698622][ T456] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 27.726113][ T456] EXT4-fs error (device loop3): ext4_xattr_block_get:544: inode #15: comm syz-executor: corrupted xattr block 32 [ 27.738552][ T456] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 27.750039][ T456] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2930: inode #15: comm syz-executor: corrupted xattr block 32 [ 27.753697][ T464] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 27.763139][ T456] EXT4-fs warning (device loop3): ext4_evict_inode:321: xattr delete (err -117) [ 27.798530][ T5] r8152 2-1:0.0: Unknown version 0x0000 [ 28.000614][ T532] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 28.010788][ T104] usb 2-1: USB disconnect, device number 2 [ 28.046414][ T535] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.057021][ T535] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.069452][ T535] device bridge_slave_0 entered promiscuous mode [ 28.073492][ T532] attempt to access beyond end of device [ 28.073492][ T532] loop0: rw=2051, want=7894, limit=128 [ 28.086875][ T535] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.086882][ T535] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.087550][ T535] device bridge_slave_1 entered promiscuous mode [ 28.116952][ T532] FAT-fs (loop0): FAT read failed (blocknr 128) [ 28.299495][ T535] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.306368][ T535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.313525][ T535] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.320422][ T535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.416231][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.424877][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.435215][ T104] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.454233][ T7] device bridge_slave_1 left promiscuous mode [ 28.476271][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.488938][ T7] device bridge_slave_0 left promiscuous mode [ 28.494967][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.642704][ T562] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 28.670542][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.692644][ T104] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.699614][ T104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.919593][ T562] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000003,delalloc,,errors=continue [ 28.935418][ T562] ext4 filesystem being mounted at /root/syzkaller.xtYofF/12/file0 supports timestamps until 2038 (0x7fffffff) [ 28.940326][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.956497][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.979260][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.991114][ T562] EXT4-fs error (device loop4): ext4_xattr_block_get:544: inode #15: comm syz.4.64: corrupted xattr block 32 [ 28.991175][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.012665][ T562] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 29.025928][ T562] EXT4-fs error (device loop4): ext4_xattr_block_get:544: inode #15: comm syz.4.64: corrupted xattr block 32 [ 29.038808][ T562] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 29.049149][ T562] EXT4-fs error (device loop4): __ext4_new_inode:1122: comm syz.4.64: failed to insert inode 16: doubly allocated? [ 29.068909][ T562] incfs: mount failed -22 [ 29.074223][ T586] device syzkaller0 entered promiscuous mode [ 29.090300][ T354] EXT4-fs error (device loop4) in ext4_free_inode:352: Corrupt filesystem [ 29.102205][ T354] EXT4-fs error (device loop4) in ext4_free_inode:352: Corrupt filesystem [ 29.102347][ T541] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.111082][ T354] EXT4-fs error (device loop4) in ext4_free_inode:352: Corrupt filesystem [ 29.118315][ T541] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.126861][ T354] EXT4-fs error (device loop4) in ext4_free_inode:352: Corrupt filesystem [ 29.134696][ T541] device bridge_slave_0 entered promiscuous mode [ 29.142179][ T354] EXT4-fs error (device loop4): ext4_xattr_block_get:544: inode #15: comm syz-executor: corrupted xattr block 32 [ 29.159842][ T354] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 29.168285][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.168798][ T354] EXT4-fs error (device loop4): ext4_xattr_block_get:544: inode #15: comm syz-executor: corrupted xattr block 32 [ 29.178095][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.188465][ T354] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 29.197458][ T541] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.208889][ T354] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2930: inode #15: comm syz-executor: corrupted xattr block 32 [ 29.216352][ T541] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.224305][ T354] EXT4-fs warning (device loop4): ext4_evict_inode:321: xattr delete (err -117) [ 29.232035][ T541] device bridge_slave_1 entered promiscuous mode [ 29.251255][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.262681][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.303486][ T575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.314815][ T575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.364852][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.373012][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.494890][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.505042][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.538773][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.547580][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.663807][ T342] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 29.893269][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.894413][ T598] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 29.903982][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.910095][ T598] ext4 filesystem being mounted at /root/syzkaller.0ImHTu/0/file0 supports timestamps until 2038 (0x7fffffff) [ 29.917935][ T342] usb 2-1: Using ep0 maxpacket: 16 [ 29.942353][ T598] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 29.942435][ T393] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.950885][ T598] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 29.957271][ T393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.971136][ T598] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 29.974433][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 29.987853][ T598] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 29.996682][ T598] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 30.010538][ T598] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 30.018890][ T598] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 30.033836][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 30.043537][ T598] syz.3.52 (598) used greatest stack depth: 20664 bytes left [ 30.054237][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.062650][ T18] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.069494][ T18] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.099272][ T575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 30.107339][ T575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.115695][ T596] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.124351][ T596] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.132548][ T596] device bridge_slave_0 entered promiscuous mode [ 30.144251][ T596] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.151347][ T596] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.159414][ T596] device bridge_slave_1 entered promiscuous mode [ 30.181796][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 30.190340][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.216209][ T575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.225183][ T575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.248498][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.248539][ T342] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 30.256491][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.276173][ T342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.292340][ T342] usb 2-1: Product: syz [ 30.297204][ T575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.300522][ T342] usb 2-1: Manufacturer: syz [ 30.306771][ T575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.318626][ T342] usb 2-1: SerialNumber: syz [ 30.331845][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.356939][ T342] usb 2-1: config 0 descriptor?? [ 30.365626][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.380487][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.393406][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.438715][ T609] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 30.454982][ T609] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 30.464836][ T609] F2FS-fs (loop3): invalid crc value [ 30.477566][ T609] F2FS-fs (loop3): Found nat_bits in checkpoint [ 30.525933][ T609] F2FS-fs (loop3): recover fsync data on readonly fs [ 30.526105][ T596] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.532925][ T609] F2FS-fs (loop3): Try to recover 1th superblock, ret: -30 [ 30.539390][ T596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.539559][ T596] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.546503][ T609] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 30.553563][ T596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.600681][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.613279][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.621186][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 30.621671][ T616] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 30.629081][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.637106][ T342] r8152 2-1:0.0: Unknown version 0x0000 [ 30.644780][ T616] ext4 filesystem being mounted at /root/syzkaller.2CejfN/29/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038 (0x7fffffff) [ 30.691834][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.712243][ T342] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.719115][ T342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.727195][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.736014][ T342] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.742862][ T342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.750293][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.758168][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.802118][ T628] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 30.820161][ T9] device bridge_slave_1 left promiscuous mode [ 30.826173][ T628] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 30.835140][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.842905][ T9] device bridge_slave_0 left promiscuous mode [ 30.849122][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.866968][ T9] device bridge_slave_1 left promiscuous mode [ 30.868002][ T18] usb 2-1: USB disconnect, device number 3 [ 30.876675][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.898854][ T9] device bridge_slave_0 left promiscuous mode [ 30.906692][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.078938][ T575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.090498][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.109452][ T640] EXT4-fs (loop3): 1 orphan inode deleted [ 31.115048][ T640] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 31.279366][ T640] ext4 filesystem being mounted at /root/syzkaller.0ImHTu/4/file1 supports timestamps until 2038 (0x7fffffff) [ 31.377899][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.406060][ T23] kauditd_printk_skb: 11 callbacks suppressed [ 31.406073][ T23] audit: type=1400 audit(1719312026.870:167): avc: denied { append } for pid=637 comm="syz.3.87" path="/root/syzkaller.0ImHTu/4/file1/cpuacct.usage_all" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 31.408857][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.445625][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.452351][ T650] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support! [ 31.477997][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.487332][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.498626][ T650] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 31.522279][ T650] EXT4-fs (loop2): Remounting filesystem read-only [ 31.529343][ T650] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 31.537798][ T650] Quota error (device loop2): write_blk: dquota write failed [ 31.557061][ T650] Quota error (device loop2): qtree_write_dquot: Error -27 occurred while creating quota [ 31.561757][ T575] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.580440][ T650] EXT4-fs (loop2): 1 truncate cleaned up [ 31.586101][ T650] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,discard, [ 31.597067][ T650] ext4 filesystem being mounted at /root/syzkaller.Zu55dT/4/file1 supports timestamps until 2038 (0x7fffffff) [ 31.597258][ T575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.654349][ T650] EXT4-fs error (device loop2): ext4_xattr_inode_iget:402: comm syz.2.89: inode #59392: comm syz.2.89: iget: illegal inode # [ 31.896830][ T650] EXT4-fs (loop2): Remounting filesystem read-only [ 31.942313][ T650] EXT4-fs error (device loop2): ext4_xattr_inode_iget:407: comm syz.2.89: error while reading EA inode 59392 err=-117 [ 31.961653][ T23] audit: type=1400 audit(1719312027.430:168): avc: denied { read } for pid=664 comm="syz.0.92" name="ppp" dev="devtmpfs" ino=9917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 31.990960][ T665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.92'. [ 32.000144][ T650] EXT4-fs error (device loop2): ext4_xattr_inode_iget:402: comm syz.2.89: inode #59392: comm syz.2.89: iget: illegal inode # [ 32.026930][ T23] audit: type=1400 audit(1719312027.450:169): avc: denied { open } for pid=664 comm="syz.0.92" path="/dev/ppp" dev="devtmpfs" ino=9917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 32.059272][ T650] EXT4-fs error (device loop2): ext4_xattr_inode_iget:407: comm syz.2.89: error while reading EA inode 59392 err=-117 [ 32.069561][ T23] audit: type=1400 audit(1719312027.450:170): avc: denied { shutdown } for pid=664 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.148567][ T472] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 32.154285][ T23] audit: type=1400 audit(1719312027.450:171): avc: denied { read } for pid=664 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.169939][ T472] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 32.251552][ T472] Quota error (device loop2): write_blk: dquota write failed [ 32.288438][ T23] audit: type=1400 audit(1719312027.460:172): avc: denied { create } for pid=664 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 32.327938][ T472] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 32.620886][ T678] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.637898][ T678] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.659471][ T678] device bridge_slave_0 entered promiscuous mode [ 32.674995][ T678] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.682234][ T678] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.689842][ T678] device bridge_slave_1 entered promiscuous mode [ 32.759085][ T678] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.766123][ T678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.773266][ T678] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.778282][ T663] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 32.780117][ T678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.802507][ T663] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 32.831953][ T690] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 32.850606][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.852164][ T663] F2FS-fs (loop4): invalid crc value [ 32.861520][ T690] ext4 filesystem being mounted at /root/syzkaller.Zu55dT/8/file0 supports timestamps until 2038 (0x7fffffff) [ 32.874651][ T342] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.879258][ T663] F2FS-fs (loop4): Found nat_bits in checkpoint [ 32.887509][ T690] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 32.896204][ T342] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.897423][ T669] F2FS-fs (loop1): Found nat_bits in checkpoint [ 32.915486][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.923871][ T690] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 32.932339][ T342] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.939197][ T342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.949499][ T705] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 32.970700][ T696] EXT4-fs (loop0): 1 orphan inode deleted [ 32.976333][ T696] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 32.995344][ T705] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 32.996204][ T663] F2FS-fs (loop4): recover fsync data on readonly fs [ 33.003686][ T705] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 33.011528][ T669] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 33.020116][ T696] ext4 filesystem being mounted at /root/syzkaller.2CejfN/32/file1 supports timestamps until 2038 (0x7fffffff) [ 33.025462][ T663] F2FS-fs (loop4): Try to recover 1th superblock, ret: -30 [ 33.040184][ T690] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 33.062660][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.069092][ T663] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 33.078892][ T690] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 33.156982][ T18] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.163876][ T18] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.171122][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.181668][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.209965][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.224038][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.488548][ T18] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 33.508184][ T712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.102'. [ 33.526115][ T9] device bridge_slave_1 left promiscuous mode [ 33.532554][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.540297][ T9] device bridge_slave_0 left promiscuous mode [ 33.546254][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.721071][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.728942][ T18] usb 3-1: Using ep0 maxpacket: 16 [ 33.735513][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.744011][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.753714][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.786039][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.789895][ T714] EXT4-fs (loop4): 1 orphan inode deleted [ 33.807469][ T714] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 33.815560][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.818815][ T714] ext4 filesystem being mounted at /root/syzkaller.OUpgJJ/3/file1 supports timestamps until 2038 (0x7fffffff) [ 34.000572][ T723] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 34.012063][ T723] EXT4-fs (loop3): Remounting filesystem read-only [ 34.090502][ T18] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 34.115794][ T18] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.195039][ T18] usb 3-1: Product: syz [ 34.199518][ T18] usb 3-1: Manufacturer: syz [ 34.204044][ T18] usb 3-1: SerialNumber: syz [ 34.239792][ T18] usb 3-1: config 0 descriptor?? [ 34.295448][ T723] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 34.304153][ T723] EXT4-fs (loop3): 1 truncate cleaned up [ 34.309686][ T723] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,discard, [ 34.320998][ T723] ext4 filesystem being mounted at /root/syzkaller.EEugw2/1/file1 supports timestamps until 2038 (0x7fffffff) [ 34.339955][ T723] EXT4-fs error (device loop3): ext4_xattr_inode_iget:402: comm syz.3.107: inode #59392: comm syz.3.107: iget: illegal inode # [ 34.353502][ T723] EXT4-fs (loop3): Remounting filesystem read-only [ 34.359921][ T723] EXT4-fs error (device loop3): ext4_xattr_inode_iget:407: comm syz.3.107: error while reading EA inode 59392 err=-117 [ 34.372319][ T723] EXT4-fs error (device loop3): ext4_xattr_inode_iget:402: comm syz.3.107: inode #59392: comm syz.3.107: iget: illegal inode # [ 34.385471][ T723] EXT4-fs error (device loop3): ext4_xattr_inode_iget:407: comm syz.3.107: error while reading EA inode 59392 err=-117 [ 34.406460][ T472] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 34.417144][ T472] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 34.588470][ T18] r8152 3-1:0.0: Unknown version 0x0000 [ 34.933697][ T5] usb 3-1: USB disconnect, device number 3 [ 35.041312][ T760] EXT4-fs (loop0): 1 orphan inode deleted [ 35.046951][ T760] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,resgid=0x0000000000000000,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 35.067808][ T760] ext4 filesystem being mounted at /root/syzkaller.2CejfN/34/file1 supports timestamps until 2038 (0x7fffffff) [ 35.099182][ T761] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 35.116290][ T761] EXT4-fs error (device loop4): ext4_search_dir:1509: inode #12: block 7: comm syz.4.116: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 35.119108][ T752] F2FS-fs (loop1): Found nat_bits in checkpoint [ 35.181666][ T752] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 35.240944][ T777] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 35.250390][ T777] ext4 filesystem being mounted at /root/syzkaller.OUpgJJ/8/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038 (0x7fffffff) [ 35.362949][ T777] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 35.371718][ T777] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 35.454759][ T785] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 35.463543][ T785] ext4 filesystem being mounted at /root/syzkaller.EEugw2/3/file0 supports timestamps until 2038 (0x7fffffff) [ 35.508735][ T785] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 35.518173][ T785] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 35.533355][ T785] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 35.543832][ T785] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 35.573593][ T785] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 35.593478][ T785] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 35.693598][ T785] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 35.801788][ T815] EXT4-fs (loop4): 1 orphan inode deleted [ 35.807341][ T815] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,resgid=0x0000000000000000,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 35.827707][ T815] ext4 filesystem being mounted at /root/syzkaller.OUpgJJ/10/file1 supports timestamps until 2038 (0x7fffffff) [ 36.806702][ T23] kauditd_printk_skb: 27 callbacks suppressed [ 36.806714][ T23] audit: type=1400 audit(1719312032.090:186): avc: denied { create } for pid=850 comm="syz.0.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 36.834145][ T23] audit: type=1400 audit(1719312032.100:187): avc: denied { write } for pid=850 comm="syz.0.146" path="socket:[15704]" dev="sockfs" ino=15704 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 36.859034][ T23] audit: type=1400 audit(1719312032.100:188): avc: denied { nlmsg_read } for pid=850 comm="syz.0.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 36.972890][ T864] EXT4-fs (loop4): 1 orphan inode deleted [ 36.994589][ T864] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,resgid=0x0000000000000000,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 37.017592][ T864] ext4 filesystem being mounted at /root/syzkaller.OUpgJJ/14/file1 supports timestamps until 2038 (0x7fffffff) [ 37.340669][ T883] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 37.349546][ T883] ext4 filesystem being mounted at /root/syzkaller.Zu55dT/15/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038 (0x7fffffff) [ 37.468578][ T882] EXT4-fs error (device loop3): ext4_validate_block_bitmap:418: comm syz.3.157: bg 0: block 248: padding at end of block bitmap is not set [ 37.669698][ T882] Quota error (device loop3): write_blk: dquota write failed [ 37.691520][ T882] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 37.836033][ T882] EXT4-fs (loop3): 1 truncate cleaned up [ 37.871404][ T882] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,noload,,errors=continue [ 37.883853][ T882] ext4 filesystem being mounted at /root/syzkaller.EEugw2/9/file0 supports timestamps until 2038 (0x7fffffff) [ 37.890573][ T883] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 37.895538][ T23] audit: type=1400 audit(1719312033.350:189): avc: denied { create } for pid=881 comm="syz.2.158" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 37.916518][ T882] syz.3.157 (882) used greatest stack depth: 20568 bytes left [ 37.947959][ T883] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 38.201417][ T875] F2FS-fs (loop1): invalid crc value [ 38.215036][ T875] F2FS-fs (loop1): invalid crc value [ 38.220530][ T875] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 38.360908][ T23] audit: type=1400 audit(1719312033.830:190): avc: denied { block_suspend } for pid=928 comm="syz.0.170" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.418572][ T5] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 38.509088][ T934] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz.0.173: bg 0: block 248: padding at end of block bitmap is not set [ 38.539138][ T934] Quota error (device loop0): write_blk: dquota write failed [ 38.546411][ T934] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 38.557475][ T934] EXT4-fs (loop0): 1 truncate cleaned up [ 38.563308][ T934] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,noload,,errors=continue [ 38.573715][ T934] ext4 filesystem being mounted at /root/syzkaller.2CejfN/52/file0 supports timestamps until 2038 (0x7fffffff) [ 38.668543][ T74] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 38.707510][ T939] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 38.717176][ T939] ext4 filesystem being mounted at /root/syzkaller.2CejfN/53/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038 (0x7fffffff) [ 38.798788][ T5] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 38.840170][ T5] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 16, setting to 8 [ 38.878135][ T5] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 38.888822][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.918659][ T911] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 38.952747][ T939] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 38.963653][ T939] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 39.048662][ T74] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.064186][ T74] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 39.168507][ T5] usb 3-1: string descriptor 0 read error: -71 [ 39.181491][ T23] audit: type=1400 audit(1719312034.650:191): avc: denied { write } for pid=967 comm="syz.3.186" name="ppp" dev="devtmpfs" ino=9917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 39.204325][ T5] hub 3-1:32.0: USB hub found [ 39.238515][ T74] usb 5-1: Dual-Role OTG device on HNP port [ 39.258495][ T74] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 39.267451][ T74] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.275303][ T74] usb 5-1: Product: syz [ 39.278578][ T5] hub 3-1:32.0: config failed, can't read hub descriptor (err -22) [ 39.279440][ T74] usb 5-1: Manufacturer: syz [ 39.291563][ T74] usb 5-1: SerialNumber: syz [ 39.323785][ T975] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 39.349203][ T5] usb 3-1: USB disconnect, device number 4 [ 39.363261][ T74] cdc_ether 5-1:1.0: skipping garbage [ 39.378969][ T575] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 39.380188][ T74] usb 5-1: bad CDC descriptors [ 39.578333][ T74] usb 5-1: USB disconnect, device number 2 [ 39.618452][ T575] usb 1-1: Using ep0 maxpacket: 32 [ 39.738526][ T575] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 39.749789][ T575] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 39.761156][ T575] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 39.770393][ T575] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.798328][ T575] usb 1-1: config 0 descriptor?? [ 39.838854][ T959] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 40.083710][ T575] hub 1-1:0.0: USB hub found [ 40.121013][ T1004] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm syz.2.198: bg 0: block 248: padding at end of block bitmap is not set [ 40.135946][ T1004] EXT4-fs (loop2): 1 truncate cleaned up [ 40.141996][ T1004] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,noload,,errors=continue [ 40.152564][ T1004] ext4 filesystem being mounted at /root/syzkaller.Zu55dT/17/file0 supports timestamps until 2038 (0x7fffffff) [ 40.228507][ T575] hub 1-1:0.0: config failed, hub has too many ports! (err -19) [ 40.678431][ T5] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 40.808527][ T575] usbhid 1-1:0.0: can't add hid device: -71 [ 40.814429][ T575] usbhid: probe of 1-1:0.0 failed with error -71 [ 40.849832][ T575] usb 1-1: USB disconnect, device number 2 [ 40.968496][ T5] usb 5-1: Using ep0 maxpacket: 32 [ 41.088486][ T5] usb 5-1: config 0 has an invalid descriptor of length 110, skipping remainder of the config [ 41.098886][ T5] usb 5-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 41.107869][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.121393][ T5] usb 5-1: config 0 descriptor?? [ 41.159395][ T5] usb 5-1: bad CDC descriptors [ 41.388761][ T5] usb 5-1: USB disconnect, device number 3 [ 41.422128][ T1030] F2FS-fs (loop1): invalid crc value [ 41.433370][ T1030] F2FS-fs (loop1): Found nat_bits in checkpoint [ 41.486182][ T1030] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 41.513602][ T1030] F2FS-fs (loop1): inode (7) has corrupted xattr [ 41.520330][ T1030] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=7 [ 41.532027][ T1030] F2FS-fs (loop1): inode (7) has corrupted xattr [ 41.541484][ T1030] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=7 [ 41.550586][ T1030] F2FS-fs (loop1): inode (7) has corrupted xattr [ 41.980504][ T575] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 42.658487][ T575] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.676822][ T575] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 42.738483][ T5] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 42.848520][ T575] usb 1-1: Dual-Role OTG device on HNP port [ 42.868511][ T575] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 42.877447][ T575] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.885542][ T575] usb 1-1: Product: syz [ 42.889761][ T575] usb 1-1: Manufacturer: syz [ 42.894226][ T575] usb 1-1: SerialNumber: syz [ 42.978918][ T575] cdc_ether 1-1:1.0: skipping garbage [ 42.984203][ T575] usb 1-1: bad CDC descriptors [ 43.017181][ T23] kauditd_printk_skb: 5 callbacks suppressed [ 43.017193][ T23] audit: type=1326 audit(1719312038.480:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1100 comm="syz.2.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db7468d39 code=0x7ffc0000 [ 43.018444][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 43.023526][ T23] audit: type=1326 audit(1719312038.480:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1100 comm="syz.2.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db7468d39 code=0x7ffc0000 [ 43.318959][ T5] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 43.341094][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.383045][ T23] audit: type=1326 audit(1719312038.520:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1100 comm="syz.2.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f4db7468d39 code=0x7ffc0000 [ 43.406129][ T23] audit: type=1326 audit(1719312038.520:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1100 comm="syz.2.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db7468d39 code=0x7ffc0000 [ 43.409480][ T5] usb 5-1: Product: syz [ 43.429100][ T23] audit: type=1326 audit(1719312038.520:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1100 comm="syz.2.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db7468d39 code=0x7ffc0000 [ 43.429119][ T23] audit: type=1326 audit(1719312038.520:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1100 comm="syz.2.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4db7468d39 code=0x7ffc0000 [ 43.460892][ T5] usb 5-1: Manufacturer: syz [ 43.479313][ T23] audit: type=1326 audit(1719312038.520:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1100 comm="syz.2.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db7468d39 code=0x7ffc0000 [ 43.504251][ T5] usb 5-1: SerialNumber: syz [ 43.512232][ T5] usb 5-1: config 0 descriptor?? [ 43.517506][ T23] audit: type=1326 audit(1719312038.520:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1100 comm="syz.2.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db7468d39 code=0x7ffc0000 [ 43.517949][ T575] usb 1-1: USB disconnect, device number 3 [ 43.551799][ T23] audit: type=1326 audit(1719312038.520:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1100 comm="syz.2.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f4db7468d39 code=0x7ffc0000 [ 43.590304][ T23] audit: type=1326 audit(1719312038.520:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1100 comm="syz.2.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db7468d39 code=0x7ffc0000 [ 43.615019][ T1101] EXT4-fs error (device loop2): mb_free_blocks:1458: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 43.629321][ T1101] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 220 vs 221 free clusters [ 43.643589][ T1101] EXT4-fs error (device loop2): ext4_free_branches:1022: inode #11: comm syz.2.230: invalid indirect mapped block 1 (level 1) [ 43.656995][ T1101] EXT4-fs (loop2): 1 truncate cleaned up [ 43.662786][ T1101] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 43.788547][ T5] r8152 5-1:0.0: Unknown version 0x0000 [ 43.804176][ T1096] F2FS-fs (loop3): invalid crc value [ 43.852990][ T1096] F2FS-fs (loop3): Found nat_bits in checkpoint [ 43.857219][ T1120] netlink: 'syz.2.234': attribute type 25 has an invalid length. [ 43.866951][ T1120] netlink: 'syz.2.234': attribute type 8 has an invalid length. [ 43.984388][ T1096] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 44.003729][ T5] usb 5-1: USB disconnect, device number 4 [ 44.106631][ T1096] F2FS-fs (loop3): inode (7) has corrupted xattr [ 44.216333][ T1096] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=7 [ 44.268556][ T1096] F2FS-fs (loop3): inode (7) has corrupted xattr [ 44.283403][ T1096] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=7 [ 44.292335][ T1096] F2FS-fs (loop3): inode (7) has corrupted xattr [ 44.466002][ T1146] netlink: 'syz.0.245': attribute type 25 has an invalid length. [ 44.474026][ T1146] netlink: 'syz.0.245': attribute type 8 has an invalid length. [ 45.107524][ T1181] netlink: 'syz.3.259': attribute type 25 has an invalid length. [ 45.115240][ T1181] netlink: 'syz.3.259': attribute type 8 has an invalid length. [ 45.132897][ T1183] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 45.153380][ T1183] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,mblk_io_submit,,errors=continue [ 45.167915][ T1183] ext4 filesystem being mounted at /root/syzkaller.Zu55dT/39/bus supports timestamps until 2038 (0x7fffffff) [ 45.187041][ T1183] fs-verity: sha512 using implementation "sha512-generic" [ 45.200539][ T1183] fs-verity (loop2, inode 13): ext4_end_enable_verity() failed with err -30 [ 45.213855][ T1183] syz.2.260 (1183) used greatest stack depth: 18008 bytes left [ 45.258460][ T372] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 45.666119][ T1198] EXT4-fs error (device loop2): mb_free_blocks:1458: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 45.680590][ T1198] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 220 vs 221 free clusters [ 45.695412][ T1198] EXT4-fs error (device loop2): ext4_free_branches:1022: inode #11: comm syz.2.265: invalid indirect mapped block 1 (level 1) [ 45.709118][ T1198] EXT4-fs (loop2): 1 truncate cleaned up [ 45.714662][ T1198] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 45.718489][ T372] usb 1-1: Using ep0 maxpacket: 32 [ 45.888562][ T372] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 45.899737][ T372] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 45.911071][ T372] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 45.920085][ T372] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.938541][ T393] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 45.952889][ T372] usb 1-1: config 0 descriptor?? [ 46.198679][ T1172] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 46.218986][ T372] hub 1-1:0.0: USB hub found [ 46.418431][ T393] usb 2-1: Using ep0 maxpacket: 16 [ 46.428750][ T372] hub 1-1:0.0: config failed, hub has too many ports! (err -19) [ 46.818581][ T393] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 46.827645][ T372] usbhid 1-1:0.0: can't add hid device: -71 [ 46.833439][ T372] usbhid: probe of 1-1:0.0 failed with error -71 [ 46.840782][ T393] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.849417][ T393] usb 2-1: Product: syz [ 46.853377][ T393] usb 2-1: Manufacturer: syz [ 46.857903][ T393] usb 2-1: SerialNumber: syz [ 46.863638][ T393] usb 2-1: config 0 descriptor?? [ 46.879110][ T372] usb 1-1: USB disconnect, device number 4 [ 46.998474][ T575] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 47.128834][ T393] r8152 2-1:0.0: Unknown version 0x0000 [ 47.438660][ T393] usb 2-1: USB disconnect, device number 4 [ 47.608463][ T575] usb 5-1: Using ep0 maxpacket: 32 [ 47.758671][ T575] usb 5-1: config 0 has an invalid descriptor of length 110, skipping remainder of the config [ 47.769513][ T575] usb 5-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 47.779822][ T575] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.792185][ T575] usb 5-1: config 0 descriptor?? [ 47.956591][ T575] usb 5-1: bad CDC descriptors [ 48.012655][ T1272] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 48.021497][ T1272] ext4 filesystem being mounted at /root/syzkaller.EEugw2/45/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038 (0x7fffffff) [ 48.068450][ T629] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 48.084410][ T1272] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 48.092798][ T1272] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 48.135822][ T74] usb 5-1: USB disconnect, device number 5 [ 48.338524][ T629] usb 1-1: device descriptor read/64, error 18 [ 48.412016][ T1288] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 48.440562][ T1288] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2221: inode #15: comm syz.3.298: corrupted in-inode xattr [ 48.460055][ T1288] EXT4-fs (loop3): Remounting filesystem read-only [ 48.466454][ T1288] EXT4-fs error (device loop3): ext4_orphan_get:1240: comm syz.3.298: couldn't read orphan inode 15 (err -117) [ 48.478261][ T1288] EXT4-fs (loop3): mounted filesystem without journal. Opts: prjquota,noload,errors=remount-ro,resgid=0x000000000000ee00,min_batch_time=0x0000000000000005,usrjquota=,nombcache,noquota,grpquota,norecovery, [ 48.601849][ T1297] EXT4-fs (loop3): 1 orphan inode deleted [ 48.607484][ T1297] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 48.616745][ T1297] ext4 filesystem being mounted at /root/syzkaller.EEugw2/51/file1 supports timestamps until 2038 (0x7fffffff) [ 48.738489][ T629] usb 1-1: device descriptor read/64, error 18 [ 49.115398][ T971] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 49.499880][ T629] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 49.575207][ T23] kauditd_printk_skb: 71 callbacks suppressed [ 49.575219][ T23] audit: type=1400 audit(1719312045.040:276): avc: denied { setopt } for pid=1317 comm="syz.4.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.749428][ T1332] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 49.778696][ T971] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 49.790336][ T1332] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2221: inode #15: comm syz.1.311: corrupted in-inode xattr [ 49.803759][ T971] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 49.817967][ T1332] EXT4-fs (loop1): Remounting filesystem read-only [ 49.828488][ T629] usb 1-1: device descriptor read/64, error 18 [ 49.889764][ T971] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 49.907638][ T23] audit: type=1400 audit(1719312045.370:277): avc: denied { remove_name } for pid=144 comm="syslogd" name="messages" dev="tmpfs" ino=10061 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.932333][ T1332] EXT4-fs error (device loop1): ext4_orphan_get:1240: comm syz.1.311: couldn't read orphan inode 15 (err -117) [ 49.933211][ T23] audit: type=1400 audit(1719312045.370:278): avc: denied { rename } for pid=144 comm="syslogd" name="messages" dev="tmpfs" ino=10061 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.949928][ T971] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 49.967076][ T23] audit: type=1400 audit(1719312045.370:279): avc: denied { create } for pid=144 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.978136][ T971] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 50.009004][ T1332] EXT4-fs (loop1): mounted filesystem without journal. Opts: prjquota,noload,errors=remount-ro,resgid=0x000000000000ee00,min_batch_time=0x0000000000000005,usrjquota=,nombcache,noquota,grpquota,norecovery, [ 50.009015][ T971] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 50.258501][ T971] usb 3-1: string descriptor 0 read error: -22 [ 50.266266][ T971] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 50.275841][ T971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.287483][ T971] usb 3-1: config 0 descriptor?? [ 50.292785][ T629] usb 1-1: device descriptor read/64, error 18 [ 50.307741][ T1351] capability: warning: `syz.4.318' uses deprecated v2 capabilities in a way that may be insecure [ 50.331095][ T1353] fuse: Bad value for 'group_id' [ 50.336550][ T23] audit: type=1400 audit(1719312045.800:280): avc: denied { read } for pid=1352 comm="syz.4.319" name="rtc0" dev="devtmpfs" ino=1212 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 50.360393][ T23] audit: type=1400 audit(1719312045.800:281): avc: denied { open } for pid=1352 comm="syz.4.319" path="/dev/rtc0" dev="devtmpfs" ino=1212 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 50.374606][ T971] hub 3-1:0.0: bad descriptor, ignoring hub [ 50.389754][ T971] hub: probe of 3-1:0.0 failed with error -5 [ 50.398898][ T23] audit: type=1400 audit(1719312045.870:282): avc: denied { ioctl } for pid=1352 comm="syz.4.319" path="/dev/rtc0" dev="devtmpfs" ino=1212 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 50.424187][ T629] usb usb1-port1: attempt power cycle [ 50.890258][ T971] usb 3-1: USB disconnect, device number 5 [ 50.905261][ T1369] netlink: 24 bytes leftover after parsing attributes in process `syz.0.325'. [ 50.962868][ T23] audit: type=1400 audit(1719312046.430:283): avc: denied { name_bind } for pid=1376 comm="syz.0.329" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 51.026299][ T1383] fuse: Bad value for 'group_id' [ 51.508519][ T23] audit: type=1400 audit(1719312046.970:284): avc: denied { create } for pid=1391 comm="syz.0.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.142671][ T23] audit: type=1400 audit(1719312046.970:285): avc: denied { write } for pid=1391 comm="syz.0.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.325415][ T1412] EXT4-fs (loop3): Ignoring removed orlov option [ 52.336758][ T1412] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 52.375358][ T1427] netlink: 24 bytes leftover after parsing attributes in process `syz.4.349'. [ 52.393056][ T1412] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,errors=continue,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 52.448755][ T1412] EXT4-fs error (device loop3): get_max_inline_xattr_value_size:68: inode #12: comm syz.3.341: corrupt xattr in inline inode [ 52.467638][ T1412] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2221: inode #12: comm syz.3.341: corrupted in-inode xattr [ 52.668233][ T678] ================================================================== [ 52.676227][ T678] BUG: KASAN: use-after-free in ext4_xattr_delete_inode+0xc1f/0xc30 [ 52.684018][ T678] Read of size 4 at addr ffff8881dbaac000 by task syz-executor/678 [ 52.691731][ T678] [ 52.693917][ T678] CPU: 1 PID: 678 Comm: syz-executor Not tainted 5.4.274-syzkaller-00002-g6f97bd951d82 #0 [ 52.703636][ T678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 52.713527][ T678] Call Trace: [ 52.716663][ T678] dump_stack+0x1d8/0x241 [ 52.720829][ T678] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 52.726576][ T678] ? printk+0xd1/0x111 [ 52.730483][ T678] ? ext4_xattr_delete_inode+0xc1f/0xc30 [ 52.735950][ T678] print_address_description+0x8c/0x600 [ 52.741501][ T678] ? ext4_xattr_delete_inode+0xc1f/0xc30 [ 52.746962][ T678] __kasan_report+0xf3/0x120 [ 52.751388][ T678] ? ext4_xattr_delete_inode+0xc1f/0xc30 [ 52.756857][ T678] kasan_report+0x30/0x60 [ 52.761026][ T678] ext4_xattr_delete_inode+0xc1f/0xc30 [ 52.766326][ T678] ? check_preemption_disabled+0x9f/0x320 [ 52.772198][ T678] ? ext4_expand_extra_isize_ea+0x1bb0/0x1bb0 [ 52.778065][ T678] ? __ext4_journal_start_sb+0x295/0x460 [ 52.783539][ T678] ext4_evict_inode+0x1378/0x1ac0 [ 52.788532][ T678] ? ext4_truncate_restart_trans+0xe0/0xe0 [ 52.794167][ T678] ? wb_io_lists_depopulated+0x85/0x170 [ 52.799551][ T678] ? ext4_truncate_restart_trans+0xe0/0xe0 [ 52.805174][ T678] evict+0x29b/0x6a0 [ 52.808907][ T678] vfs_rmdir+0x24b/0x3c0 [ 52.812997][ T678] do_rmdir+0x2c1/0x580 [ 52.816980][ T678] ? d_delete_notify+0xc0/0xc0 [ 52.821706][ T678] ? _raw_spin_unlock_irq+0x4a/0x60 [ 52.826735][ T678] do_syscall_64+0xca/0x1c0 [ 52.831169][ T678] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 52.836903][ T678] RIP: 0033:0x7f654f85e1a7 [ 52.841144][ T678] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.860665][ T678] RSP: 002b:00007ffd53452068 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 52.868905][ T678] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f654f85e1a7 [ 52.876711][ T678] RDX: 0000000000000200 RSI: 00007ffd53453210 RDI: 00000000ffffff9c [ 52.884531][ T678] RBP: 00007f654f8cc672 R08: 0000000000000000 R09: 0000000000000000 [ 52.892341][ T678] R10: 0000000000000100 R11: 0000000000000207 R12: 00007ffd53453210 [ 52.900152][ T678] R13: 00007f654f8cc672 R14: 000000000000cc23 R15: 00007ffd534553f0 [ 52.907962][ T678] [ 52.910132][ T678] Allocated by task 10: [ 52.914147][ T678] __kasan_kmalloc+0x171/0x210 [ 52.918724][ T678] kmem_cache_alloc+0xd9/0x250 [ 52.923325][ T678] dst_alloc+0x154/0x4c0 [ 52.927406][ T678] ip6_pol_route+0xca8/0x1500 [ 52.932008][ T678] fib6_rule_lookup+0x25b/0x720 [ 52.936689][ T678] ip6_route_input+0x729/0xb00 [ 52.941288][ T678] ip6_rcv_finish+0x150/0x350 [ 52.945803][ T678] ipv6_rcv+0xee/0x280 [ 52.949709][ T678] __netif_receive_skb+0x1c6/0x530 [ 52.954656][ T678] process_backlog+0x34f/0x680 [ 52.959255][ T678] net_rx_action+0x53f/0x1160 [ 52.963915][ T678] __do_softirq+0x23b/0x6b7 [ 52.968281][ T678] [ 52.970411][ T678] Freed by task 10: [ 52.974062][ T678] __kasan_slab_free+0x1b5/0x270 [ 52.978834][ T678] kmem_cache_free+0x10b/0x2c0 [ 52.983453][ T678] dst_destroy+0x23f/0x320 [ 52.987772][ T678] rcu_do_batch+0x492/0xa00 [ 52.992111][ T678] rcu_core+0x4c8/0xcb0 [ 52.996105][ T678] __do_softirq+0x23b/0x6b7 [ 53.000436][ T678] [ 53.002614][ T678] The buggy address belongs to the object at ffff8881dbaac000 [ 53.002614][ T678] which belongs to the cache ip6_dst_cache of size 240 [ 53.016682][ T678] The buggy address is located 0 bytes inside of [ 53.016682][ T678] 240-byte region [ffff8881dbaac000, ffff8881dbaac0f0) [ 53.030037][ T678] The buggy address belongs to the page: [ 53.035518][ T678] page:ffffea00076eab00 refcount:1 mapcount:0 mapping:ffff8881ee5a8f00 index:0xffff8881dbaaca00 [ 53.045755][ T678] flags: 0x8000000000000200(slab) [ 53.050644][ T678] raw: 8000000000000200 ffffea0007866408 ffffea00078e9a08 ffff8881ee5a8f00 [ 53.059130][ T678] raw: ffff8881dbaaca00 00000000000c0001 00000001ffffffff 0000000000000000 [ 53.067532][ T678] page dumped because: kasan: bad access detected [ 53.073790][ T678] page_owner tracks the page as allocated [ 53.079515][ T678] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL) [ 53.092712][ T678] prep_new_page+0x18f/0x370 [ 53.097140][ T678] get_page_from_freelist+0x2d13/0x2d90 [ 53.102519][ T678] __alloc_pages_nodemask+0x393/0x840 [ 53.107745][ T678] alloc_slab_page+0x39/0x3c0 [ 53.112235][ T678] new_slab+0x97/0x440 [ 53.116141][ T678] ___slab_alloc+0x2fe/0x490 [ 53.120565][ T678] __slab_alloc+0x62/0xa0 [ 53.124732][ T678] kmem_cache_alloc+0x109/0x250 [ 53.129419][ T678] dst_alloc+0x154/0x4c0 [ 53.133500][ T678] icmp6_dst_alloc+0xf1/0x550 [ 53.138015][ T678] mld_sendpack+0x4e2/0xb50 [ 53.142348][ T678] mld_ifc_timer_expire+0x814/0xc10 [ 53.147388][ T678] call_timer_fn+0x36/0x390 [ 53.151729][ T678] __run_timers+0x879/0xbe0 [ 53.156181][ T678] run_timer_softirq+0x63/0xf0 [ 53.160753][ T678] __do_softirq+0x23b/0x6b7 [ 53.165089][ T678] page last free stack trace: [ 53.169606][ T678] free_unref_page_prepare+0x297/0x380 [ 53.174900][ T678] free_unref_page_list+0x10a/0x590 [ 53.179934][ T678] release_pages+0xad8/0xb20 [ 53.184359][ T678] tlb_finish_mmu+0x177/0x320 [ 53.188874][ T678] exit_mmap+0x2dc/0x520 [ 53.192952][ T678] __mmput+0x8e/0x2c0 [ 53.196771][ T678] do_exit+0xc08/0x2bc0 [ 53.200850][ T678] do_group_exit+0x138/0x300 [ 53.205279][ T678] __x64_sys_exit_group+0x3b/0x40 [ 53.210146][ T678] do_syscall_64+0xca/0x1c0 [ 53.214484][ T678] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 53.220201][ T678] [ 53.222372][ T678] Memory state around the buggy address: [ 53.227845][ T678] ffff8881dbaabf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 53.235745][ T678] ffff8881dbaabf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 53.243647][ T678] >ffff8881dbaac000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 53.251549][ T678] ^ [ 53.255442][ T678] ffff8881dbaac080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 53.263341][ T678] ffff8881dbaac100: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 53.271345][ T678] ================================================================== [ 53.279309][ T678] Disabling lock debugging due to kernel taint SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor)