last executing test programs:
3.548575962s ago: executing program 4 (id=9):
mkdir(0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0)
tee(r3, r1, 0x8, 0x0)
3.470204879s ago: executing program 3 (id=4):
sigaltstack(0x0, &(0x7f0000001140)={0x0})
3.440011412s ago: executing program 3 (id=10):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x0, 0x4ce, 0x0, 0x9dff, 0x1, "0007edeb00cbe600"})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x5, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17)
3.336733081s ago: executing program 2 (id=3):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x4401, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r3 = inotify_init1(0x0)
inotify_add_watch(r3, &(0x7f00000002c0)='./file0\x00', 0x600010c)
setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0)
2.033024588s ago: executing program 4 (id=14):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000280), 0x12)
2.00729372s ago: executing program 3 (id=16):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udplite\x00')
lseek(r0, 0x80, 0x0)
1.960043644s ago: executing program 4 (id=17):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
close_range(r1, 0xffffffffffffffff, 0x6)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f00000003c0)}], 0x1, 0x0, 0x0, 0x4804}}], 0x1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000100)={0x4, <r4=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x1, 0x2, &(0x7f0000000140)=0x9})
1.947799675s ago: executing program 2 (id=19):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000003000000080000ce505c650005"], 0x50)
1.881520021s ago: executing program 3 (id=20):
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x2000414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
setgroups(0x0, &(0x7f00000000c0))
ftruncate(r0, 0x800)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x803, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x3a)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x212, &(0x7f00000001c0)="$eJzsmTFrFEEUx/8zu7d3CSJYaGFzFgEjmL3dPZU0FrEXhETU8jCbcDrJyWXBJCAYbGz8AH4Ri1QWdnbWFioIFqYUBcEnOzuTnbi5M3sSm7wf3N5/37z35s3s3lu4BcMwJ5ZPH799eHFjfukygFOYQdPYv3ilj3T837/0Gka+WT/9ZLccKSIFAKLS6v9l/gDA6wUPeFqkJXKjgRmTcwlSa0wBtyFxyYzfgUBoa6UyOoXAPWN+4OjBlBEqFfcHanmlr9Jopa8C5CrJD12ADtS/tyOwDKBlphBOfRtb2w97ChgWQqVWNMjOUxmqK8btn65vQeK6swX59br7/NlOfh4ae2T3D0AMidjoLgQWjZ5HE2EYts1pGjvrP++X+b3isjnrP+pKWv+2EXXFmbn/N9cY8YuqQ/YOqzh/J6KjZQ4mugTHI/I66kfJdjUqmCBPTSH+tOQ/6H3Lub3dtyod/iAix+fzsdTzeOJwUcNZNy4AlaF300rdPDTq7AHLBXd/HGHvwJG3RNE/hA9cdPqT7zwVOtnao87G1vZcf623mq6m60nSvRZdiaKrSUf35uI4pv+1dH+advI3RvgGIsBmL8uG8SaQDeP986Q4Oh138dXgq46Ruv9JzP4kso8Xvezm4XMI85H6O1ez3sjiGYZhGIZhGIZhGIZhGIZhatGGgPmvUth3YlX85JZ+ofU7AAD//ynzZU4=")
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x80041285, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x24, 0x0, &(0x7f00000000c0)=[@clear_death={0x400c630f, 0x2}, @acquire_done={0x40106309, 0x20000003}], 0x47, 0x0, &(0x7f0000000440)="75e7dedc67eaf3f4bf39c3149556fe180a9c98acd21143f144ea0e38d14eb5b3e25159ade893824d3bec13e2e985b8085c815c95b1ca95f65c83681f29067ecea25a19185d2fa6"})
lseek(r0, 0x200, 0x0)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0)
sendfile(r0, r5, 0x0, 0x10f800)
1.881335451s ago: executing program 2 (id=21):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x23)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0x21)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x3, 0x1004, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x8, 0x4, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, r3, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
1.734703064s ago: executing program 1 (id=23):
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x126f, &(0x7f0000003780)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80, 0x0)
mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0)
chdir(&(0x7f0000000540)='./file0\x00')
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
renameat2(r0, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000200)='./bus\x00', 0x0)
creat(&(0x7f0000000540)='./file0\x00', 0x0)
1.606333916s ago: executing program 4 (id=24):
r0 = syz_open_dev$loop(&(0x7f0000000180), 0xaf, 0xa000)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
unshare(0x60600)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r2, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x800)
1.520293503s ago: executing program 4 (id=25):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000000c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000180)={@hyper})
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
accept4(r2, &(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000180)=0x80, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x1)
sched_setscheduler(0x0, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x3, &(0x7f0000000a40)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TCSETS(r5, 0x5402, &(0x7f0000000080)={0xffffffee, 0x0, 0x0, 0x0, 0x0, "1241b72d7fffff5b000f000000462200"})
write$binfmt_aout(r5, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140))
r6 = syz_open_pts(r5, 0x0)
ioctl$TCSETS(r5, 0x5402, &(0x7f0000000040)={0x2d1, 0x0, 0x0, 0x0, 0x0, "9ed98f159c35c80c45535d77abf995e5e5e541"})
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000))
getitimer(0x3, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_open_dev$usbfs(0x0, 0x4, 0x400000)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x21, 0x0, 0x0)
1.241753539s ago: executing program 1 (id=26):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000000c0)=0x1, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x80000, 0x80000000, 0xffffffff}, 0x1c)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa0100deffffffe3001c0000000000000000000000070000004404730001000000"], 0x40}, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000140)=ANY=[], 0x0)
1.184878704s ago: executing program 0 (id=27):
syz_open_procfs$namespace(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r2, 0x8, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = openat$cgroup_procs(r0, &(0x7f0000000280)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000580), 0x12)
syz_clone(0x4000, 0x0, 0x31, 0x0, 0x0, 0x0)
write$cgroup_int(r1, &(0x7f0000000040)=0x8000, 0x12)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
1.102845631s ago: executing program 1 (id=28):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000))
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000280)=0x1)
close(r0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
syz_open_dev$usbfs(0x0, 0xa37, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
962.450793ms ago: executing program 1 (id=29):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="0205000b0a000000fdffffff00000000030006000000000002004e22e0000002100000000000000002000100000000042000fb4000000000030005000000000002"], 0x50}, 0x1, 0x7}, 0x0)
915.104158ms ago: executing program 1 (id=30):
pipe2(0x0, 0xc0880)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
860.104553ms ago: executing program 3 (id=31):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = io_uring_setup(0x1b91, &(0x7f0000000000)={0x0, 0xf8b6, 0x8, 0xfffffffb, 0x69})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff)
close_range(r0, 0xffffffffffffffff, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)
rt_sigpending(0x0, 0x0)
rt_sigsuspend(&(0x7f0000000000)={[0xffffffffffffffa7]}, 0x8)
777.9541ms ago: executing program 2 (id=32):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file2\x00', 0x4204, &(0x7f0000003240)=ANY=[], 0x2, 0x334, &(0x7f0000002900)="$eJzs3M1LI2ccwPFfXk0imhxKSwvFh/bSXgZNey4NRaE0UFFTqoXCqJM2ZJpIJlhSStVTr6X3PS3sQTx6E3b3H/Cyt93LXvbmZWEP62F3Z5k3864xG4mr3w9InjzP80vmeUn4zeDk5Of//igXLa2o1yWcUBISETkVyUhYAiH/MeyW49JqV76cfPH40+XVtR9y+fz8klILuZWvskqp6Zn7f/6d9LsdTchx5teT59lnxx8ef3zyZuX3kqVKlqpU60pX69WndX3dNNRmySprSi2ahm4ZqlSxjJrXXvXai2Z1a6uh9MrmVGqrZliW0isNVTYaql5V9VpD6b/ppYrSNE1NpQQXKewvLem5IYM3RnwwuCK1Wk6PiEiyq6WwP5YDAgAAY9WZ/4edlH6o/F+m3fzf6dzM/w8+e1if/Olw2s//j+K98v+vn3iv1Zb/J0RkmPz/jlwi/+/OiG6Xd8r/cT3MxLuqQm3PnPw/5X9+XXu/HMy6BfJ/AAAAAAAAAAAAAAAAAAAAAADeB6e2nbZtOx08Bn/NWwj857iR+q3/hIgknNW3Wf+bbHl1TRLujXvOGpv/bhe2C96j0/ra9oghs5KWV+5+COrEtoM7j5QjIw/MHT9+Z7sQcVtyRSmJKYbMSVoynfG2vfB9fn5Oefz4s9uUUq3xWUnLB73js+3x/vvH5YvPW+I1ScujDamKKZvuvm7G/zOn1Hc/5jvik24/AAAAAABuAk2d6Xn+rmn92r1fGckV3ctEfa4PeOfXsz3Pz6PpT6LjHj0AAAAAALeD1firrJumUTunkJSL+wxfiA7WOd5REzuvc6RlhIMeT9y9kCHSr09kwBm7O+CsthWCf6Roa0r4lcNNbzD+ka3XbmtNWAaIinYe/IxToS757nv+QM5qgstG8T7zLIvdrxNu2wntsxob2X7+6P97L0f3AfnmMNgBF3fea6mJDbznTdNIdO46txDr/40RHsXXDgAAAIAxaCb9Qc23rc2hsRwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC3zJX8pF9HYdxjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK6LtwEAAP//04b4lA==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r0, 0x0)
rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000005cc0)='./file2\x00')
read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020)
713.545726ms ago: executing program 2 (id=33):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}, @datasec={0x8, 0x3, 0x0, 0xf, 0x2, [{0x5, 0x7fff, 0x8}, {0x5, 0x80000000, 0x400}, {0x2, 0x4, 0x4}], ',>'}, @enum={0x5, 0x9, 0x0, 0x6, 0x4, [{0xe, 0xa80}, {0x3, 0x1}, {0x8, 0x50}, {0x9, 0xfffffa7f}, {0xe, 0x806}, {0x5, 0x9}, {0xf}, {0x3, 0x3}, {0x4, 0x3}]}]}, {0x0, [0x2e]}}, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x28}}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000005c0)={[{@noauto_da_alloc}, {@jqfmt_vfsv1}, {@dioread_nolock}]}, 0x1, 0x4d1, &(0x7f00000007c0)="$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")
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000200000097000040"])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
fcntl$lock(r6, 0x26, &(0x7f0000000000))
fcntl$lock(r6, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x4, 0x4000007fffffff})
fcntl$lock(r6, 0x25, &(0x7f00000007c0)={0x1, 0x2, 0x5})
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10)
syz_usb_connect(0x2, 0x51, &(0x7f0000000b40)={{0x12, 0x1, 0x250, 0x6c, 0x3c, 0x62, 0x10, 0x46d, 0x8d3, 0x300e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x2, 0x9, 0x0, 0x0, [{{0x9, 0x4, 0x70, 0xfc, 0x0, 0xe, 0x1, 0x0, 0x3, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x8001}, {0xd, 0x24, 0xf, 0x1, 0x200, 0x6, 0x400}, {0x6, 0x24, 0x1a, 0xf, 0x24}, [@acm={0x4}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x6, 0x5, 0x80, 0x0, 0x80}]}]}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x4, 0x0, 0x1}, [@mark={0xc, 0x15, {0x35075b, 0x3}}]}, 0xc4}}, 0x0)
670.16039ms ago: executing program 4 (id=34):
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904040001020d00000524060001052400fcff0d240f0100000000000007000006241a0000180905810320000000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
syz_usb_connect$cdc_ecm(0x5, 0x0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000600)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x80, 0x1c, {0x2, 0x401, 0x3, 0x1, 0x63bf, 0x3, 0x7b00, 0xce, 0x8, 0x8200, 0x3ff, 0xffff}}, 0x0, 0x0, 0x0, 0x0})
369.199847ms ago: executing program 0 (id=35):
dup(0xffffffffffffffff)
pipe(0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty}, 0x1c)
listen(r0, 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r1, &(0x7f0000000240)="c4", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
343.147699ms ago: executing program 0 (id=36):
fcntl$getown(0xffffffffffffffff, 0x9)
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="656641f947000f380a262e400f0118c93600004b0fc7ad6f53fafc440f32c7442400d8000000c7442402ce000000ff2c24c46231ae280101440f09b906020000430f01cbba010000000f3064f3430f09c4223ccb5ae2", 0x56}], 0x1, 0x0, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
sched_getattr(0x0, 0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="0fa26667f046836b0876650fc71a66ba4100edb9800000c00f3235001000000f30420f017805450f0866b8af008ed86446d8e4b8010000000f01d9", 0x3b}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000001280)=ANY=[@ANYBLOB="0100000000000000000000000000000000000000242f696f8800000000000000000000000000000000000000000000000000000000e538"])
ioctl$KVM_RUN(r5, 0xae80, 0x0)
130.664648ms ago: executing program 0 (id=37):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071112600000000008510000002000000850000000800000095000007000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
80.804393ms ago: executing program 0 (id=38):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/47, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/69, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000016c0))
r1 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000180)=r1)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000380)={0x0, r1})
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x792, &(0x7f0000001a40)="$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")
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r2 = open(&(0x7f00000006c0)='./file1\x00', 0x185102, 0x0)
syz_emit_ethernet(0x2e, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r3 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@journal_checksum}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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")
fcntl$setstatus(r3, 0x4, 0x40000)
45.185666ms ago: executing program 1 (id=39):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
io_submit(0x0, 0x0, 0x0)
bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none, 0x8}, 0xa)
0s ago: executing program 0 (id=40):
r0 = socket$nl_route(0x10, 0x3, 0x0)
add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002800800030000bf1c000a0001"], 0x48}}, 0x0)
kernel console output (not intermixed with test programs):
Warning: Permanently added '10.128.0.23' (ED25519) to the list of known hosts.
[ 145.297306][ T28] audit: type=1400 audit(1731075129.138:66): avc: denied { mounton } for pid=405 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 145.298637][ T405] cgroup: Unknown subsys name 'net'
[ 145.319796][ T28] audit: type=1400 audit(1731075129.138:67): avc: denied { mount } for pid=405 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 145.346784][ T28] audit: type=1400 audit(1731075129.168:68): avc: denied { unmount } for pid=405 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 145.346951][ T405] cgroup: Unknown subsys name 'devices'
[ 145.490747][ T405] cgroup: Unknown subsys name 'hugetlb'
[ 145.496169][ T405] cgroup: Unknown subsys name 'rlimit'
[ 145.596343][ T28] audit: type=1400 audit(1731075129.438:69): avc: denied { setattr } for pid=405 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 145.619386][ T28] audit: type=1400 audit(1731075129.438:70): avc: denied { mounton } for pid=405 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 145.642466][ T409] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 145.644439][ T28] audit: type=1400 audit(1731075129.438:71): avc: denied { mount } for pid=405 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[ 145.669223][ T405] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 145.675723][ T28] audit: type=1400 audit(1731075129.498:72): avc: denied { relabelto } for pid=409 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 145.709299][ T28] audit: type=1400 audit(1731075129.498:73): avc: denied { write } for pid=409 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 145.734923][ T28] audit: type=1400 audit(1731075129.518:74): avc: denied { read } for pid=405 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 145.760469][ T28] audit: type=1400 audit(1731075129.518:75): avc: denied { open } for pid=405 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 146.577856][ T415] bridge0: port 1(bridge_slave_0) entered blocking state
[ 146.584868][ T415] bridge0: port 1(bridge_slave_0) entered disabled state
[ 146.592256][ T415] device bridge_slave_0 entered promiscuous mode
[ 146.600880][ T415] bridge0: port 2(bridge_slave_1) entered blocking state
[ 146.607726][ T415] bridge0: port 2(bridge_slave_1) entered disabled state
[ 146.615072][ T415] device bridge_slave_1 entered promiscuous mode
[ 146.645580][ T419] bridge0: port 1(bridge_slave_0) entered blocking state
[ 146.652450][ T419] bridge0: port 1(bridge_slave_0) entered disabled state
[ 146.659735][ T419] device bridge_slave_0 entered promiscuous mode
[ 146.674718][ T419] bridge0: port 2(bridge_slave_1) entered blocking state
[ 146.681708][ T419] bridge0: port 2(bridge_slave_1) entered disabled state
[ 146.689015][ T419] device bridge_slave_1 entered promiscuous mode
[ 146.707902][ T417] bridge0: port 1(bridge_slave_0) entered blocking state
[ 146.714786][ T417] bridge0: port 1(bridge_slave_0) entered disabled state
[ 146.722062][ T417] device bridge_slave_0 entered promiscuous mode
[ 146.735832][ T416] bridge0: port 1(bridge_slave_0) entered blocking state
[ 146.742735][ T416] bridge0: port 1(bridge_slave_0) entered disabled state
[ 146.750049][ T416] device bridge_slave_0 entered promiscuous mode
[ 146.759949][ T417] bridge0: port 2(bridge_slave_1) entered blocking state
[ 146.766798][ T417] bridge0: port 2(bridge_slave_1) entered disabled state
[ 146.774244][ T417] device bridge_slave_1 entered promiscuous mode
[ 146.787877][ T416] bridge0: port 2(bridge_slave_1) entered blocking state
[ 146.794792][ T416] bridge0: port 2(bridge_slave_1) entered disabled state
[ 146.802013][ T416] device bridge_slave_1 entered promiscuous mode
[ 146.828933][ T418] bridge0: port 1(bridge_slave_0) entered blocking state
[ 146.835789][ T418] bridge0: port 1(bridge_slave_0) entered disabled state
[ 146.843137][ T418] device bridge_slave_0 entered promiscuous mode
[ 146.849934][ T418] bridge0: port 2(bridge_slave_1) entered blocking state
[ 146.856771][ T418] bridge0: port 2(bridge_slave_1) entered disabled state
[ 146.864165][ T418] device bridge_slave_1 entered promiscuous mode
[ 147.070552][ T419] bridge0: port 2(bridge_slave_1) entered blocking state
[ 147.077412][ T419] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 147.084535][ T419] bridge0: port 1(bridge_slave_0) entered blocking state
[ 147.091395][ T419] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 147.109776][ T415] bridge0: port 2(bridge_slave_1) entered blocking state
[ 147.116717][ T415] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 147.123842][ T415] bridge0: port 1(bridge_slave_0) entered blocking state
[ 147.130619][ T415] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 147.142663][ T416] bridge0: port 2(bridge_slave_1) entered blocking state
[ 147.149529][ T416] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 147.156695][ T416] bridge0: port 1(bridge_slave_0) entered blocking state
[ 147.163513][ T416] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 147.181395][ T418] bridge0: port 2(bridge_slave_1) entered blocking state
[ 147.188244][ T418] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 147.195378][ T418] bridge0: port 1(bridge_slave_0) entered blocking state
[ 147.202149][ T418] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 147.216734][ T417] bridge0: port 2(bridge_slave_1) entered blocking state
[ 147.223607][ T417] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 147.230805][ T417] bridge0: port 1(bridge_slave_0) entered blocking state
[ 147.237567][ T417] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 147.267573][ T43] bridge0: port 1(bridge_slave_0) entered disabled state
[ 147.275160][ T43] bridge0: port 2(bridge_slave_1) entered disabled state
[ 147.282316][ T43] bridge0: port 1(bridge_slave_0) entered disabled state
[ 147.289969][ T43] bridge0: port 2(bridge_slave_1) entered disabled state
[ 147.296989][ T43] bridge0: port 1(bridge_slave_0) entered disabled state
[ 147.304106][ T43] bridge0: port 1(bridge_slave_0) entered disabled state
[ 147.311230][ T43] bridge0: port 2(bridge_slave_1) entered disabled state
[ 147.318269][ T43] bridge0: port 2(bridge_slave_1) entered disabled state
[ 147.325495][ T43] bridge0: port 1(bridge_slave_0) entered disabled state
[ 147.332535][ T43] bridge0: port 2(bridge_slave_1) entered disabled state
[ 147.341142][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 147.348390][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 147.365121][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 147.390538][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 147.399310][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 147.407329][ T43] bridge0: port 1(bridge_slave_0) entered blocking state
[ 147.414194][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 147.421500][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 147.429782][ T43] bridge0: port 2(bridge_slave_1) entered blocking state
[ 147.436613][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 147.461468][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 147.469946][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 147.477734][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 147.485975][ T43] bridge0: port 1(bridge_slave_0) entered blocking state
[ 147.492832][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 147.500237][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 147.508211][ T43] bridge0: port 1(bridge_slave_0) entered blocking state
[ 147.515235][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 147.522641][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 147.530823][ T43] bridge0: port 2(bridge_slave_1) entered blocking state
[ 147.537647][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 147.545003][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 147.553083][ T43] bridge0: port 2(bridge_slave_1) entered blocking state
[ 147.559941][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 147.579870][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 147.587274][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 147.594921][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 147.603318][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 147.611479][ T43] bridge0: port 1(bridge_slave_0) entered blocking state
[ 147.618307][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 147.625867][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 147.634204][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 147.642235][ T43] bridge0: port 2(bridge_slave_1) entered blocking state
[ 147.649077][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 147.667313][ T417] device veth0_vlan entered promiscuous mode
[ 147.680876][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 147.688879][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 147.696635][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 147.704822][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 147.712841][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 147.721308][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 147.729566][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 147.737201][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 147.745189][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 147.753106][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 147.760999][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 147.768275][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 147.777258][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 147.785414][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 147.801786][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 147.809241][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 147.816480][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 147.824918][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 147.833467][ T43] bridge0: port 1(bridge_slave_0) entered blocking state
[ 147.840325][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 147.847842][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 147.855792][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 147.863647][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 147.872093][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 147.880192][ T43] bridge0: port 2(bridge_slave_1) entered blocking state
[ 147.887029][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 147.898158][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 147.906309][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 147.922670][ T415] device veth0_vlan entered promiscuous mode
[ 147.929592][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 147.937746][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 147.946433][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 147.954308][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 147.976677][ T417] device veth1_macvtap entered promiscuous mode
[ 147.984476][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 147.992660][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 147.999943][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 148.007123][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 148.015477][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 148.023933][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 148.031881][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 148.039925][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 148.047162][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 148.061497][ T419] device veth0_vlan entered promiscuous mode
[ 148.069754][ T416] device veth0_vlan entered promiscuous mode
[ 148.085579][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 148.093644][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 148.101587][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 148.109984][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 148.118110][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 148.126285][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 148.134192][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 148.142116][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 148.150276][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 148.159252][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 148.167387][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 148.175526][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 148.183816][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 148.191224][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 148.208921][ T416] device veth1_macvtap entered promiscuous mode
[ 148.218230][ T415] device veth1_macvtap entered promiscuous mode
[ 148.225279][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 148.233734][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 148.241819][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 148.253329][ T419] device veth1_macvtap entered promiscuous mode
[ 148.267988][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 148.276221][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 148.284486][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 148.292220][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 148.300508][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 148.309096][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 148.317123][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 148.329248][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 148.337400][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 148.346226][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 148.354450][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 148.365733][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 148.374279][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 148.398474][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 148.406728][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 148.416306][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 148.425196][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 148.482031][ T438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 148.491818][ T446] xt_TCPMSS: Only works on TCP SYN packets
[ 148.492478][ T438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 148.522211][ T438] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 148.539151][ T438] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 148.557237][ T418] device veth0_vlan entered promiscuous mode
[ 148.581627][ T418] device veth1_macvtap entered promiscuous mode
[ 148.602194][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 148.611963][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 148.620326][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 148.627881][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 148.636252][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 148.652927][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 148.684373][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 150.142899][ T488] netlink: 'syz.1.13': attribute type 29 has an invalid length.
[ 150.175951][ T488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'.
[ 150.185810][ T488] netlink: 'syz.1.13': attribute type 29 has an invalid length.
[ 150.193341][ T488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'.
[ 150.226672][ T493] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[ 150.227147][ T499] loop0: detected capacity change from 0 to 512
[ 150.250062][ T498] loop3: detected capacity change from 0 to 128
[ 150.272092][ T499] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[ 150.305021][ T498] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 150.329408][ T499] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it
[ 150.339504][ T499] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.18: Corrupt directory, running e2fsck is recommended
[ 150.352468][ T499] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2
[ 150.360388][ T499] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2186: inode #15: comm syz.0.18: corrupted in-inode xattr
[ 150.378272][ T499] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.18: couldn't read orphan inode 15 (err -117)
[ 150.395301][ T498] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 150.398928][ T499] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 150.419445][ T28] kauditd_printk_skb: 35 callbacks suppressed
[ 150.419460][ T28] audit: type=1400 audit(1731075134.268:111): avc: denied { mount } for pid=494 comm="syz.0.18" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 150.453244][ T510] loop1: detected capacity change from 0 to 8192
[ 150.465892][ T28] audit: type=1400 audit(1731075134.288:112): avc: denied { mount } for pid=497 comm="syz.3.20" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[ 150.488779][ T499] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[ 150.504767][ T499] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it
[ 150.539770][ T28] audit: type=1400 audit(1731075134.348:113): avc: denied { create } for pid=497 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 150.544352][ T499] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.18: Corrupt directory, running e2fsck is recommended
[ 150.571623][ T28] audit: type=1400 audit(1731075134.358:114): avc: denied { read } for pid=497 comm="syz.3.20" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 150.572393][ T510] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2074)
[ 150.640177][ T28] audit: type=1400 audit(1731075134.358:115): avc: denied { open } for pid=497 comm="syz.3.20" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 150.641169][ T499] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[ 150.682547][ T28] audit: type=1400 audit(1731075134.378:116): avc: denied { create } for pid=512 comm="syz.4.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 150.682704][ T510] FAT-fs (loop1): Filesystem has been set read-only
[ 150.708599][ T499] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it
[ 150.710148][ T510] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2074)
[ 150.726088][ T28] audit: type=1400 audit(1731075134.378:117): avc: denied { map_read map_write } for pid=501 comm="syz.2.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 150.727929][ T510] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2074)
[ 150.749040][ T499] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.18: Corrupt directory, running e2fsck is recommended
[ 150.755750][ T510] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2074)
[ 150.778956][ T28] audit: type=1400 audit(1731075134.388:118): avc: denied { getopt } for pid=512 comm="syz.4.24" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 150.780190][ T499] EXT4-fs error (device loop0): ext4_find_dest_de:2113: inode #2: block 3: comm syz.0.18: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[ 150.826177][ T28] audit: type=1400 audit(1731075134.458:119): avc: denied { read write } for pid=517 comm="syz.4.25" name="vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 150.896960][ T28] audit: type=1400 audit(1731075134.458:120): avc: denied { open } for pid=517 comm="syz.4.25" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 150.926113][ T417] EXT4-fs (loop0): unmounting filesystem.
[ 151.266992][ T458] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 151.358659][ T540] loop2: detected capacity change from 0 to 128
[ 151.373460][ T540] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[ 151.381255][ T540] FAT-fs (loop2): Filesystem has been set read-only
[ 151.388232][ T540] FAT-fs (loop2): error, invalid FAT chain (i_pos 550, last_block 8)
[ 151.396645][ T540] FAT-fs (loop2): error, corrupted file size (i_pos 550, 522)
[ 151.435798][ T542] loop2: detected capacity change from 0 to 512
[ 151.449024][ T542] =======================================================
[ 151.449024][ T542] WARNING: The mand mount option has been deprecated and
[ 151.449024][ T542] and is ignored by this kernel. Remove the mand
[ 151.449024][ T542] option from the mount to silence this warning.
[ 151.449024][ T542] =======================================================
[ 151.485363][ T542] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 151.499750][ T542] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 151.510252][ T542] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.33: invalid indirect mapped block 4294967295 (level 1)
[ 151.524180][ T542] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.33: invalid indirect mapped block 4294967295 (level 1)
[ 151.538687][ T542] EXT4-fs (loop2): 2 truncates cleaned up
[ 151.544368][ T542] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 151.738698][ T469] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 151.818681][ T504] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[ 151.858616][ T475] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[ 152.030884][ T557] loop0: detected capacity change from 0 to 2048
[ 152.050646][ T557] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 152.094366][ T558] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[ 152.109360][ T469] usb 5-1: config 1 has an invalid interface number: 4 but max is 1
[ 152.117210][ T469] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 152.127232][ T469] usb 5-1: config 1 has no interface number 0
[ 152.127548][ T10] ------------[ cut here ]------------
[ 152.133179][ T469] usb 5-1: config 1 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 152.138419][ T10] kernel BUG at fs/ext4/inode.c:2760!
[ 152.155594][ T10] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[ 152.161495][ T10] CPU: 0 PID: 10 Comm: kworker/u4:1 Not tainted 6.1.112-syzkaller-00003-gd3daafbfd2bf #0
[ 152.171123][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 152.181274][ T10] Workqueue: writeback wb_workfn (flush-7:0)
[ 152.187087][ T10] RIP: 0010:ext4_writepages+0x3fab/0x3fd0
[ 152.192641][ T10] Code: 35 80 ff 31 ff 89 de e8 b3 35 80 ff 45 84 f6 75 2a e8 19 33 80 ff 49 bc 00 00 00 00 00 fc ff df e9 6e f6 ff ff e8 05 33 80 ff <0f> 0b e8 fe 32 80 ff e8 a5 16 0b ff e9 46 c3 ff ff e8 ef 32 80 ff
[ 152.212083][ T10] RSP: 0018:ffffc900000a7000 EFLAGS: 00010293
[ 152.217983][ T10] RAX: ffffffff81f5710b RBX: 0000008000000000 RCX: ffff88810039a880
[ 152.225897][ T10] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000
[ 152.233692][ T10] RBP: ffffc900000a7410 R08: ffffffff81f5386b R09: ffffed1021eb6ac4
[ 152.241504][ T10] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881177a2000
[ 152.249316][ T10] R13: ffff88810f5b5758 R14: 0000008410000000 R15: ffffc900000a72e0
[ 152.257135][ T10] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 152.259933][ T567] input: syz0 as /devices/virtual/input/input4
[ 152.265895][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 152.265914][ T10] CR2: 00007f76d0f53d58 CR3: 000000010fffb000 CR4: 00000000003526b0
[ 152.265932][ T10] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 152.294543][ T10] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 152.294571][ T10] Call Trace:
[ 152.294576][ T10] <TASK>
[ 152.294583][ T10] ? __die_body+0x62/0xb0
[ 152.294608][ T10] ? die+0x88/0xb0
[ 152.316137][ T10] ? do_trap+0x103/0x330
[ 152.316178][ T10] ? ext4_writepages+0x3fab/0x3fd0
[ 152.325153][ T10] ? handle_invalid_op+0x95/0xc0
[ 152.330003][ T10] ? ext4_writepages+0x3fab/0x3fd0
[ 152.334951][ T10] ? exc_invalid_op+0x32/0x50
[ 152.339642][ T10] ? asm_exc_invalid_op+0x1b/0x20
[ 152.344501][ T10] ? ext4_writepages+0x70b/0x3fd0
[ 152.349357][ T10] ? ext4_writepages+0x3fab/0x3fd0
[ 152.354307][ T10] ? ext4_writepages+0x3fab/0x3fd0
[ 152.359258][ T10] ? sched_group_set_idle+0x710/0x710
[ 152.364551][ T10] ? detach_entity_load_avg+0x780/0x780
[ 152.369925][ T10] ? psi_task_change+0x1d3/0x360
[ 152.374701][ T10] ? ext4_read_folio+0x240/0x240
[ 152.379522][ T10] ? cpudl_cleanup+0x40/0x40
[ 152.383907][ T10] ? xas_load+0x39d/0x3b0
[ 152.388070][ T10] ? __update_load_avg_cfs_rq+0xb1/0x2f0
[ 152.388798][ T469] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 152.393547][ T10] ? enqueue_task_fair+0xe82/0x2260
[ 152.402555][ T469] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 152.407423][ T10] ? ext4_read_folio+0x240/0x240
[ 152.417016][ T469] usb 5-1: Product: syz
[ 152.420008][ T10] do_writepages+0x385/0x620
[ 152.420034][ T10] ? __writepage+0x130/0x130
[ 152.420055][ T10] ? __update_load_avg_cfs_rq+0xb1/0x2f0
[ 152.424418][ T469] usb 5-1: Manufacturer: syz
[ 152.428459][ T10] ? __kasan_check_write+0x14/0x20
[ 152.433154][ T469] usb 5-1: SerialNumber: syz
[ 152.438412][ T10] __writeback_single_inode+0xdc/0xb80
[ 152.457507][ T10] writeback_sb_inodes+0xb32/0x1910
[ 152.462546][ T10] ? _raw_spin_lock+0xa4/0x1b0
[ 152.467141][ T10] ? queue_io+0x520/0x520
[ 152.471301][ T10] ? __writeback_inodes_wb+0x3f0/0x3f0
[ 152.476597][ T10] ? queue_io+0x3d0/0x520
[ 152.480779][ T10] ? memset+0x35/0x40
[ 152.484582][ T10] wb_writeback+0x3b9/0x9f0
[ 152.488927][ T10] ? inode_cgwb_move_to_attached+0x3c0/0x3c0
[ 152.494735][ T10] ? set_worker_desc+0x158/0x1c0
[ 152.499510][ T10] ? cpudl_cleanup+0x40/0x40
[ 152.503938][ T10] ? __kasan_check_write+0x14/0x20
[ 152.508889][ T10] wb_workfn+0x399/0x1030
[ 152.513059][ T10] ? inode_wait_for_writeback+0x280/0x280
[ 152.518613][ T10] ? _raw_spin_unlock+0x4c/0x70
[ 152.523376][ T10] ? finish_task_switch+0x167/0x7b0
[ 152.528415][ T10] ? __kasan_check_read+0x11/0x20
[ 152.533271][ T10] ? read_word_at_a_time+0x12/0x20
[ 152.538225][ T10] ? strscpy+0x9c/0x260
[ 152.542219][ T10] process_one_work+0x73d/0xcb0
[ 152.546913][ T10] worker_thread+0xa60/0x1260
[ 152.551419][ T10] kthread+0x26d/0x300
[ 152.555316][ T10] ? worker_clr_flags+0x1a0/0x1a0
[ 152.560176][ T10] ? kthread_blkcg+0xd0/0xd0
[ 152.564613][ T10] ret_from_fork+0x1f/0x30
[ 152.568860][ T10] </TASK>
[ 152.571718][ T10] Modules linked in:
[ 152.606002][ T10] ---[ end trace 0000000000000000 ]---
[ 152.611503][ T10] RIP: 0010:ext4_writepages+0x3fab/0x3fd0
[ 152.617164][ T10] Code: 35 80 ff 31 ff 89 de e8 b3 35 80 ff 45 84 f6 75 2a e8 19 33 80 ff 49 bc 00 00 00 00 00 fc ff df e9 6e f6 ff ff e8 05 33 80 ff <0f> 0b e8 fe 32 80 ff e8 a5 16 0b ff e9 46 c3 ff ff e8 ef 32 80 ff
[ 152.637448][ T10] RSP: 0018:ffffc900000a7000 EFLAGS: 00010293
[ 152.644284][ T10] RAX: ffffffff81f5710b RBX: 0000008000000000 RCX: ffff88810039a880
[ 152.652411][ T10] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000
[ 152.667632][ T10] RBP: ffffc900000a7410 R08: ffffffff81f5386b R09: ffffed1021eb6ac4
[ 152.677352][ T10] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881177a2000
[ 152.685505][ T10] R13: ffff88810f5b5758 R14: 0000008410000000 R15: ffffc900000a72e0
[ 152.693467][ T10] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 152.702812][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 152.709532][ T10] CR2: 00007f5554108ab8 CR3: 0000000110644000 CR4: 00000000003526b0
[ 152.717420][ T10] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 152.725786][ T10] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 152.733680][ T10] Kernel panic - not syncing: Fatal exception
[ 152.739827][ T10] Kernel Offset: disabled
[ 152.743959][ T10] Rebooting in 86400 seconds..