last executing test programs: 19.081031656s ago: executing program 4 (id=20): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x8000, &(0x7f0000000740)={[{@resgid}]}, 0x3, 0x542, &(0x7f0000000cc0)="$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") newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', &(0x7f0000000280), 0x1100) 18.833963472s ago: executing program 4 (id=23): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000841}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x40}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 18.735323795s ago: executing program 2 (id=30): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x5}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x6004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 18.683933226s ago: executing program 4 (id=31): ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x240, 0x310) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f4070009", 0xe) ioctl(r1, 0xc138fd02, &(0x7f0000000000)="0400000000000000") writev(r0, 0x0, 0x0) 18.496039401s ago: executing program 4 (id=33): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 18.417756792s ago: executing program 2 (id=35): socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 18.415410583s ago: executing program 4 (id=36): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2000c050) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x0, 0x9, "be5f21", 0x8, 0x80}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000340)=0x1) write$ppp(r1, &(0x7f0000000700)="b068aa", 0x3) 18.264242866s ago: executing program 2 (id=37): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'xfrm0\x00', &(0x7f0000000540)=@ethtool_perm_addr={0x4b, 0x41, "4372dcc479e73bdc0b280000feff00007e8ed4920af8785f0900000000000000cf967a12a94e316bccb28ca8d5ce78fd1a6c259248492f9d4564588dccdfff2619"}}) 18.247306847s ago: executing program 2 (id=38): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') setxattr$incfs_metadata(&(0x7f0000000300)='./file1\x00', &(0x7f0000000380), 0x0, 0x0, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 18.186951118s ago: executing program 4 (id=39): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000000a06050000000000000000000200000005000100070000000900020073797a3000000000200007800c000180080003407f000001060004401f90000005000700"], 0x48}}, 0x0) 18.186750148s ago: executing program 32 (id=39): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000000a06050000000000000000000200000005000100070000000900020073797a3000000000200007800c000180080003407f000001060004401f90000005000700"], 0x48}}, 0x0) 17.000289557s ago: executing program 2 (id=42): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000300)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x48, 0xfffffffffffffffc, &(0x7f0000000440)="a664ce110bdf5306003498af2647f043cc587e474986c1c398022aa2c68722b283d9d059538ba36b609991f0f50797e07bda4ea49ba1e49d03c6b7b2c3f4a79c06a97155a1b34445"}) 16.262961445s ago: executing program 2 (id=49): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x2, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x6}]}}}}}}}, 0x0) 16.167962327s ago: executing program 33 (id=49): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x2, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x6}]}}}}}}}, 0x0) 2.320779554s ago: executing program 3 (id=243): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000500)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./file1\x00', 0x42142, 0x190) io_setup(0x46, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)='T', 0x1, 0x600}]) 1.898474534s ago: executing program 5 (id=255): setsockopt(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100), 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x2, 0x4e21, @local={0x7f, 0x0, 0x0, 0x1}}, 0x10) 1.884371284s ago: executing program 5 (id=259): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x31, 0x4) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 1.803895186s ago: executing program 5 (id=261): r0 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1008002, &(0x7f0000000180)={[{@grpquota}, {@sysvgroups}, {@nomblk_io_submit}, {}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@nomblk_io_submit}, {@errors_continue}]}, 0x0, 0x5e0, &(0x7f0000000bc0)="$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") quotactl_fd$Q_SETINFO(r0, 0xffffffff80000600, 0x0, &(0x7f0000000000)={0x8, 0x9, 0x20, 0x7}) 1.785785457s ago: executing program 3 (id=263): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000011c0)=ANY=[@ANYBLOB="140000001a00010a28bd3e070000f2ff80"], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 1.689429549s ago: executing program 3 (id=268): write(0xffffffffffffffff, &(0x7f0000000100)='file ?rivers/hid/hid-core.c', 0x1b) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f"], 0x17) 1.670804919s ago: executing program 1 (id=269): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0x95008100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) wait4(r2, 0x0, 0x80000000, 0x0) 1.619004881s ago: executing program 3 (id=271): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000004240)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40000001, 0x0) 1.618620121s ago: executing program 3 (id=272): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socket$can_bcm(0x1d, 0x2, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) ptrace$poke(0x5, r1, &(0x7f0000000000), 0xd) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'veth1_to_batadv\x00', {0x4}, 0x36}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, r1, 0xf30f, 0x2002) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010022bd7000fddbdf250c00000008000300", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) close(r0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) socket$nl_netfilter(0x10, 0x3, 0xc) 1.618212531s ago: executing program 1 (id=273): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.585612112s ago: executing program 5 (id=275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="580000000001010400000000000000000200000004001880240001801400018008000100e000000108000200e00000010c00028005000100000000001c000f800800024000000009050003"], 0x58}, 0x1, 0x0, 0x0, 0x2408c803}, 0x0) 1.450893895s ago: executing program 0 (id=276): socket$inet6(0xa, 0x5, 0x0) sync_file_range(0xffffffffffffffff, 0x10000080, 0xb93, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) getuid() 951.028967ms ago: executing program 6 (id=277): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) recvmmsg(r0, &(0x7f00000054c0)=[{{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f00000000c0)=""/44, 0x2c}], 0x1}}], 0x1, 0x40000002, 0x0) 950.757447ms ago: executing program 1 (id=278): syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_usb_disconnect(0xffffffffffffffff) close(0x3) 950.238697ms ago: executing program 5 (id=279): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 811.457391ms ago: executing program 6 (id=280): syz_read_part_table(0x1069, &(0x7f0000000000)="$eJzsz7FtwkAYBeD/7mzZ7tym8hrZIE1al6lSJMoSSSRGYApKWjZgDKagM7KwJSYAiu+rnt7dPemCh+pyG1HS66Zso8RvRN9061kd1ZKGiMPxPc7TVOf08VWirHde+nFI1zh31Vtp0u1++vlsY27m1fR3+s7/ZR95eTHu7vNLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhulwAAAP//P0wNrA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0) r1 = eventfd2(0x800, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f00000013c0)=[&(0x7f0000000080)={0x0, 0x0, 0x20, 0x7, 0xb, r0, 0x0, 0x0, 0x2000000000, 0x0, 0x1, r1}]) 762.914392ms ago: executing program 5 (id=281): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x4028, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000680)={r4, &(0x7f00000005c0)}, 0x20) 695.800893ms ago: executing program 3 (id=282): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20050800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8880) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) writev(0xffffffffffffffff, 0x0, 0x0) readahead(0xffffffffffffffff, 0x6, 0x57b3) socket$unix(0x1, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) 578.484706ms ago: executing program 0 (id=283): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bonding_masters\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write(r0, &(0x7f0000000140)='+b', 0x2) 522.275568ms ago: executing program 0 (id=284): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r1, r0, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, &(0x7f0000000240)) 522.137268ms ago: executing program 0 (id=285): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=ANY=[@ANYBLOB='X'], 0x158}}, 0x24000058) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/nvme0\x00', 0x2, 0x0) ioctl(r0, 0xc0484e41, &(0x7f0000000a00)) 505.576028ms ago: executing program 0 (id=286): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000200), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000000)=0x7, 0x4) 456.210739ms ago: executing program 0 (id=287): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x800718, &(0x7f0000000680)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nodiscard}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0xc}}]}, 0x22, 0x4b4, &(0x7f0000000780)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) listen(r3, 0x5) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) r5 = accept$inet(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000000), 0x4) readv(r5, &(0x7f0000000680)=[{&(0x7f00000003c0)=""/105, 0x69}], 0x1) setsockopt$inet_tcp_TLS_RX(r5, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}}, 0x28) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}}, 0x28) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="01", 0x1}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000001a01000001"], 0x18}, 0x0) recvmsg(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/83, 0x53}], 0x1}, 0x2) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) 390.08141ms ago: executing program 6 (id=288): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) 266.902293ms ago: executing program 6 (id=289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x44, 0x2, 0x6, 0x605, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x48, 0x9, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xffff}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}]}, 0x48}}, 0x0) 266.681244ms ago: executing program 6 (id=290): madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x10, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x1, 0x79, &(0x7f00000001c0)=""/121, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, &(0x7f0000000440)}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 261.144304ms ago: executing program 6 (id=291): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = gettid() ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000200)=r1) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 74.649198ms ago: executing program 1 (id=292): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x1ff, 0xca081) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x8004551a, 0xffffffffffffffff) 18.89655ms ago: executing program 1 (id=293): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x2) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, 0x0) 0s ago: executing program 1 (id=294): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./debug\x00', 0xaf) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='/#0r7', 0x5) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.172' (ED25519) to the list of known hosts. [ 22.841788][ T30] audit: type=1400 audit(1787089705.230:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.845510][ T277] cgroup: Unknown subsys name 'net' [ 22.865038][ T30] audit: type=1400 audit(1787089705.230:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.892384][ T30] audit: type=1400 audit(1787089705.260:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.892760][ T277] cgroup: Unknown subsys name 'devices' [ 23.037077][ T277] cgroup: Unknown subsys name 'hugetlb' [ 23.042751][ T277] cgroup: Unknown subsys name 'rlimit' [ 23.184289][ T30] audit: type=1400 audit(1787089705.570:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.207952][ T30] audit: type=1400 audit(1787089705.570:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.228706][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.233359][ T30] audit: type=1400 audit(1787089705.570:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.264448][ T30] audit: type=1400 audit(1787089705.630:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.289904][ T30] audit: type=1400 audit(1787089705.630:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.300172][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.315650][ T30] audit: type=1400 audit(1787089705.680:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.349770][ T30] audit: type=1400 audit(1787089705.680:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.931464][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.938651][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.946171][ T285] device bridge_slave_0 entered promiscuous mode [ 23.954229][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.961357][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.968822][ T285] device bridge_slave_1 entered promiscuous mode [ 24.028810][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.035957][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.043302][ T286] device bridge_slave_0 entered promiscuous mode [ 24.051183][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.058276][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.065773][ T286] device bridge_slave_1 entered promiscuous mode [ 24.107052][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.114116][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.121590][ T288] device bridge_slave_0 entered promiscuous mode [ 24.131482][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.138588][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.146065][ T288] device bridge_slave_1 entered promiscuous mode [ 24.256061][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.263127][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.270670][ T287] device bridge_slave_0 entered promiscuous mode [ 24.280185][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.287371][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.294798][ T287] device bridge_slave_1 entered promiscuous mode [ 24.307224][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.314283][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.321623][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.328695][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.342142][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.349424][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.356919][ T289] device bridge_slave_0 entered promiscuous mode [ 24.377422][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.384486][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.391954][ T289] device bridge_slave_1 entered promiscuous mode [ 24.424794][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.431892][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.439200][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.446248][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.517781][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.525512][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.532761][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.540077][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.548788][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.556355][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.583200][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.591457][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.598531][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.606152][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.614297][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.621354][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.632374][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.649184][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.657191][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.665642][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.672689][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.680148][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.698017][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.706313][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.713343][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.732711][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.756386][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.780771][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.788958][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.797215][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.805840][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.812869][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.836040][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.844416][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.852530][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.860263][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.868078][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.876589][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.884416][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.892782][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.899886][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.907432][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.915714][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.922736][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.930235][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.937755][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.946052][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.953077][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.960551][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.968851][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.975920][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.983562][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.991372][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.999500][ T285] device veth0_vlan entered promiscuous mode [ 25.019139][ T286] device veth0_vlan entered promiscuous mode [ 25.026025][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.034516][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.043072][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.050307][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.057874][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.066464][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.074404][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.082545][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.090531][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.098586][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.106805][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.114814][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.122995][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.130540][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.146428][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.154569][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.162724][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.171164][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.189107][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.197349][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.205935][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.214027][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.226055][ T286] device veth1_macvtap entered promiscuous mode [ 25.240215][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.247951][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.256369][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.264512][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.273100][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.281668][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.290089][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.301164][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.309206][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.324699][ T288] device veth0_vlan entered promiscuous mode [ 25.336875][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.344453][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.352203][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.360843][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.369417][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.377818][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.386141][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.394179][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.402511][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.410515][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.418655][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.427074][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.435634][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.443144][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.450756][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.458950][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.467069][ T285] device veth1_macvtap entered promiscuous mode [ 25.477844][ T289] device veth0_vlan entered promiscuous mode [ 25.487070][ T287] device veth0_vlan entered promiscuous mode [ 25.497080][ T286] request_module fs-gadgetfs succeeded, but still no fs? [ 25.507253][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.515304][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.523706][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.536522][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.545483][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.567617][ T287] device veth1_macvtap entered promiscuous mode [ 25.568769][ T310] loop3: detected capacity change from 0 to 512 [ 25.584150][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.594558][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.602918][ T310] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 25.616392][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.619853][ T310] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 25.633616][ T310] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.4: invalid indirect mapped block 2683928664 (level 1) [ 25.636346][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.656260][ T310] EXT4-fs (loop3): 1 truncate cleaned up [ 25.656763][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.661935][ T310] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,init_itable=0x0000000000000200,nodiscard,inlinecrypt,usrjquota=.sb=0x0000000000000007,norecovery,jqfmt=vfsv0,noload,debug_want_extra_isize=0x0000000000000006,noload,,,errors=continue. Quota mode: writeback. [ 25.671285][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.710667][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.720106][ T288] device veth1_macvtap entered promiscuous mode [ 25.730629][ T310] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.4: Invalid block bitmap block 3 in block_group 0 [ 25.734190][ T289] device veth1_macvtap entered promiscuous mode [ 25.755935][ T310] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 25.765137][ T310] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.4: invalid indirect mapped block 1669132791 (level 1) [ 25.794544][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.804475][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.813852][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.823015][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.831786][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.840811][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.862319][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.871388][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.879963][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.888428][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.900367][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.908952][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.927758][ T318] device syzkaller0 entered promiscuous mode [ 25.938329][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.948186][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.963150][ T318] tipc: Started in network mode [ 25.968119][ T318] tipc: Node identity deca7d1a873a, cluster identity 4711 [ 25.975446][ T318] tipc: Enabled bearer , priority 0 [ 25.994298][ T324] loop4: detected capacity change from 0 to 512 [ 26.002124][ T317] tipc: Resetting bearer [ 26.010693][ T317] tipc: Disabling bearer [ 26.026161][ T326] loop2: detected capacity change from 0 to 512 [ 26.038289][ T324] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #2: comm syz.4.5: missing EA_INODE flag [ 26.050247][ T324] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.5: error while reading EA inode 2 err=-117 [ 26.063150][ T324] EXT4-fs (loop4): 1 orphan inode deleted [ 26.068997][ T324] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 26.082533][ T326] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 26.108316][ T326] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 26.135257][ T326] EXT4-fs (loop2): 1 truncate cleaned up [ 26.143060][ T326] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,errors=remount-ro,data=journal,usrjquota=,init_itable=0x0000000000000022,. Quota mode: none. [ 26.185458][ T335] loop0: detected capacity change from 0 to 512 [ 26.285925][ T339] loop3: detected capacity change from 0 to 1024 [ 26.294641][ T335] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,discard,stripe=0x0000000000000000,journal_ioprio=0x0000000000000007,. Quota mode: writeback. [ 26.297384][ T341] FAULT_INJECTION: forcing a failure. [ 26.297384][ T341] name fail_futex, interval 1, probability 0, space 0, times 1 [ 26.318140][ T335] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.327053][ T341] CPU: 1 PID: 341 Comm: syz.4.10 Not tainted syzkaller #0 [ 26.341943][ T341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 26.352039][ T341] Call Trace: [ 26.355343][ T341] [ 26.358290][ T341] __dump_stack+0x21/0x30 [ 26.362751][ T341] dump_stack_lvl+0x110/0x170 [ 26.367467][ T341] ? show_regs_print_info+0x20/0x20 [ 26.372693][ T341] dump_stack+0x15/0x20 [ 26.376876][ T341] should_fail+0x3ab/0x500 [ 26.381315][ T341] get_futex_key+0x143/0xb60 [ 26.385932][ T341] ? futex_wait_restart+0x250/0x250 [ 26.391160][ T341] ? get_wchan+0xa0/0xd0 [ 26.395424][ T341] ? kvm_sched_clock_read+0x18/0x40 [ 26.400644][ T341] futex_wait_setup+0x52/0x510 [ 26.405427][ T341] ? ttwu_do_wakeup+0x100/0x470 [ 26.410300][ T341] futex_wait+0x235/0x8f0 [ 26.414651][ T341] ? do_futex+0x27f0/0x27f0 [ 26.419183][ T341] ? __stack_depot_save+0x34/0x480 [ 26.424321][ T341] ? path_openat+0x284f/0x2f80 [ 26.429102][ T341] do_futex+0xdb1/0x27f0 [ 26.433365][ T341] ? kasan_set_track+0x4a/0x70 [ 26.438149][ T341] ? kmem_cache_free+0x100/0x320 [ 26.443104][ T341] ? do_sys_openat2+0x6df/0x7f0 [ 26.447969][ T341] ? x64_sys_call+0x219/0x9a0 [ 26.452667][ T341] ? do_syscall_64+0x4c/0xa0 [ 26.457274][ T341] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 26.463362][ T341] ? _kstrtoull+0x3bb/0x4c0 [ 26.467884][ T341] ? futex_exit_release+0x1e0/0x1e0 [ 26.473103][ T341] ? kstrtouint_from_user+0x1c4/0x220 [ 26.478842][ T341] ? kstrtol_from_user+0x2a0/0x2a0 [ 26.483973][ T341] ? __kasan_check_write+0x14/0x20 [ 26.489103][ T341] ? proc_fail_nth_write+0x180/0x200 [ 26.494410][ T341] ? proc_fail_nth_read+0x220/0x220 [ 26.499626][ T341] ? security_file_permission+0x79/0xa0 [ 26.505195][ T341] ? vfs_write+0xc72/0xfd0 [ 26.509637][ T341] ? file_end_write+0x1b0/0x1b0 [ 26.514506][ T341] ? __kasan_check_write+0x14/0x20 [ 26.519642][ T341] ? mutex_unlock+0x8f/0x230 [ 26.524392][ T341] __se_sys_futex+0x135/0x330 [ 26.529088][ T341] ? __kasan_check_write+0x14/0x20 [ 26.534220][ T341] ? __x64_sys_futex+0x100/0x100 [ 26.539182][ T341] ? ksys_write+0x1fa/0x260 [ 26.543703][ T341] ? __ia32_sys_read+0x90/0x90 [ 26.548493][ T341] __x64_sys_futex+0xe5/0x100 [ 26.553197][ T341] x64_sys_call+0x251/0x9a0 [ 26.557728][ T341] do_syscall_64+0x4c/0xa0 [ 26.562169][ T341] ? clear_bhb_loop+0x50/0xa0 [ 26.566863][ T341] ? clear_bhb_loop+0x50/0xa0 [ 26.571578][ T341] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 26.577513][ T341] RIP: 0033:0x7f4588cca0d9 [ 26.581950][ T341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.601578][ T341] RSP: 002b:00007f45877230e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 26.610020][ T341] RAX: ffffffffffffffda RBX: 00007f4588f51fa8 RCX: 00007f4588cca0d9 [ 26.618012][ T341] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4588f51fa8 [ 26.626006][ T341] RBP: 00007f4588f51fa0 R08: 0000000000000000 R09: 0000000000000000 [ 26.633994][ T341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 26.641989][ T341] R13: 00007f4588f52038 R14: 00007ffccef88090 R15: 00007ffccef88178 [ 26.649987][ T341] [ 26.654000][ T343] capability: warning: `syz.2.3' uses deprecated v2 capabilities in a way that may be insecure [ 26.852015][ T339] EXT4-fs (loop3): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: none. [ 26.932865][ T354] netlink: 104 bytes leftover after parsing attributes in process `syz.0.13'. [ 26.946749][ T355] FAULT_INJECTION: forcing a failure. [ 26.946749][ T355] name fail_futex, interval 1, probability 0, space 0, times 0 [ 26.959805][ T355] CPU: 1 PID: 355 Comm: syz.4.16 Not tainted syzkaller #0 [ 26.966953][ T355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 26.977039][ T355] Call Trace: [ 26.980175][ T357] loop0: detected capacity change from 0 to 128 [ 26.980340][ T355] [ 26.980348][ T355] __dump_stack+0x21/0x30 [ 26.991293][ T339] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #2: block 16: comm syz.3.11: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 26.993870][ T355] dump_stack_lvl+0x110/0x170 [ 27.017751][ T355] ? show_regs_print_info+0x20/0x20 [ 27.022991][ T355] dump_stack+0x15/0x20 [ 27.027184][ T355] should_fail+0x3ab/0x500 [ 27.031642][ T355] get_futex_key+0x143/0xb60 [ 27.036269][ T355] ? futex_wait_restart+0x250/0x250 [ 27.041482][ T355] ? get_wchan+0xa0/0xd0 [ 27.045744][ T355] ? kvm_sched_clock_read+0x18/0x40 [ 27.050960][ T355] futex_wait_setup+0x52/0x510 [ 27.055739][ T355] ? ttwu_do_wakeup+0x100/0x470 [ 27.060611][ T355] futex_wait+0x235/0x8f0 [ 27.064963][ T355] ? do_futex+0x27f0/0x27f0 [ 27.069483][ T355] ? __stack_depot_save+0x34/0x480 [ 27.074607][ T355] ? path_openat+0x284f/0x2f80 [ 27.079385][ T355] do_futex+0xdb1/0x27f0 [ 27.083644][ T355] ? kasan_set_track+0x4a/0x70 [ 27.088428][ T355] ? kmem_cache_free+0x100/0x320 [ 27.093380][ T355] ? do_sys_openat2+0x6df/0x7f0 [ 27.098239][ T355] ? x64_sys_call+0x219/0x9a0 [ 27.102930][ T355] ? do_syscall_64+0x4c/0xa0 [ 27.107533][ T355] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 27.113616][ T355] ? _kstrtoull+0x3bb/0x4c0 [ 27.118138][ T355] ? futex_exit_release+0x1e0/0x1e0 [ 27.123348][ T355] ? kstrtouint_from_user+0x1c4/0x220 [ 27.128731][ T355] ? kstrtol_from_user+0x2a0/0x2a0 [ 27.133865][ T355] ? __kasan_check_write+0x14/0x20 [ 27.139003][ T355] ? proc_fail_nth_write+0x180/0x200 [ 27.144304][ T355] ? proc_fail_nth_read+0x220/0x220 [ 27.149509][ T355] ? security_file_permission+0x79/0xa0 [ 27.155063][ T355] ? vfs_write+0xc72/0xfd0 [ 27.159492][ T355] ? file_end_write+0x1b0/0x1b0 [ 27.164354][ T355] ? __kasan_check_write+0x14/0x20 [ 27.169476][ T355] ? mutex_unlock+0x8f/0x230 [ 27.174101][ T355] __se_sys_futex+0x135/0x330 [ 27.178797][ T355] ? __kasan_check_write+0x14/0x20 [ 27.183917][ T355] ? __x64_sys_futex+0x100/0x100 [ 27.188874][ T355] ? ksys_write+0x1fa/0x260 [ 27.193389][ T355] ? __ia32_sys_read+0x90/0x90 [ 27.198164][ T355] __x64_sys_futex+0xe5/0x100 [ 27.202854][ T355] x64_sys_call+0x251/0x9a0 [ 27.207370][ T355] do_syscall_64+0x4c/0xa0 [ 27.211799][ T355] ? clear_bhb_loop+0x50/0xa0 [ 27.216490][ T355] ? clear_bhb_loop+0x50/0xa0 [ 27.221209][ T355] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 27.227138][ T355] RIP: 0033:0x7f4588cca0d9 [ 27.231565][ T355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.251190][ T355] RSP: 002b:00007f45877230e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 27.259616][ T355] RAX: ffffffffffffffda RBX: 00007f4588f51fa8 RCX: 00007f4588cca0d9 [ 27.267601][ T355] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4588f51fa8 [ 27.275584][ T355] RBP: 00007f4588f51fa0 R08: 0000000000000000 R09: 0000000000000000 [ 27.283564][ T355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 27.291547][ T355] R13: 00007f4588f52038 R14: 00007ffccef88090 R15: 00007ffccef88178 [ 27.299529][ T355] [ 27.310851][ T339] EXT4-fs error (device loop3) in ext4_delete_entry:2800: Corrupt filesystem [ 27.338378][ T362] loop2: detected capacity change from 0 to 256 [ 27.346665][ T339] EXT4-fs warning (device loop3): ext4_rename_delete:3792: inode #2: comm syz.3.11: Deleting old file: nlink 1, error=-117 [ 27.363233][ T362] ======================================================= [ 27.363233][ T362] WARNING: The mand mount option has been deprecated and [ 27.363233][ T362] and is ignored by this kernel. Remove the mand [ 27.363233][ T362] option from the mount to silence this warning. [ 27.363233][ T362] ======================================================= [ 27.371554][ T357] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 27.411888][ T357] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 27.453259][ T365] loop4: detected capacity change from 0 to 512 [ 27.473762][ T357] syz.0.18 (pid 357) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 27.487045][ T357] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-generic)" [ 27.499065][ T365] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 27.507199][ T365] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 27.515527][ T365] System zones: 0-1, 15-15, 18-18, 34-34 [ 27.521800][ T365] EXT4-fs (loop4): orphan cleanup on readonly fs [ 27.528562][ T365] EXT4-fs warning (device loop4): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 27.543617][ T365] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 27.550605][ T365] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.20: bad orphan inode 16 [ 27.561186][ T365] ext4_test_bit(bit=15, block=18) = 1 [ 27.567256][ T365] is_bad_inode(inode)=0 [ 27.571446][ T365] NEXT_ORPHAN(inode)=0 [ 27.576623][ T365] max_ino=32 [ 27.579852][ T365] i_nlink=2 [ 27.583010][ T365] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 27.614588][ T357] overlayfs: upper fs does not support tmpfile. [ 27.621274][ T365] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 27.738712][ T383] loop0: detected capacity change from 0 to 512 [ 27.772849][ T389] loop3: detected capacity change from 0 to 1024 [ 27.784441][ T391] device syzkaller0 entered promiscuous mode [ 27.792039][ T383] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 27.812792][ T391] tipc: Started in network mode [ 27.820395][ T391] tipc: Node identity 42f256410cb2, cluster identity 4711 [ 27.828183][ T391] tipc: Enabled bearer , priority 0 [ 27.835304][ T389] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 27.848817][ T390] tipc: Resetting bearer [ 27.860718][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 27.860733][ T30] audit: type=1400 audit(1787089710.250:152): avc: denied { mount } for pid=395 comm="syz.4.31" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 27.895393][ T390] tipc: Disabling bearer [ 27.917864][ T389] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.932879][ T389] EXT4-fs error (device loop3): ext4_map_blocks:742: inode #15: block 3: comm syz.3.29: lblock 3 mapped to illegal pblock 3 (length 3) [ 27.947152][ T389] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 27.967447][ T389] EXT4-fs (loop3): This should not happen!! Data will be lost [ 27.967447][ T389] [ 27.979814][ T401] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.32: bg 0: block 5: invalid block bitmap [ 27.981582][ T389] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #15: block 3: comm syz.3.29: lblock 3 mapped to illegal pblock 3 (length 3) [ 28.006627][ T30] audit: type=1400 audit(1787089710.400:153): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 28.035323][ T30] audit: type=1400 audit(1787089710.420:154): avc: denied { unmount } for pid=403 comm="syz.4.33" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 28.035732][ T401] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 28.069525][ T8] EXT4-fs error (device loop3): ext4_map_blocks:742: inode #15: block 8: comm kworker/u4:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 28.090589][ T401] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.32: invalid indirect mapped block 3 (level 2) [ 28.103934][ T401] EXT4-fs (loop0): 1 orphan inode deleted [ 28.109756][ T401] EXT4-fs (loop0): 1 truncate cleaned up [ 28.110855][ T8] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 28.119378][ T401] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 28.138316][ T8] EXT4-fs (loop3): This should not happen!! Data will be lost [ 28.138316][ T8] [ 28.138820][ T30] audit: type=1400 audit(1787089710.520:155): avc: denied { read } for pid=405 comm="syz.2.35" name="loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 28.172593][ T30] audit: type=1400 audit(1787089710.520:156): avc: denied { open } for pid=405 comm="syz.2.35" path="/dev/loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 28.202493][ T30] audit: type=1400 audit(1787089710.520:157): avc: denied { ioctl } for pid=405 comm="syz.2.35" path="/dev/loop-control" dev="devtmpfs" ino=115 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 28.335738][ T411] EXT4-fs (loop2): Ignoring removed bh option [ 28.348191][ T412] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 28.367419][ T412] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 28.381668][ T411] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,jqfmt=vfsv1,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,stripe=0x0000000000000007,bh,auto_da_alloc,. Quota mode: none. [ 28.407121][ T412] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.34: invalid indirect mapped block 2683928664 (level 1) [ 28.545062][ T30] audit: type=1400 audit(1787089710.930:158): avc: denied { read } for pid=419 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 28.637177][ T412] EXT4-fs (loop3): 1 truncate cleaned up [ 28.666898][ T412] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,init_itable=0x0000000000000b8f,jqfmt=vfsv1,inlinecrypt,usrjquota=.sb=0x0000000000000007,nodiscard,jqfmt=vfsv0,noload,debug_want_extra_isize=0x0000000000000006,noload,,,errors=continue. Quota mode: writeback. [ 29.235189][ T30] audit: type=1400 audit(1787089710.930:159): avc: denied { open } for pid=419 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 29.272427][ T411] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #12: block 7: comm syz.2.38: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 29.296238][ T412] EXT4-fs (loop3): shut down requested (2) [ 29.309126][ T412] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=14 [ 29.329150][ T419] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.336383][ T412] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=14 [ 29.345453][ T30] audit: type=1400 audit(1787089711.620:160): avc: denied { setattr } for pid=410 comm="syz.2.38" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 29.368426][ T411] EXT4-fs (loop2): Remounting filesystem read-only [ 29.375169][ T419] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.382984][ T423] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #12: block 7: comm syz.2.38: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 29.408052][ T419] device bridge_slave_0 entered promiscuous mode [ 29.423098][ T419] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.430408][ T30] audit: type=1400 audit(1787089711.660:161): avc: denied { write } for pid=410 comm="syz.2.38" name="file1" dev="overlay" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 29.452672][ T419] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.460627][ T423] EXT4-fs (loop2): Remounting filesystem read-only [ 29.467824][ T419] device bridge_slave_1 entered promiscuous mode [ 29.478925][ T313] device bridge_slave_1 left promiscuous mode [ 29.487323][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.503126][ T289] EXT4-fs error (device loop2): ext4_read_inline_dir:1640: inode #12: block 7: comm syz-executor: path /8/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 29.526772][ T313] device bridge_slave_0 left promiscuous mode [ 29.532980][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.541488][ T313] device veth1_macvtap left promiscuous mode [ 29.554627][ T313] device veth0_vlan left promiscuous mode [ 29.574811][ T289] EXT4-fs (loop2): Remounting filesystem read-only [ 29.582053][ T289] EXT4-fs error (device loop2): ext4_read_inline_dir:1640: inode #12: block 7: comm syz-executor: path /8/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 29.616057][ T289] EXT4-fs (loop2): Remounting filesystem read-only [ 29.622848][ T289] EXT4-fs error (device loop2): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 29.645224][ T289] EXT4-fs (loop2): Remounting filesystem read-only [ 29.651788][ T289] EXT4-fs warning (device loop2): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 29.686597][ T289] EXT4-fs error (device loop2): ext4_read_inline_dir:1640: inode #12: block 7: comm syz-executor: path /8/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 29.714481][ T289] EXT4-fs (loop2): Remounting filesystem read-only [ 29.722294][ T289] EXT4-fs error (device loop2): ext4_read_inline_dir:1640: inode #12: block 7: comm syz-executor: path /8/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 29.744669][ T289] EXT4-fs (loop2): Remounting filesystem read-only [ 29.753216][ T289] EXT4-fs error (device loop2): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 29.774259][ T289] EXT4-fs (loop2): Remounting filesystem read-only [ 29.781223][ T289] EXT4-fs warning (device loop2): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 29.796460][ T289] EXT4-fs error (device loop2): ext4_read_inline_dir:1640: inode #12: block 7: comm syz-executor: path /8/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 29.818681][ T289] EXT4-fs (loop2): Remounting filesystem read-only [ 29.825434][ T289] EXT4-fs error (device loop2): ext4_read_inline_dir:1640: inode #12: block 7: comm syz-executor: path /8/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 29.856442][ T289] EXT4-fs (loop2): Remounting filesystem read-only [ 29.866449][ T289] EXT4-fs warning (device loop2): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 29.882352][ T289] EXT4-fs warning (device loop2): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 29.897701][ T289] EXT4-fs warning (device loop2): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 29.913074][ T289] EXT4-fs warning (device loop2): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 29.932345][ T289] EXT4-fs warning (device loop2): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 29.957260][ T289] EXT4-fs warning (device loop2): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 29.972139][ T289] EXT4-fs warning (device loop2): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 29.987135][ T289] EXT4-fs warning (device loop2): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 30.152412][ T39] input: syz0 as /devices/virtual/misc/uhid/0002:0001:0002.0001/input/input5 [ 30.162783][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 30.171217][ T39] hid-generic 0002:0001:0002.0001: input,hidraw0: HID v0.01 Mouse [syz0] on syz0 [ 30.172125][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.219190][ T419] device veth0_vlan entered promiscuous mode [ 30.233385][ T419] device veth1_macvtap entered promiscuous mode [ 30.242274][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.253973][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.262392][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.270352][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.279114][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.287689][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 30.296327][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.303711][ T447] fido_id[447]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 30.305749][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.324767][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.342242][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 30.350903][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.364356][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.371462][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.379922][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.388034][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.396486][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 30.417458][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.431128][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.559373][ T454] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.566881][ T454] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.574542][ T454] device bridge_slave_0 entered promiscuous mode [ 30.581694][ T313] tipc: Left network mode [ 30.584691][ T454] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.593204][ T454] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.612696][ T454] device bridge_slave_1 entered promiscuous mode [ 30.687717][ T474] set_capacity_and_notify: 3 callbacks suppressed [ 30.687732][ T474] loop0: detected capacity change from 0 to 128 [ 30.743277][ T454] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.750525][ T454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.757849][ T454] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.764915][ T454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.800831][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.809053][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.816628][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.837354][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.856215][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.863318][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.871502][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.882047][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.889162][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.897080][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.914495][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.936710][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.950197][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.966008][ T489] loop0: detected capacity change from 0 to 256 [ 30.972812][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.981881][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.006624][ T454] device veth0_vlan entered promiscuous mode [ 31.030889][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.053312][ T454] device veth1_macvtap entered promiscuous mode [ 31.064702][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.092361][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.114660][ T497] loop3: detected capacity change from 0 to 1024 [ 31.431419][ T313] device bridge_slave_1 left promiscuous mode [ 31.442293][ T497] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 31.450903][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.528046][ T313] device bridge_slave_0 left promiscuous mode [ 31.558762][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.589491][ T313] device veth1_macvtap left promiscuous mode [ 31.616466][ T517] Zero length message leads to an empty skb [ 31.619163][ T518] loop6: detected capacity change from 0 to 256 [ 31.629145][ T313] device veth0_vlan left promiscuous mode [ 32.404851][ T542] loop6: detected capacity change from 0 to 512 [ 32.427134][ T546] loop0: detected capacity change from 0 to 512 [ 32.485688][ T542] EXT4-fs (loop6): 1 truncate cleaned up [ 32.491498][ T542] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,jqfmt=vfsv1,noload,errors=remount-ro,usrjquota=,. Quota mode: none. [ 32.521189][ T546] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 32.532379][ T546] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.800389][ T573] loop0: detected capacity change from 0 to 512 [ 32.832361][ T573] EXT4-fs (loop0): Ignoring removed oldalloc option [ 32.839832][ T573] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 32.859244][ T573] EXT4-fs (loop0): 1 orphan inode deleted [ 32.866180][ T573] EXT4-fs (loop0): 1 truncate cleaned up [ 33.115228][ T573] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,bsddf,nobarrier,jqfmt=vfsv0,quota,grpid,oldalloc,. Quota mode: writeback. [ 33.141029][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 33.141069][ T30] audit: type=1400 audit(1787089715.530:233): avc: denied { append } for pid=580 comm="syz.3.101" name="001" dev="devtmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 33.234439][ T573] EXT4-fs error (device loop0): ext4_search_dir:1549: inode #12: block 7: comm syz.0.99: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 33.272472][ T573] EXT4-fs (loop0): Remounting filesystem read-only [ 33.274761][ T30] audit: type=1400 audit(1787089715.660:234): avc: denied { write } for pid=584 comm="syz.3.103" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.302388][ T30] audit: type=1400 audit(1787089715.690:235): avc: denied { read } for pid=584 comm="syz.3.103" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.515785][ T591] loop0: detected capacity change from 0 to 128 [ 33.629376][ T591] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 33.640473][ T591] ext4 filesystem being mounted at /27/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 34.065021][ T30] audit: type=1400 audit(1787089716.420:236): avc: denied { setopt } for pid=602 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.124860][ T30] audit: type=1400 audit(1787089716.450:237): avc: denied { setopt } for pid=604 comm="syz.3.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 34.170208][ T30] audit: type=1400 audit(1787089716.540:238): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 34.217915][ T30] audit: type=1400 audit(1787089716.560:239): avc: denied { search } for pid=140 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 34.260208][ T30] audit: type=1400 audit(1787089716.560:240): avc: denied { read } for pid=140 comm="dhcpcd" name="n15" dev="tmpfs" ino=1192 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 34.282691][ T30] audit: type=1400 audit(1787089716.560:241): avc: denied { open } for pid=140 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1192 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 34.315007][ T30] audit: type=1400 audit(1787089716.560:242): avc: denied { getattr } for pid=140 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1192 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 34.396410][ T632] loop3: detected capacity change from 0 to 1024 [ 34.481549][ T632] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,lazytime,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,inlinecrypt,grpid,noauto_da_alloc,nouid32,,errors=continue. Quota mode: none. [ 34.522337][ T39] Bluetooth: hci0: command 0x1003 tx timeout [ 34.528694][ T554] Bluetooth: hci0: sending frame failed (-49) [ 34.603338][ T658] loop0: detected capacity change from 0 to 1024 [ 34.656559][ T658] EXT4-fs (loop0): Unrecognized mount option "smackfsroot=%" or missing value [ 36.178615][ T674] loop0: detected capacity change from 0 to 128 [ 36.395945][ T674] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 36.406746][ T674] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 36.657413][ T668] Bluetooth: hci0: command 0x1001 tx timeout [ 36.669173][ T554] Bluetooth: hci0: sending frame failed (-49) [ 36.854442][ T704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.140'. [ 36.936300][ T714] loop3: detected capacity change from 0 to 128 [ 37.016881][ T716] FAULT_INJECTION: forcing a failure. [ 37.016881][ T716] name failslab, interval 1, probability 0, space 0, times 1 [ 37.029696][ T716] CPU: 0 PID: 716 Comm: syz.3.146 Not tainted syzkaller #0 [ 37.036927][ T716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.047006][ T716] Call Trace: [ 37.050307][ T716] [ 37.053285][ T716] __dump_stack+0x21/0x30 [ 37.057651][ T716] dump_stack_lvl+0x110/0x170 [ 37.062359][ T716] ? show_regs_print_info+0x20/0x20 [ 37.067602][ T716] ? file_end_write+0x1b0/0x1b0 [ 37.072488][ T716] dump_stack+0x15/0x20 [ 37.076678][ T716] should_fail+0x3ab/0x500 [ 37.081118][ T716] __should_failslab+0xa4/0xe0 [ 37.085905][ T716] should_failslab+0x9/0x20 [ 37.090437][ T716] slab_pre_alloc_hook+0x39/0xd0 [ 37.095401][ T716] ? prepare_creds+0x2f/0x610 [ 37.100108][ T716] kmem_cache_alloc+0x44/0x260 [ 37.104907][ T716] ? __put_user_ns+0x60/0x60 [ 37.109533][ T716] prepare_creds+0x2f/0x610 [ 37.114070][ T716] __sys_setuid+0x97/0x560 [ 37.118530][ T716] __x64_sys_setuid+0x37/0x40 [ 37.123236][ T716] x64_sys_call+0x602/0x9a0 [ 37.127786][ T716] do_syscall_64+0x4c/0xa0 [ 37.132343][ T716] ? clear_bhb_loop+0x50/0xa0 [ 37.137056][ T716] ? clear_bhb_loop+0x50/0xa0 [ 37.141846][ T716] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 37.147777][ T716] RIP: 0033:0x7fcfa6ceb0d9 [ 37.152219][ T716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.152949][ T718] binder: 717:718 ioctl c0306201 200000000080 returned -14 [ 37.171918][ T716] RSP: 002b:00007fcfa5744028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 37.171950][ T716] RAX: ffffffffffffffda RBX: 00007fcfa6f72fa0 RCX: 00007fcfa6ceb0d9 [ 37.171965][ T716] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 37.171978][ T716] RBP: 00007fcfa6d82024 R08: 0000000000000000 R09: 0000000000000000 [ 37.171992][ T716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.219739][ T716] R13: 00007fcfa6f73038 R14: 00007fcfa6f72fa0 R15: 00007fffe004bb98 [ 37.228166][ T716] [ 37.282065][ T722] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=722 comm=syz.1.150 [ 37.305719][ T726] input: syz0 as /devices/virtual/input/input6 [ 37.428749][ T745] loop6: detected capacity change from 0 to 4096 [ 37.435469][ T748] input: syz0 as /devices/virtual/input/input7 [ 37.480368][ T745] EXT4-fs (loop6): Test dummy encryption mode enabled [ 37.496139][ T745] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 37.520173][ T745] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 37.528650][ T745] System zones: 0-5 [ 37.534149][ T745] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,user_xattr,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 37.594554][ T745] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 38.180769][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 38.180946][ T30] audit: type=1400 audit(1787089720.550:283): avc: denied { write } for pid=773 comm="syz.3.170" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 38.181298][ T30] audit: type=1400 audit(1787089720.570:284): avc: denied { mount } for pid=773 comm="syz.3.170" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 38.291868][ T30] audit: type=1400 audit(1787089720.680:285): avc: denied { search } for pid=780 comm="syz.6.171" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 38.378317][ T30] audit: type=1400 audit(1787089720.720:286): avc: denied { write } for pid=780 comm="syz.6.171" name="filter" dev="tracefs" ino=2487 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 38.447751][ T787] loop6: detected capacity change from 0 to 1024 [ 38.566873][ T30] audit: type=1400 audit(1787089720.720:287): avc: denied { open } for pid=780 comm="syz.6.171" path="/17/tracing/events/sched/filter" dev="tracefs" ino=2487 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 38.598189][ T787] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 39.745114][ T787] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.778083][ T30] audit: type=1400 audit(1787089720.740:288): avc: denied { unmount } for pid=454 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 39.929947][ T30] audit: type=1400 audit(1787089720.840:289): avc: denied { create } for pid=788 comm="syz.1.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 39.931382][ T320] Bluetooth: hci0: command 0x1009 tx timeout [ 40.319545][ T30] audit: type=1400 audit(1787089722.160:290): avc: denied { append } for pid=786 comm="syz.6.175" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 40.437582][ T30] audit: type=1400 audit(1787089722.280:291): avc: denied { read } for pid=795 comm="syz.0.177" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 40.495739][ T30] audit: type=1400 audit(1787089722.280:292): avc: denied { open } for pid=795 comm="syz.0.177" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 41.420712][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 41.431109][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.449716][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 41.467315][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.478461][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.487135][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.495705][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.503904][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.727440][ T868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.207'. [ 41.798779][ T876] loop6: detected capacity change from 0 to 2048 [ 41.811887][ T880] FAULT_INJECTION: forcing a failure. [ 41.811887][ T880] name fail_futex, interval 1, probability 0, space 0, times 0 [ 41.842587][ T880] CPU: 0 PID: 880 Comm: syz.3.212 Not tainted syzkaller #0 [ 41.849856][ T880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 41.860120][ T880] Call Trace: [ 41.863425][ T880] [ 41.866382][ T880] __dump_stack+0x21/0x30 [ 41.870753][ T880] dump_stack_lvl+0x110/0x170 [ 41.875474][ T880] ? show_regs_print_info+0x20/0x20 [ 41.880706][ T880] ? native_smp_send_reschedule+0x82/0xa0 [ 41.886456][ T880] ? resched_curr+0x17f/0x320 [ 41.891166][ T880] dump_stack+0x15/0x20 [ 41.895350][ T880] should_fail+0x3ab/0x500 [ 41.899816][ T880] get_futex_key+0x143/0xb60 [ 41.904443][ T880] ? futex_wait_restart+0x250/0x250 [ 41.909670][ T880] ? get_wchan+0xa0/0xd0 [ 41.913948][ T880] ? kvm_sched_clock_read+0x18/0x40 [ 41.919184][ T880] futex_wait_setup+0x52/0x510 [ 41.923980][ T880] ? ttwu_do_wakeup+0x100/0x470 [ 41.928864][ T880] futex_wait+0x235/0x8f0 [ 41.933223][ T880] ? do_futex+0x27f0/0x27f0 [ 41.937763][ T880] ? __stack_depot_save+0x34/0x480 [ 41.942912][ T880] ? path_openat+0x284f/0x2f80 [ 41.947709][ T880] do_futex+0xdb1/0x27f0 [ 41.951990][ T880] ? kasan_set_track+0x4a/0x70 [ 41.956810][ T880] ? kmem_cache_free+0x100/0x320 [ 41.961775][ T880] ? do_sys_openat2+0x6df/0x7f0 [ 41.966651][ T880] ? x64_sys_call+0x219/0x9a0 [ 41.971355][ T880] ? do_syscall_64+0x4c/0xa0 [ 41.975977][ T880] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 41.982076][ T880] ? _kstrtoull+0x3bb/0x4c0 [ 41.986608][ T880] ? futex_exit_release+0x1e0/0x1e0 [ 41.991845][ T880] ? kstrtouint_from_user+0x1c4/0x220 [ 41.997245][ T880] ? kstrtol_from_user+0x2a0/0x2a0 [ 42.002391][ T880] ? __kasan_check_write+0x14/0x20 [ 42.007532][ T880] ? proc_fail_nth_write+0x180/0x200 [ 42.012851][ T880] ? proc_fail_nth_read+0x220/0x220 [ 42.018092][ T880] ? security_file_permission+0x79/0xa0 [ 42.023808][ T880] ? vfs_write+0xc72/0xfd0 [ 42.028261][ T880] ? file_end_write+0x1b0/0x1b0 [ 42.033142][ T880] ? __kasan_check_write+0x14/0x20 [ 42.038293][ T880] ? mutex_unlock+0x8f/0x230 [ 42.042929][ T880] __se_sys_futex+0x135/0x330 [ 42.047641][ T880] ? __kasan_check_write+0x14/0x20 [ 42.052819][ T880] ? __x64_sys_futex+0x100/0x100 [ 42.057806][ T880] ? ksys_write+0x1fa/0x260 [ 42.062348][ T880] ? __ia32_sys_read+0x90/0x90 [ 42.067149][ T880] __x64_sys_futex+0xe5/0x100 [ 42.071863][ T880] x64_sys_call+0x251/0x9a0 [ 42.076400][ T880] do_syscall_64+0x4c/0xa0 [ 42.080857][ T880] ? clear_bhb_loop+0x50/0xa0 [ 42.085562][ T880] ? clear_bhb_loop+0x50/0xa0 [ 42.090268][ T880] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 42.096202][ T880] RIP: 0033:0x7fcfa6ceb0d9 [ 42.100645][ T880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.120285][ T880] RSP: 002b:00007fcfa57440e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 42.128737][ T880] RAX: ffffffffffffffda RBX: 00007fcfa6f72fa8 RCX: 00007fcfa6ceb0d9 [ 42.136755][ T880] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcfa6f72fa8 [ 42.145154][ T880] RBP: 00007fcfa6f72fa0 R08: 0000000000000000 R09: 0000000000000000 [ 42.153162][ T880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.161166][ T880] R13: 00007fcfa6f73038 R14: 00007fffe004bab0 R15: 00007fffe004bb98 [ 42.169593][ T880] [ 42.237756][ T896] loop3: detected capacity change from 0 to 512 [ 42.262640][ T896] EXT4-fs error (device loop3): ext4_get_journal_inode:5178: comm syz.3.220: inode #2147418112: comm syz.3.220: iget: illegal inode # [ 42.279310][ T876] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobarrier,noinit_itable,i_version,init_itable,,errors=continue. Quota mode: none. [ 42.317669][ T876] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.365277][ T896] EXT4-fs (loop3): no journal found [ 42.370877][ T896] EXT4-fs (loop3): can't get journal size [ 42.376644][ T876] fs-verity: sha512 using implementation "sha512-avx2" [ 42.404275][ T896] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 42.420474][ T896] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 42.429050][ T896] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,grpquota,noload,nobarrier,usrquota,,errors=continue. Quota mode: writeback. [ 42.463303][ T896] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 43.132236][ T941] overlayfs: missing 'workdir' [ 43.147147][ T941] overlayfs: failed to clone upperpath [ 44.121474][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 44.121489][ T30] audit: type=1400 audit(1787089726.510:315): avc: denied { bind } for pid=945 comm="syz.6.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 44.192519][ T949] loop5: detected capacity change from 0 to 128 [ 44.234006][ T30] audit: type=1400 audit(1787089726.550:316): avc: denied { name_bind } for pid=945 comm="syz.6.241" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 44.255926][ T30] audit: type=1400 audit(1787089726.550:317): avc: denied { node_bind } for pid=945 comm="syz.6.241" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 44.311095][ T949] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 44.317702][ T953] loop3: detected capacity change from 0 to 4096 [ 44.337326][ T949] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 44.363691][ T953] EXT4-fs (loop3): Test dummy encryption mode enabled [ 44.388981][ T953] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 44.415871][ T30] audit: type=1400 audit(1787089726.810:318): avc: denied { create } for pid=968 comm="syz.5.249" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 44.439487][ T953] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 44.450341][ T953] System zones: 0-5 [ 44.465675][ T953] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 44.491069][ T30] audit: type=1400 audit(1787089726.810:319): avc: denied { read append } for pid=968 comm="syz.5.249" name="file1" dev="tmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 44.514419][ T30] audit: type=1400 audit(1787089726.810:320): avc: denied { open } for pid=968 comm="syz.5.249" path="/21/file1" dev="tmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 44.539204][ T30] audit: type=1400 audit(1787089726.840:321): avc: denied { unlink } for pid=419 comm="syz-executor" name="file1" dev="tmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 44.623126][ T30] audit: type=1400 audit(1787089727.010:322): avc: denied { write } for pid=983 comm="syz.1.257" name="functions" dev="configfs" ino=16052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 44.662881][ T30] audit: type=1400 audit(1787089727.040:323): avc: denied { add_name } for pid=983 comm="syz.1.257" name="acm.usb0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 44.693554][ T30] audit: type=1400 audit(1787089727.040:324): avc: denied { getopt } for pid=986 comm="syz.5.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.718115][ T994] loop5: detected capacity change from 0 to 1024 [ 44.767246][ T994] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 44.774817][ T994] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 44.813922][ T994] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 44.831461][ T994] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 44.857635][ T994] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,errors=continue,,errors=continue. Quota mode: writeback. [ 45.010117][ T1023] netlink: 44 bytes leftover after parsing attributes in process `syz.5.275'. [ 45.112245][ T1027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.272'. [ 45.740292][ T1038] loop6: detected capacity change from 0 to 8192 [ 45.825289][ T1038] loop6: p1[EZD] p3 p4 [ 45.905067][ T1038] loop6: p3 start 150994944 is beyond EOD, truncated [ 45.914372][ T1038] loop6: p4 size 50331648 extends beyond EOD, truncated [ 46.171406][ T379] udevd[379]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 46.184139][ T328] udevd[328]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 46.198522][ T379] udevd[379]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 46.209699][ T328] udevd[328]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 46.514532][ T1073] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 46.526312][ T1073] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 46.534753][ T1073] CPU: 0 PID: 1073 Comm: syz.1.294 Not tainted syzkaller #0 [ 46.542055][ T1073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.552389][ T1073] RIP: 0010:vsscanf+0x196/0x24b0 [ 46.557369][ T1073] Code: 48 c7 c6 80 cf 99 86 e8 c8 a4 f7 fe 41 83 fe 25 74 4d 45 85 f6 0f 84 b6 21 00 00 48 ff c3 48 89 5c 24 78 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 4f 1b 00 00 41 0f b6 1f 45 0f b6 f6 44 [ 46.577002][ T1073] RSP: 0018:ffffc900010775e0 EFLAGS: 00010246 [ 46.583100][ T1073] RAX: 0000000000000000 RBX: ffffffff854b5541 RCX: 0000000000000001 [ 46.591090][ T1073] RDX: ffffffff82721758 RSI: ffffffff8699cf80 RDI: 0000000000000030 [ 46.599087][ T1073] RBP: ffffc90001077710 R08: ffff88811676bb40 R09: 0000000000000002 [ 46.607081][ T1073] R10: 0000000000000025 R11: 0000000000000002 R12: ffffffff854b5540 [ 46.615071][ T1073] R13: dffffc0000000000 R14: 0000000000000030 R15: 0000000000000000 [ 46.623064][ T1073] FS: 00007f4b9fe2b6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 46.632011][ T1073] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.638617][ T1073] CR2: 000000110c2ee444 CR3: 0000000121934000 CR4: 00000000003506b0 [ 46.646638][ T1073] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 46.654634][ T1073] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 46.662632][ T1073] Call Trace: [ 46.665940][ T1073] [ 46.668993][ T1073] ? bprintf+0x140/0x140 [ 46.673268][ T1073] ? check_preempt_wakeup+0x725/0xbb0 [ 46.678667][ T1073] sscanf+0xdf/0x130 [ 46.682597][ T1073] ? schedule_preempt_disabled+0x20/0x20 [ 46.688251][ T1073] ? skip_atoi+0x110/0x110 [ 46.692688][ T1073] ? mutex_lock_interruptible+0x9b/0x1c0 [ 46.698341][ T1073] ? check_stack_object+0x10f/0x150 [ 46.703566][ T1073] split_huge_pages_write+0x30d/0xfc0 [ 46.709044][ T1073] ? __kasan_check_write+0x14/0x20 [ 46.714268][ T1073] ? deferred_split_scan+0x860/0x860 [ 46.719574][ T1073] ? __asan_set_shadow_00+0xe/0x10 [ 46.724710][ T1073] ? do_futex+0xdd3/0x27f0 [ 46.729144][ T1073] ? kasan_set_track+0x4a/0x70 [ 46.733922][ T1073] ? kmem_cache_free+0x100/0x320 [ 46.738883][ T1073] ? do_sys_openat2+0x6df/0x7f0 [ 46.743745][ T1073] ? x64_sys_call+0x219/0x9a0 [ 46.748449][ T1073] ? __kasan_check_write+0x14/0x20 [ 46.753580][ T1073] ? debugfs_file_get+0x362/0x450 [ 46.758624][ T1073] ? avc_policy_seqno+0x1b/0x70 [ 46.763494][ T1073] ? selinux_file_permission+0x2aa/0x510 [ 46.769149][ T1073] full_proxy_write+0x10f/0x1c0 [ 46.774019][ T1073] ? full_proxy_read+0x1c0/0x1c0 [ 46.778976][ T1073] vfs_write+0x404/0xfd0 [ 46.783243][ T1073] ? file_end_write+0x1b0/0x1b0 [ 46.788108][ T1073] ? __kasan_check_write+0x14/0x20 [ 46.793243][ T1073] ? mutex_lock+0x9b/0x1c0 [ 46.797681][ T1073] ? wait_for_completion_killable_timeout+0x10/0x10 [ 46.804289][ T1073] ? __fget_files+0x2e1/0x340 [ 46.808990][ T1073] ? __fdget_pos+0x2d2/0x380 [ 46.813630][ T1073] ? ksys_write+0x70/0x260 [ 46.818069][ T1073] ksys_write+0x14a/0x260 [ 46.822421][ T1073] ? __ia32_sys_read+0x90/0x90 [ 46.827202][ T1073] ? __kasan_check_write+0x14/0x20 [ 46.832337][ T1073] ? switch_fpu_return+0x15d/0x2c0 [ 46.837467][ T1073] __x64_sys_write+0x7b/0x90 [ 46.842078][ T1073] x64_sys_call+0x8ef/0x9a0 [ 46.846599][ T1073] do_syscall_64+0x4c/0xa0 [ 46.851034][ T1073] ? clear_bhb_loop+0x50/0xa0 [ 46.855730][ T1073] ? clear_bhb_loop+0x50/0xa0 [ 46.860433][ T1073] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 46.866344][ T1073] RIP: 0033:0x7f4ba13d20d9 [ 46.870774][ T1073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.890400][ T1073] RSP: 002b:00007f4b9fe2b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 46.898842][ T1073] RAX: ffffffffffffffda RBX: 00007f4ba1659fa0 RCX: 00007f4ba13d20d9 [ 46.906839][ T1073] RDX: 0000000000000005 RSI: 0000200000000600 RDI: 0000000000000003 [ 46.914832][ T1073] RBP: 00007f4ba1469024 R08: 0000000000000000 R09: 0000000000000000 [ 46.922907][ T1073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.930899][ T1073] R13: 00007f4ba165a038 R14: 00007f4ba1659fa0 R15: 00007ffdb6f0b538 [ 46.938899][ T1073] [ 46.941935][ T1073] Modules linked in: [ 47.067115][ T1073] ---[ end trace 4e2bc5d1024d22ef ]--- [ 47.072697][ T1073] RIP: 0010:vsscanf+0x196/0x24b0 [ 47.078053][ T1073] Code: 48 c7 c6 80 cf 99 86 e8 c8 a4 f7 fe 41 83 fe 25 74 4d 45 85 f6 0f 84 b6 21 00 00 48 ff c3 48 89 5c 24 78 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 4f 1b 00 00 41 0f b6 1f 45 0f b6 f6 44 [ 47.106193][ T1073] RSP: 0018:ffffc900010775e0 EFLAGS: 00010246 [ 47.119297][ T1073] RAX: 0000000000000000 RBX: ffffffff854b5541 RCX: 0000000000000001 [ 47.141666][ T1073] RDX: ffffffff82721758 RSI: ffffffff8699cf80 RDI: 0000000000000030 [ 47.150014][ T1073] RBP: ffffc90001077710 R08: ffff88811676bb40 R09: 0000000000000002 [ 47.158245][ T1073] R10: 0000000000000025 R11: 0000000000000002 R12: ffffffff854b5540 [ 47.166639][ T1073] R13: dffffc0000000000 R14: 0000000000000030 R15: 0000000000000000 [ 47.174720][ T1073] FS: 00007f4b9fe2b6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 47.183956][ T1073] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 47.191200][ T1073] CR2: 00007fb455a452f8 CR3: 0000000121934000 CR4: 00000000003506b0 [ 47.199469][ T1073] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 47.207675][ T1073] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 47.215910][ T1073] Kernel panic - not syncing: Fatal exception [ 47.222217][ T1073] Kernel Offset: disabled [ 47.226567][ T1073] Rebooting in 86400 seconds..