last executing test programs: 4.93910625s ago: executing program 2 (id=51): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(0x0, 0xa6) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x492492492492846, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x1, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x7}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r5, 0x0, 0x0}, 0x4b) connect$unix(r3, &(0x7f00000018c0)=@file={0x0, './file0\x00'}, 0x6e) syz_mount_image$erofs(&(0x7f0000000100), &(0x7f0000000400)='./file3\x00', 0x8, &(0x7f00000003c0)=ANY=[], 0x1, 0x1d2, &(0x7f0000000900)="$eJzslT3L01AUx//3JqaNiB/AxcEHfBxMk1TF5QG7ODkIvhQHwWJjqaZW2gy2INpP4O7m4OZXEHT1Q0h10UGd1PXKfUlyi0FLaW3hOT/ozS+5uSen58K5IAji0PLp48+5+HHwuQ7gGPZQM8+/OOU73Hr/Q/37k3dXLref3371vjYP/KqYQiz/fRfA25aDrFi7uHrPXK+DF34DHGeMt8EQGL8DjpvGEzDcMn7f8qF8Pwju9dMkuDtMu1JCOURyiOXQXMiPgWHG0LXyY9b8eDJ90EnTZLRB+Vf9vrU4Dqz87P0KoLMNrfpF4IiMN8FwzfhF1PLa6JLk8WcMJ9wyvrP4/38d0WrS9bD5iqxLPACrLQfYf9n7ShFYV0AHSvId3YlNWVLYn1M+8idfYQTuDqSqxd9IeT0pby7p/cunxFN9v6ZPLB3nuPWk7E/iJcNpqz+56kR5oY6aRjZ41BhPpmf7g04v6SUP47h5ITwXhufjhmpEevxL//NVfzpaxq88kyQe8/C4k2WjSI/FfazHqo7L8QyYceyfAvDaqYxbt5yZH1dXafvViwiCILbMSTDVk1VfzsWcJsWEEPHVLedJEARBEARBEARBEMTq/A4AAP//yx1a3A==") lgetxattr(&(0x7f0000000000)='./file3\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) getresuid(&(0x7f00000065c0), 0x0, &(0x7f0000006640)) statx(0xffffffffffffff9c, &(0x7f0000006680)='./file1\x00', 0x1000, 0x20, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x1c}], 0x1}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) 4.912547741s ago: executing program 0 (id=52): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setpriority(0x2, 0x0, 0xc671) 4.706510493s ago: executing program 4 (id=53): r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) msync(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) flock(0xffffffffffffffff, 0x6) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x4000000000002, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, 0x0, 0x4000) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) setsockopt$inet6_int(r4, 0x29, 0x13, 0x0, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) 4.301049335s ago: executing program 0 (id=54): r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000200)={@mcast1}, 0x14) 4.300215385s ago: executing program 1 (id=55): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000000c0)={0x7ff, {{0xa, 0x4e23, 0x5, @local, 0xffffffff}}, {{0xa, 0x4ea3, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80000001}}}, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000040)={0xff, 0x4f}, 0x2) pipe(&(0x7f0000000200)) memfd_create(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) close(r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r4, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 4.188644151s ago: executing program 0 (id=56): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000000c0)={[{@mblk_io_submit}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000020c0)=0x1) write$binfmt_script(r0, &(0x7f0000000380), 0x208e24b) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 3.4663484s ago: executing program 2 (id=57): syz_io_uring_setup(0x3d1a, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x1}, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="980000001800010a00000000000000000400000008000c00000000000c0016"], 0x98}}, 0x0) 2.976400457s ago: executing program 1 (id=59): r0 = syz_io_uring_setup(0x2633, &(0x7f00000006c0)={0x0, 0x4}, &(0x7f0000000740), &(0x7f0000000780)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) r1 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[r1]}, 0x1) 2.430643367s ago: executing program 4 (id=60): fsopen(&(0x7f0000000000)='proc\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001100010100000800fcdbdf2500000000", @ANYRES32=r3], 0x54}}, 0x20008040) 2.315990033s ago: executing program 2 (id=61): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.719259746s ago: executing program 2 (id=64): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0xb0, 0x64, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "197d25ab5c6cdbf01fe39863eb62f49000c3d6942a5e686ea59618aa7c984968", "12d234da810a504a6b0a4166eccca2e766c504479ebb08d334b334ee3d90b5ae5e1f8578858cec6b7f0937827e16b047", "3cec384575ba47e50f91fcc0eafcc824113d3c52b65c89357f4f3052", {"bd88a81b8301690b4baa4a55f96f03f3", "cc13d82e7d8ecbb5d90a4000d1d2d556"}}}}}}}, 0x0) 1.718947096s ago: executing program 1 (id=65): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e000000000000000300000001000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_cache\x00') socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'veth0_macvtap\x00', 0x0}) bind$packet(r4, &(0x7f0000000140)={0x11, 0x19, r5, 0x1, 0x49, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, 0x14) sendmmsg$sock(r4, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20020000) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000002030102000000000000000000000000090002000000004702000000080003400000"], 0x30}}, 0x0) 1.672135758s ago: executing program 2 (id=66): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$eJzs3MFqE18Ux/Hzb/pv0pQ2EURQUA+60c3QxgfQIC2IAaU2RV0IUzvRkDEpM0MlIjYbcetzFJfuBPUFuhE37t0VQXDThTjiTKZN2rSmbdLE9PuBck9y7o+5bdNyUuis3339pFRwjYLpyVBCZUikJhsi6T9V3X/1dSioR6RRTS6P/fhy9s69+zezudz0rOpMdu5KRlUnzr9/+vzNhY/e2PzbiXdxWUs/WP+e+bp2au30+q+5x0VXi66WK56aulCpeOaCbeli0S0Zqrdty3QtLZZdy2nqF+zK0lJVzfLieHLJsVxXzXJVS1ZVvYp6TlXNR2axrIZh6HhSjrfhNvbkV2dnzeyubT/W0ROh60ZbPek42VrrZn71CM4EAAD6zN7zfzjr7z7/5+bDtcPzvwjzf5fUmh79Zf7HQHCcrJms//w2Y/4HAAAAAAAAAAAAAAAAAAAAAOBfsOH7Kd/3U9EafcRFJCEi0eNenxPdccDv/9UeHRcd1vCPewkR+9VyfjkfrmE/W5Ci2GLJpKTkZ/B6qAvrmRu56UkNpOWDvVLPryznYxKP8pF0q/y5E1NhXpvz/0uy8foZScnJ1tfPtMyPyKWLDXlDUvLpoVTElsXgdb2VfzGlev1Wblt+NNgHAAAAAMAgMHTTjvfvQT/YkJCd/TC/j78PbHt/PSxn2rlFJQAAAAAAODS3+qxk2rblHKCIi8gh4oNaxKQvjrGtuCYifXCMoyoSIhI+oweJf9uMt5Xy29gzLCI9/7Lso+j1byYAAAAAnbY19O8j9PllF08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDx0+79wKL9O1pRY494w+ViR/4JAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH3kdwAAAP//R8IgDA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x100) getdents64(r0, &(0x7f0000000080)=""/29, 0x1d) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x29) 1.295253489s ago: executing program 4 (id=67): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/net\x00') r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newlink={0x28, 0x10, 0x437, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x4048b}, [@IFLA_NET_NS_FD={0x8, 0x1c, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x3adb7705637a67d}, 0x0) 1.294867809s ago: executing program 1 (id=68): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000880)=ANY=[@ANYBLOB="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"/344], 0x3, 0x377, &(0x7f00000002c0)="$eJzs3UFom+UbAPAn/dKm/bP924MgCsKnN0HLNgXRix2jg2EuU8LUgxjcptLUwYrB7tCsXsSj4FFP3jzowcNuXgRFdvPg1QkyFQ+628CxT77kS/KlSWqZdLP4+x3Cs/d9nvd9v+Rl+ZqSt6+uxNrZ2Th/48b1mJ+vRHXlxErcrMRSJNF3OcbNTWgDAA6Gm1kWf2Q9EV/upaSy/6sCAPZT9/3/9cOllne/3i0/8+4PAAde8fP/Qrkt2ZEzP634wr4tCwDYR6Of/0fEI2MppV/1V8fuDQCAg+eFl15+7ng94vk0nY9Yf6/daDfimWH/8fPxZrTiXByJxbgV0btRyB8q3ceTp+qrR9I07cTPS9HIK9qNiPVOu9G7UziedOtrcTQWY6moL+42sixLTn5RXz2adkXE5U53/livtBuzsVDM/8P/4lwcizTuG6uPOFVfPZYWAzTW+/WzEdvDzy3y9S/HYnz3WlyIVpyNvLZ/W1Nf3Tqapiey+qHKsL7TbtS6eT1TPwEBAAAAAAAAAAAAAAAAAAAAAIA7spwOLA3Oz8mG5/csL0/o756P06svzgfa7p0PlNWyyLLf33m88X4SI+cD7Tifp9NuVGPm3l46AAAAAAAAAAAAAAAAAAAA/GtsbM5Fs9U6d3Fj89JaOehc3NiciYi85a1vP/tqIUZzFooBRqtGgmqRUupKh1VZ0k/OkpGcIkjyySvVXsunVwYrLufUBlcxcRm16V2t1uGHf/po2PJQ0h/59jAniYnXdSnZsYxysP7/3pKmPy27BMf+JudalmXTyrdeGa+KSkR16lLvMMjy4JvrbzzwxEZ/E2Q9jz62eObah5/8utZs5TPnWq25ixu3srVm8e/Jm216kJT2T6XYbJXyTqg2n7x9+tCUkbdHW5rJ97+9+OAHV4uWmd1fpuzM1WHL2xNykt6kn+/smusF+TIHXc/mQf4cjY8zO2HzTwqein/0wt3/8UrzytaPv+y1qvSfhIM6AAAAAAAAAAAAAAAAAADgrih9V7xQfNl3dreqp0/v/8oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4O4Z/v3/QRAz2zta9hb82Yl+y5nod9XyAWOuNOPSPbxaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+q/4KAAD//1UBZGs=") r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a00) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000780)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f407000000000000008dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6]}}) 1.294113029s ago: executing program 4 (id=69): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mem_exclusive\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x4) 1.288148729s ago: executing program 0 (id=70): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x5) syz_emit_ethernet(0x56, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x20, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0xfffc, {[@timestamp={0x8, 0xa, 0x2b24}, @generic={0x8, 0x2}]}}}}}}}}, 0x0) 1.210328304s ago: executing program 0 (id=71): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) 1.059187262s ago: executing program 4 (id=72): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@security={'security\x00', 0xe, 0x2, 0x2b8, 0xffffffff, 0xb0, 0x220, 0xb0, 0xffffffff, 0xffffffff, 0x220, 0x220, 0x220, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x2, 0x2a, "12db083eef283776f6b360d23dcb6de4a1cd49631d2fccbaf51ce073903b"}}}, {{@ip={@multicast1, @private, 0x0, 0x0, 'veth1_to_team\x00', 'veth0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}}, {{@ip={@local, @private, 0x0, 0x0, 'team0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xa6, 0x3, 0x46, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) 800.365247ms ago: executing program 4 (id=74): unshare(0x400) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='mountinfo\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ppoll(&(0x7f0000000280)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000540)='.\x00', 0x2) unshare(0x40020000) keyctl$update(0x19, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 727.11215ms ago: executing program 0 (id=75): syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010900b60201020c2402060602040c0032a304090401000001020000090401010101020000072401ff3802100c240201090308070d173b06090501fc73b1ca090607250183020c00090402000001020000090402010101020000072401018105000b2402010703b4018c703c0905820940"], 0x0) 677.952723ms ago: executing program 3 (id=77): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) listen(r0, 0x0) listen(r1, 0x0) 676.279053ms ago: executing program 1 (id=78): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e000000000000000300000001000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_cache\x00') socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'veth0_macvtap\x00', 0x0}) bind$packet(r4, &(0x7f0000000140)={0x11, 0x19, r5, 0x1, 0x49, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, 0x14) sendmmsg$sock(r4, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20020000) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000002030102000000000000000000000000090002000000004702000000080003400000"], 0x30}}, 0x0) 595.247798ms ago: executing program 3 (id=79): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2022) 589.500028ms ago: executing program 3 (id=80): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000240)={'syz0\x00', {0xf, 0x7, 0x7, 0x1001}, 0x4a, [0x5f11bec3, 0x3, 0x5, 0x40, 0x0, 0x2, 0x0, 0x7d, 0x13, 0x5, 0x0, 0x6, 0x0, 0x0, 0x4, 0x0, 0x1a4, 0xfffff605, 0x3, 0x0, 0x46e9, 0x7ff, 0xe2b, 0x7, 0x1000, 0x11e, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x9, 0x4, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff6, 0x0, 0xf681, 0x0, 0x1ab9, 0x0, 0x3, 0x0, 0xfffffffb, 0x1c15d73a], [0x51c, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x5, 0x0, 0x0, 0x20000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x200, 0x2, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x4, 0x10001, 0x75, 0x0, 0x4, 0x3, 0xd, 0x80000000, 0x0, 0x0, 0x9, 0x0, 0x9, 0x0, 0x200000ff, 0x0, 0x10001, 0x3, 0x0, 0x7, 0xfffffffb, 0xbc, 0x0, 0xffff8001, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x441238ca, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x0, 0x0, 0x3, 0x9f5, 0x0, 0xa02, 0x1c75, 0xf51, 0x0, 0x40, 0x0, 0xc7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0x0, 0xc, 0x0, 0x200, 0xcc0, 0x401, 0x6, 0x63, 0x0, 0x0, 0x0, 0x6, 0x921, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x15960318, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6574, 0x0, 0x0, 0xcd55, 0xfb], [0xfffffffc, 0x2006, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0x0, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x400, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x194e, 0x0, 0xe793, 0xddda, 0x3, 0x0, 0x80000001, 0x3, 0x0, 0x0, 0x101, 0x0, 0x4, 0x0, 0x40, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x800, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x45d, 0x4, 0x0, 0xfff, 0xb6, 0x9, 0xb]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) 562.662909ms ago: executing program 1 (id=81): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x38, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x6, 0x24, [{0xc}, {0x2, 0x1}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}]]}, 0x38}}, 0x0) 534.698271ms ago: executing program 32 (id=81): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x38, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x6, 0x24, [{0xc}, {0x2, 0x1}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}]]}, 0x38}}, 0x0) 487.550953ms ago: executing program 3 (id=83): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4400, &(0x7f0000000040), 0x1, 0xbe2, &(0x7f0000001b40)="$eJzs3N9rW9cdAPDvvZIVJ/EmZ4yx7GUeYyQwptgZDksYLBkZe9nDYHsdxDhyMFZ+YHtkdvwgb//A2AZ7G+xlsDa09KF5zktL+9qXNnltaaEQihu3UErrcvXDVm3JcRIp13U+HzjWOfdc6Xy/upbuOUK6ATy3xrI/acTxiLiURJRb29OIKDVqwxH15n7rayvTn66tTCexsfGHj5JIIuLh2sp0+7GS1u3RVmM4It76dRLf+dvOcReWluemarXqfKt9avHqjVMLS8s/m706daV6pXpt4swvJk9Pnhk/O7lL9KXHyvWzd8/f+eRHv32//vkLX9z++J//S+J8jLT6OvPol7EY23xOOhUjYqrfg+Wk0MqnM8+k+Ig7pQMOCgCAntKOOdz3ohyF2Jq8leO1t3MNDgAAAOiLjULExpMptB8CAAAA2O+SGLKIBwAAgAOt/T2Ah2sr0+2S37cRnr0HFyJitJn/eqs0e4pRb9wONz4fOfIwic6ftSbNuz21sYh47/7Zl7MSA/od8m7qqxHx/W7HP2nkP9r4FffO/NOIGO/D+GPb2t+k/M/3Yfwnzz/7D6z1IQIAnkd3LzRPZDvPf+nm/Ce6nP+KXc5dTyLv8397/re+Y/63lX+hx/zv93sc49b//3OzV1+W/y/v/OaldsnGz26fKqnH8GA14gfFbvknm/knPfK/tMcxyl/erPbqyzv/jf9GnIju+bclu1+f6NTMbK063vzbdYzVNydf7DV+3vlnx/9Ij/zb13/qdfxv7HGMP128+MqOjfe3ql/PP7ZdTSj9sJT8sVFrX+3pL1OLi/MTEaXkdzu3n949lvY+7cfI8j/5491f/93yz94T6h3Xn1ptrQmyff+6bcxf3b71aq942uu/PI//5R7HvzP/N4o7j//f9zjGT17/x8n4d/e+zvVvVrLx22thAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IkkrSyWU/TSiXiaER8N46ktesLiz+duf7na5ezvojRGEpnZmvV8YgoN9tJ1p5o1Lfap7e1fx4RxyLiX+XDjXZl+nrtct7JAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsOloRIxEklYiIo2I9XKaViodOxRyDA4AAADon9G8AwAAAAAGruv634cCAAAAcKBY6gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBgx354914SEfVzhxslU2r1DeUaGTBoad4BALkp5B0AkJti3gEAuXnMNb7pAhxAySP6h3v2HOp7LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsXyeO372XRET93OFGyZRafUO5RgYMWpp3AEBuCrt1Fp9dHMCz5yUOzy9rfCB5RP/w5j4Xt/UcGlhMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOw/I42SpJWIKLW2VSoR34qI0RhKZmZr1fGI+HZEvFMeOpS1J3KOGQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP5bWFqem6rVqvNZJY1WZXOLylYlaT5j9VzD+CD2ybNxACql2Bdh7NNK3u9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADkYWFpeW6qVqvOL+QdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJC3haXlualarTo/wEreOQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkJ+vAgAA//8YKfyV") mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x23664b9, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 412.243477ms ago: executing program 2 (id=84): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@window={0x3, 0x4, 0x3}, @sack_perm, @window={0x3, 0x0, 0x8}, @mss, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x0, 0x7}, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 151.303031ms ago: executing program 3 (id=85): mlockall(0x7) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7) 0s ago: executing program 3 (id=86): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfa, 0x56b, &(0x7f0000000f00)="$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") open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0x1, 0xd000001}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.80' (ED25519) to the list of known hosts. [ 24.672580][ T23] audit: type=1400 audit(1739204795.540:66): avc: denied { mounton } for pid=345 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.674136][ T345] cgroup1: Unknown subsys name 'net' [ 24.695132][ T23] audit: type=1400 audit(1739204795.540:67): avc: denied { mount } for pid=345 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.700449][ T345] cgroup1: Unknown subsys name 'net_prio' [ 24.728005][ T345] cgroup1: Unknown subsys name 'devices' [ 24.734309][ T23] audit: type=1400 audit(1739204795.600:68): avc: denied { unmount } for pid=345 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.904691][ T345] cgroup1: Unknown subsys name 'hugetlb' [ 24.910432][ T345] cgroup1: Unknown subsys name 'rlimit' [ 25.081387][ T23] audit: type=1400 audit(1739204795.940:69): avc: denied { setattr } for pid=345 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=10858 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.104613][ T23] audit: type=1400 audit(1739204795.940:70): avc: denied { mounton } for pid=345 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.111441][ T349] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.129327][ T23] audit: type=1400 audit(1739204795.940:71): avc: denied { mount } for pid=345 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.160781][ T23] audit: type=1400 audit(1739204796.010:72): avc: denied { read } for pid=146 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 25.182781][ T23] audit: type=1400 audit(1739204796.010:73): avc: denied { relabelto } for pid=349 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 25.208223][ T23] audit: type=1400 audit(1739204796.010:74): avc: denied { write } for pid=349 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.235344][ T23] audit: type=1400 audit(1739204796.100:75): avc: denied { read } for pid=345 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.264744][ T345] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.856410][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.863854][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.871267][ T356] device bridge_slave_0 entered promiscuous mode [ 25.879724][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.886616][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.893992][ T356] device bridge_slave_1 entered promiscuous mode [ 25.923479][ T358] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.930334][ T358] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.937814][ T358] device bridge_slave_0 entered promiscuous mode [ 25.944776][ T358] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.951604][ T358] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.959063][ T358] device bridge_slave_1 entered promiscuous mode [ 26.016713][ T359] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.023707][ T359] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.031068][ T359] device bridge_slave_0 entered promiscuous mode [ 26.041225][ T359] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.048210][ T359] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.055479][ T359] device bridge_slave_1 entered promiscuous mode [ 26.096974][ T360] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.104056][ T360] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.111244][ T360] device bridge_slave_0 entered promiscuous mode [ 26.121476][ T360] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.128366][ T360] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.135793][ T360] device bridge_slave_1 entered promiscuous mode [ 26.192871][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.199802][ T361] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.207606][ T361] device bridge_slave_0 entered promiscuous mode [ 26.232272][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.239287][ T361] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.246752][ T361] device bridge_slave_1 entered promiscuous mode [ 26.343080][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.349927][ T356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.357109][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.363954][ T356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.406169][ T359] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.413035][ T359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.420112][ T359] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.427018][ T359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.435590][ T358] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.442440][ T358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.449528][ T358] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.456335][ T358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.485312][ T360] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.492174][ T360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.499494][ T360] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.506239][ T360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.525216][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.532166][ T361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.539272][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.546092][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.596520][ T102] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.604189][ T102] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.611137][ T102] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.618557][ T102] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.625719][ T102] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.632851][ T102] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.639792][ T102] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.646947][ T102] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.654092][ T102] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.661083][ T102] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.668690][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.675971][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.698031][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.705411][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.713595][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.722427][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.730466][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.737299][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.748162][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.769483][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.777896][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.784751][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.792511][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.800445][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.807286][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.814477][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.822516][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.829352][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.836557][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.844564][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.851390][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.858693][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.866724][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.873572][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.880867][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.888841][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.895685][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.902974][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.910971][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.917819][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.928030][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.936411][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.944522][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.951470][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.972034][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.980461][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.988555][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.995389][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.004668][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.013274][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.048565][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.056644][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.065896][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.074141][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.081974][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.089782][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.097801][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.105804][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.113774][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.121556][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.129530][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.137681][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.145587][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.153562][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.161264][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.169323][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.192200][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.200202][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.226465][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.234701][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.243535][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.251651][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.260028][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.268175][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.276111][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.284592][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.292964][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.301096][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.323623][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.332801][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.340939][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.349179][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.357249][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.365082][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.376131][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.384265][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.410019][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.418121][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.426343][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.434404][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.442685][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.451149][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.459385][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.489079][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.497932][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.506224][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.514921][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.523777][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.532278][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.540257][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.548739][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.557041][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.574637][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.582943][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.593084][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.601243][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.610301][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.618901][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.639610][ T359] request_module fs-gadgetfs succeeded, but still no fs? [ 27.651562][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.660204][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.669058][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.677929][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.689288][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.697690][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.706195][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.714497][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.857674][ T388] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.894563][ T392] EXT4-fs (loop2): Unrecognized mount option "dax=always" or missing value [ 28.460110][ T401] syz.4.5 (401) used greatest stack depth: 22712 bytes left [ 28.553582][ T380] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.841881][ T380] usb 4-1: Using ep0 maxpacket: 16 [ 28.971977][ T380] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.987997][ T423] EXT4-fs (loop0): Ignoring removed nobh option [ 28.996330][ T423] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,stripe=0x0000000000010000,dioread_nolock,,errors=continue [ 29.012054][ T380] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.027919][ T380] usb 4-1: New USB device found, idVendor=056a, idProduct=00bc, bcdDevice= 0.00 [ 29.042430][ T423] syz.0.15 (423) used greatest stack depth: 22584 bytes left [ 29.050761][ T380] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.065977][ T380] usb 4-1: config 0 descriptor?? [ 29.173309][ T432] ====================================================== [ 29.173309][ T432] WARNING: the mand mount option is being deprecated and [ 29.173309][ T432] will be removed in v5.15! [ 29.173309][ T432] ====================================================== [ 29.234041][ T432] EXT4-fs (loop4): Invalid want_extra_isize 1779 [ 29.342861][ T438] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 29.352264][ T438] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 29.359391][ T438] EXT4-fs (loop4): can't mount with dioread_nolock if block size != PAGE_SIZE [ 29.471817][ T348] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 29.585858][ T380] wacom 0003:056A:00BC.0001: unknown main item tag 0x2 [ 29.593559][ T380] wacom 0003:056A:00BC.0001: Unknown device_type for 'HID 056a:00bc'. Assuming pen. [ 29.603856][ T380] wacom 0003:056A:00BC.0001: hidraw0: USB HID v0.03 Device [HID 056a:00bc] on usb-dummy_hcd.3-1/input0 [ 29.616227][ T380] input: Wacom Intuos4 WL Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00BC.0001/input/input5 [ 29.803218][ T380] usb 4-1: USB disconnect, device number 2 [ 29.901591][ T23] kauditd_printk_skb: 61 callbacks suppressed [ 29.901599][ T23] audit: type=1400 audit(1739204800.720:137): avc: denied { unmount } for pid=360 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 29.951869][ T348] usb 1-1: Using ep0 maxpacket: 16 [ 29.972779][ T23] audit: type=1400 audit(1739204800.840:138): avc: denied { mounton } for pid=449 comm="syz.1.23" path="/4/bus" dev="tmpfs" ino=13063 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 29.974447][ T450] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 29.974447][ T450] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 29.974447][ T450] [ 29.994681][ T379] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 30.034198][ T450] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,noblock_validity,norecovery,debug_want_extra_isize=0x0000000000000080,minixdf,nodelalloc,acl,noacl,,errors=continue [ 30.062533][ T23] audit: type=1400 audit(1739204800.930:139): avc: denied { append } for pid=449 comm="syz.1.23" path="/4/bus/cpuset.effective_cpus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 30.086188][ T23] audit: type=1400 audit(1739204800.930:140): avc: denied { ioctl } for pid=449 comm="syz.1.23" path="/4/bus/cpu.stat" dev="loop1" ino=19 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 30.109957][ T348] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.120083][ T348] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 30.131000][ T348] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 30.151895][ T23] audit: type=1400 audit(1739204801.010:141): avc: denied { mounton } for pid=454 comm="syz.1.24" path="/proc/16/task" dev="proc" ino=13667 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 30.252067][ T379] usb 5-1: Using ep0 maxpacket: 8 [ 30.292217][ T348] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 30.301707][ T348] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.309861][ T348] usb 1-1: Product: syz [ 30.313934][ T348] usb 1-1: Manufacturer: syz [ 30.318342][ T348] usb 1-1: SerialNumber: syz [ 30.366546][ T23] audit: type=1400 audit(1739204801.230:142): avc: denied { create } for pid=463 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 30.371954][ T379] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.392916][ T23] audit: type=1400 audit(1739204801.230:143): avc: denied { write } for pid=463 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 30.398959][ T379] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 30.437312][ T466] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 30.451224][ T466] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 30.460749][ T466] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 30.468917][ T466] System zones: 1-12 [ 30.479160][ T466] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2227: inode #15: comm syz.3.29: corrupted in-inode xattr [ 30.481675][ T471] netlink: 'syz.2.30': attribute type 3 has an invalid length. [ 30.491297][ T466] EXT4-fs error (device loop3): ext4_orphan_get:1242: comm syz.3.29: couldn't read orphan inode 15 (err -117) [ 30.498340][ T471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.30'. [ 30.510560][ T379] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 30.518852][ T471] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 30.527887][ T379] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 30.551238][ T379] usb 5-1: SerialNumber: syz [ 30.555701][ T466] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,barrier,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000000400,,errors=continue [ 30.596371][ T23] audit: type=1400 audit(1739204801.460:144): avc: denied { create } for pid=465 comm="syz.3.29" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 30.599841][ T471] syz.2.30 (471) used greatest stack depth: 19128 bytes left [ 30.645820][ T379] cdc_acm 5-1:1.0: skipping garbage [ 30.651081][ T379] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 30.659975][ T379] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 30.663988][ T23] audit: type=1400 audit(1739204801.460:145): avc: denied { link } for pid=465 comm="syz.3.29" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 30.668195][ T348] usb 1-1: USB disconnect, device number 2 [ 30.714828][ T379] cdc_acm: probe of 5-1:1.0 failed with error -22 [ 30.726714][ T23] audit: type=1400 audit(1739204801.510:146): avc: denied { create } for pid=473 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 30.788347][ T482] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support! [ 30.788628][ T488] capability: warning: `syz.3.35' uses deprecated v2 capabilities in a way that may be insecure [ 30.826924][ T482] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 30.846331][ T482] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 30.881543][ T404] usb 5-1: USB disconnect, device number 2 [ 31.317394][ T506] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 31.327050][ T506] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 31.394156][ T506] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 31.407813][ T506] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 31.418460][ T506] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e000e01c, mo2=0000] [ 31.427467][ T506] EXT4-fs (loop2): failed to initialize system zone (-117) [ 31.435240][ T506] EXT4-fs (loop2): mount failed [ 31.695753][ T521] cgroup1: No subsys list or none specified [ 31.826453][ T525] EXT4-fs (loop3): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [ 32.280305][ T538] erofs: (device loop2): mounted with opts: , root inode @ nid 36. [ 34.402753][ T563] netlink: 52 bytes leftover after parsing attributes in process `syz.4.60'. [ 34.469306][ T553] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 34.692403][ T553] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 35.006805][ T23] kauditd_printk_skb: 18 callbacks suppressed [ 35.006817][ T23] audit: type=1326 audit(1739204805.870:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=574 comm="syz.3.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc571b56de9 code=0x7fc00000 [ 35.433471][ T585] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 35.445491][ T585] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 35.457113][ T23] audit: type=1400 audit(1739204806.320:166): avc: denied { mount } for pid=584 comm="syz.2.66" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 35.482610][ T593] cgroup: syz.4.69 (593) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 35.510631][ T590] FAT-fs (loop1): Directory bread(block 64) failed [ 35.527309][ T590] FAT-fs (loop1): Directory bread(block 65) failed [ 35.536009][ T593] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 35.539886][ T590] FAT-fs (loop1): Directory bread(block 66) failed [ 35.555924][ T590] FAT-fs (loop1): Directory bread(block 67) failed [ 35.562636][ T590] FAT-fs (loop1): Directory bread(block 68) failed [ 35.569232][ T590] FAT-fs (loop1): Directory bread(block 69) failed [ 35.576951][ T590] FAT-fs (loop1): Directory bread(block 70) failed [ 35.583657][ T590] FAT-fs (loop1): Directory bread(block 71) failed [ 35.590258][ T590] FAT-fs (loop1): Directory bread(block 72) failed [ 35.597565][ T590] FAT-fs (loop1): Directory bread(block 73) failed [ 35.618752][ T597] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 35.629045][ T23] audit: type=1400 audit(1739204806.490:167): avc: denied { create } for pid=601 comm="syz.4.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 35.655085][ T23] audit: type=1400 audit(1739204806.510:168): avc: denied { setopt } for pid=601 comm="syz.4.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 35.916584][ T23] audit: type=1326 audit(1739204806.520:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=574 comm="syz.3.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc571b4dda7 code=0x7fc00000 [ 36.016076][ T590] attempt to access beyond end of device [ 36.016076][ T590] loop1: rw=2049, want=1232, limit=256 [ 36.044243][ T360] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 36.044251][ T23] audit: type=1400 audit(1739204806.900:170): avc: denied { unmount } for pid=360 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 36.071245][ T360] FAT-fs (loop1): Filesystem has been set read-only [ 36.283574][ T625] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.290489][ T625] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.298462][ T13] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 36.299631][ T625] device bridge_slave_0 entered promiscuous mode [ 36.306536][ T23] audit: type=1400 audit(1739204807.160:171): avc: denied { append } for pid=146 comm="syslogd" name="messages" dev="tmpfs" ino=300 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.334684][ T23] audit: type=1400 audit(1739204807.160:172): avc: denied { open } for pid=146 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=300 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.342196][ T625] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.364301][ T23] audit: type=1400 audit(1739204807.160:173): avc: denied { getattr } for pid=146 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=300 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.387032][ T625] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.394644][ T625] device bridge_slave_1 entered promiscuous mode [ 36.448969][ T630] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 36.455342][ T625] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.464547][ T625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.467042][ T23] audit: type=1400 audit(1739204807.330:174): avc: denied { remount } for pid=629 comm="syz.3.83" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.471637][ T625] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.491285][ T630] EXT4-fs (loop3): re-mounted. Opts: (null) [ 36.497348][ T625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.524116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.531597][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.538959][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.550242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.558842][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.565701][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.574830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.583225][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.590072][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.606460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.627432][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.651991][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.665649][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.682196][ T13] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 36.690893][ T13] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.696583][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.708837][ T13] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 36.725389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.731779][ T13] usb 1-1: config 1 has no interface number 1 [ 36.739296][ T13] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 36.742624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.752276][ T13] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 36.760572][ T640] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 36.798885][ T640] ------------[ cut here ]------------ [ 36.804184][ T640] kernel BUG at fs/ext4/ext4.h:2984! [ 36.810019][ T640] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 36.815906][ T640] CPU: 1 PID: 640 Comm: syz.3.86 Not tainted 5.4.289-syzkaller-00030-gcb850525fc3e #0 [ 36.825270][ T640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 36.835177][ T640] RIP: 0010:ext4_trim_fs+0x1ec8/0x1ee0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 36.840460][ T640] Code: 80 e1 07 80 c1 03 38 c1 0f 8c fd e6 ff ff 48 8d bc 24 10 02 00 00 e8 c7 a5 c8 ff e9 eb e6 ff ff e8 2d 5f 6f ff e8 98 bb 98 ff <0f> 0b e8 91 bb 98 ff 0f 0b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f [ 36.859909][ T640] RSP: 0018:ffff8881cc9bf4e0 EFLAGS: 00010283 [ 36.865813][ T640] RAX: ffffffff81cb8ed8 RBX: 0000000000000001 RCX: 0000000000080000 [ 36.873630][ T640] RDX: ffffc90001142000 RSI: 00000000000004f1 RDI: 00000000000004f2 [ 36.881435][ T640] RBP: ffff8881cc9bf770 R08: ffffffff81cb77f4 R09: 0000000000000003 [ 36.889255][ T640] R10: ffffffffffffffff R11: dffffc0000000001 R12: dffffc0000000000 [ 36.897059][ T640] R13: 0000000000001fff R14: ffff8881e3acb000 R15: 0000000000000001 [ 36.904877][ T640] FS: 00007fc5701c16c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 36.913630][ T640] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.920046][ T640] CR2: 0000400000000401 CR3: 00000001e3b19000 CR4: 00000000003406a0 [ 36.927861][ T640] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.935672][ T640] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.943479][ T640] Call Trace: [ 36.946622][ T640] ? __die+0xb4/0x100 [ 36.950431][ T640] ? die+0x26/0x50 [ 36.954020][ T640] ? do_trap+0x1e7/0x340 [ 36.958066][ T640] ? ext4_trim_fs+0x1ec8/0x1ee0 [ 36.962758][ T640] ? ext4_trim_fs+0x1ec8/0x1ee0 [ 36.967442][ T640] ? do_invalid_op+0xfb/0x110 [ 36.971954][ T640] ? ext4_trim_fs+0x1ec8/0x1ee0 [ 36.976642][ T640] ? invalid_op+0x1e/0x30 [ 36.980810][ T640] ? ext4_trim_fs+0x7e4/0x1ee0 [ 36.985424][ T640] ? ext4_trim_fs+0x1ec8/0x1ee0 [ 36.990108][ T640] ? ext4_trim_fs+0x1ec8/0x1ee0 [ 36.994796][ T640] ? ext4_group_add_blocks+0xde0/0xde0 [ 37.000098][ T640] ? cap_capable+0x1b1/0x250 [ 37.004513][ T640] ext4_ioctl+0x2168/0x3ff0 [ 37.008853][ T640] ? preempt_schedule+0xd9/0xe0 [ 37.013534][ T640] ? preempt_schedule+0xd9/0xe0 [ 37.018220][ T640] ? schedule_preempt_disabled+0x20/0x20 [ 37.023688][ T640] ? asan.module_dtor+0x20/0x20 [ 37.028374][ T640] ? ___preempt_schedule+0x16/0x20 [ 37.033322][ T640] ? try_to_wake_up+0x9d3/0x14f0 [ 37.038098][ T640] ? cpus_share_cache+0x110/0x110 [ 37.042958][ T640] ? plist_check_list+0x20d/0x220 [ 37.047817][ T640] ? plist_del+0x3bf/0x3e0 [ 37.052070][ T640] ? _raw_spin_trylock_bh+0x190/0x190 [ 37.057282][ T640] ? avc_has_extended_perms+0xb03/0x1120 [ 37.062752][ T640] ? avc_flush+0x1f0/0x1f0 [ 37.067001][ T640] ? do_futex+0x13fe/0x19f0 [ 37.071341][ T640] ? asan.module_dtor+0x20/0x20 [ 37.076029][ T640] do_vfs_ioctl+0x742/0x1720 [ 37.080455][ T640] ? ioctl_preallocate+0x250/0x250 [ 37.085413][ T640] ? __fget+0x407/0x490 [ 37.089400][ T640] ? fget_many+0x20/0x20 [ 37.093489][ T640] ? switch_fpu_return+0x1d4/0x410 [ 37.098425][ T640] ? security_file_ioctl+0x7d/0xa0 [ 37.103372][ T640] __x64_sys_ioctl+0xd4/0x110 [ 37.107881][ T640] do_syscall_64+0xca/0x1c0 [ 37.112223][ T640] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 37.117952][ T640] RIP: 0033:0x7fc571b56de9 [ 37.122204][ T640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.141907][ T640] RSP: 002b:00007fc5701c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 37.150175][ T640] RAX: ffffffffffffffda RBX: 00007fc571d6ffa0 RCX: 00007fc571b56de9 [ 37.157975][ T640] RDX: 0000400000000080 RSI: 00000000c0185879 RDI: 0000000000000006 [ 37.165931][ T640] RBP: 00007fc571bd82a0 R08: 0000000000000000 R09: 0000000000000000 [ 37.173738][ T640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.181537][ T640] R13: 0000000000000000 R14: 00007fc571d6ffa0 R15: 00007ffc385f9228 [ 37.189349][ T640] Modules linked in: [ 37.197026][ T640] ---[ end trace 3a4e20e05a0f77a0 ]--- [ 37.202548][ T640] RIP: 0010:ext4_trim_fs+0x1ec8/0x1ee0 [ 37.207822][ T640] Code: 80 e1 07 80 c1 03 38 c1 0f 8c fd e6 ff ff 48 8d bc 24 10 02 00 00 e8 c7 a5 c8 ff e9 eb e6 ff ff e8 2d 5f 6f ff e8 98 bb 98 ff <0f> 0b e8 91 bb 98 ff 0f 0b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f [ 37.227752][ T640] RSP: 0018:ffff8881cc9bf4e0 EFLAGS: 00010283 [ 37.233831][ T640] RAX: ffffffff81cb8ed8 RBX: 0000000000000001 RCX: 0000000000080000 [ 37.241631][ T640] RDX: ffffc90001142000 RSI: 00000000000004f1 RDI: 00000000000004f2 [ 37.249625][ T640] RBP: ffff8881cc9bf770 R08: ffffffff81cb77f4 R09: 0000000000000003 [ 37.257609][ T640] R10: ffffffffffffffff R11: dffffc0000000001 R12: dffffc0000000000 [ 37.267930][ T640] R13: 0000000000001fff R14: ffff8881e3acb000 R15: 0000000000000001 [ 37.276149][ T640] FS: 00007fc5701c16c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 37.285278][ T640] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.291673][ T640] CR2: 0000400000000401 CR3: 00000001e3b19000 CR4: 00000000003406a0 [ 37.292015][ T390] device bridge_slave_1 left promiscuous mode [ 37.321884][ T390] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.322021][ T640] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.336883][ T390] device bridge_slave_0 left promiscuous mode [ 37.357361][ T390] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.361825][ T640] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.372536][ T640] Kernel panic - not syncing: Fatal exception [ 37.378619][ T640] Kernel Offset: disabled [ 37.382748][ T640] Rebooting in 86400 seconds..