last executing test programs: 10.260263488s ago: executing program 4 (id=23): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xd, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x0, 0x2f, 0x0, @broadcast, @empty, {[@timestamp={0x44, 0xc, 0x0, 0x0, 0x3, [0x7, 0x8ba]}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x8, [{@broadcast, 0x52b1}]}, @noop, @lsrr={0x83, 0x7, 0xda, [@rand_addr=0x64010102]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x508, 0x340, 0x8, 0x7f02ae, 0x0, 0x200, 0x468, 0x2e8, 0x2e8, 0x468, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x300, 0x340, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@local, @private2, [0x0, 0x0, 0x0, 0xffffffff], [], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {}, 0x33}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xf}}]}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) 8.341832059s ago: executing program 4 (id=41): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 7.097513101s ago: executing program 4 (id=52): pipe2$9p(&(0x7f0000000240), 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x18, &(0x7f0000000400), 0x0, &(0x7f0000000980), 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x2, @mcast2, 0x5}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) getsockopt(r4, 0x1, 0x4, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000202010200000000000000000a0000003c0002802c0001"], 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) 6.130757571s ago: executing program 4 (id=61): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x51a, &(0x7f0000001200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1efb7e, 0x86d7ae2592eaaba6) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000880)={[{@usrjquota}, {}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@noblock_validity}, {@errors_continue}, {@inlinecrypt}, {@bsdgroups}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40086610, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.758582108s ago: executing program 4 (id=64): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read$char_usb(r2, &(0x7f0000000380)=""/140, 0x8c) 5.46224902s ago: executing program 4 (id=67): r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_bulk={0x3, {0x1, 0x1}, 0xfa, 0x75bbd5a70c4c48dc, 0x0, 0x0, 0xfffffffc, 0x3, 0x3, 0x7fff, 0x2, 0x0}) 5.441084462s ago: executing program 32 (id=67): r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_bulk={0x3, {0x1, 0x1}, 0xfa, 0x75bbd5a70c4c48dc, 0x0, 0x0, 0xfffffffc, 0x3, 0x3, 0x7fff, 0x2, 0x0}) 4.601674493s ago: executing program 1 (id=75): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f00000005c0)={0x20, 0x10, 0x4, "7c103142"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)={0x0, 0x1, 0x4, "b3293f46"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 4.446993245s ago: executing program 3 (id=80): syz_usb_connect$uac1(0x0, 0xae, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9c, 0x3, 0x1, 0x0, 0x50, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x9, 0x24, 0x5, 0x3, 0xe4, "a44ee679"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x1ff, 0x0, 0x4, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x0, 0x101, 0x0, "414c84"}, @format_type_ii_discrete={0x9}, @as_header={0x7, 0x24, 0x1, 0x0, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xfe, 0x0, 0xa, {0x7, 0x25, 0x1, 0x83, 0x9, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x6, 0x7, 0x1001}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xf9, 0x1, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x6, 0x0, {0x7, 0x25, 0x1, 0x3, 0x2, 0x7}}}}}}}]}}, 0x0) 3.706319489s ago: executing program 5 (id=85): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000003c0)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f00000003c0)=0x3ff, 0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(0xffffffffffffffff, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000f00c00000000", 0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 3.322115627s ago: executing program 5 (id=86): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2.946355165s ago: executing program 0 (id=89): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x90, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) r3 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r3, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 2.422585913s ago: executing program 5 (id=90): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000080), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) close(r0) syz_clone(0x24001100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) memfd_create(0x0, 0x0) 2.410479274s ago: executing program 0 (id=91): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000180)={0x1}) 2.334432119s ago: executing program 3 (id=92): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) poll(&(0x7f0000000000), 0x49, 0x2) 2.334286589s ago: executing program 5 (id=93): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, 0x0, 0x0, 0x24040080) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) 2.301070262s ago: executing program 3 (id=94): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) chown(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=""/111) 2.219013288s ago: executing program 0 (id=95): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000140)=0xa80, 0x4) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x0) 2.217994668s ago: executing program 3 (id=96): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000003c0)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f00000003c0)=0x3ff, 0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(0xffffffffffffffff, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000f00c00000000", 0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 2.158329542s ago: executing program 0 (id=97): r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4b1, &(0x7f0000000580)="$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") io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) r1 = socket$inet(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$pid(0x3, 0x0, 0x4000) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@private1}}, {{@in6=@loopback}, 0x0, @in6=@private1}}, &(0x7f0000000140)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000110001000000", @ANYRES32], 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x4, 0x3ff, 0x5, @dev={0xfe, 0x80, '\x00', 0x30}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x40, 0x10, 0x8100000, 0x9}}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv6_newaddr={0x34, 0x14, 0x401, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, @IFA_FLAGS={0x8, 0x8, 0x428}]}, 0x34}}, 0x0) sendto$packet(r1, &(0x7f0000000200)="f08d0dda1b773f91fff606e38be30184a69d23418f379f89d45b965268d9a45cca11cbc031bddfd8538c88398607f78f1f348aa52f9fa92e0287e3af5cf418c23aad1d63abe08465ad2061de62ac5c288ee3b36c85779badc743430f2e1d1553d8ba336b26bb9c40f189a5832bacc3a552c8e27df4b363a3eba4ad5ab7e87cf0e042129f7c50245102e0c976e52b5c63fb2d380ca2a0bbd624fa310063d51c5418b0997d003715bc6713bba84b15709d6e9cfc7ca563a7e40b3d74d20c54c06e4fc61d5b292066bd1911d0b76d604c228250d74742358ae6380dfa9f15", 0xdd, 0x10, &(0x7f0000000040)={0x11, 0x5, r7, 0x1, 0x0, 0x6, @random="0c1ec2b57d11"}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$sock_proto_private(r4, 0x8b0f, &(0x7f0000000080)) writev(r3, &(0x7f00000003c0)=[{0x0}, {&(0x7f00000001c0)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000000400)='\t', 0x1}], 0x3) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r8, 0x0, 0x40048c0) 1.673462498s ago: executing program 0 (id=98): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000001580)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_delroute={0x24, 0x19, 0x1, 0x70bd29, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2e00}, [@RTA_PRIORITY={0x8, 0x1e, 0x200}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x4000050) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001600)={[{@quota}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@journal_path={'journal_path', 0x3d, './file1'}}]}, 0x1, 0x567, &(0x7f0000000b00)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1c, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000240)='./bus/file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./bus\x00', 0x2) 1.64213442s ago: executing program 3 (id=99): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0x1, 0x1b1, &(0x7f0000000380)="$eJzs289qE10YB+A3+dp+SV0kC1fiYsCNq9D0CgxSQQwIShYKgmIbkI4ELAR0YbNz4U14OW71Slx2IRxJJrF/nIBUzVj7PJu8zJlfeGfg5OSEzNPrL/d3RwfDJ8OP0ajVon4rpTiqRTvqsTCJEmtlBwGAi+AopfiSUpou580PkVKquiMA4E9brP/p/4n1HwAuiYePHt/r9fs7D7KsEZG/Gw/Gg+K1GO8N40XksRdb0YqvMf2CMFfUd+72d7aymXa8zw/n+cPx4L/T+W60ol2e7xb57HR+PTZP5rejFVfL89ul+Y24eeNEvhOt+Pw8RpHHbkyzx/m33Sy7fb9/Jn9ldh4AAAD8CzrZd6X7905n2XiR79V++veBM/vrtbjmP4QAUImD12/2n+X53qvKioiYzI804sdzPm0Wja6useyc8cUtrfJm/lrRjN//zusbEfG3XOCFL0b1ZUPNkrlznqIREbOiwg8lYCWOZ3/VnQAAAAAAAAAAAAAAAMus4tGlqq8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMvnWwAAAP//cyOKBA==") syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) keyctl$session_to_parent(0x12) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r2, 0x0, r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x122) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x40, 0x0) lstat(&(0x7f0000000240)='./file0\x00', 0x0) gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 1.362363971s ago: executing program 5 (id=100): syz_emit_ethernet(0x6e, &(0x7f00000005c0)=ANY=[], 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10, &(0x7f0000000280)={[{@usrjquota_path={'usrjquota', 0x3d, '.'}}, {@nolazytime}]}, 0x1, 0x4d4, &(0x7f0000000540)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x9, 0x4, 0x0, 0x80000001}) memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xad\xfb\xcc\x82n=]\x0eO\xb5x\xaa\x8f\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb8f, &(0x7f00000017c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000440)={0x2000000000000003, 0x1, 0x100000000000007, 0x0, 0x100008, 0x10007fffffff, 0x0, 0x1, 0x802d}) 1.341116172s ago: executing program 1 (id=101): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77a08347691f71d1e4132f09405a5b81867a01cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1"], 0xf, 0x2a4, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000e80)={0x2020}, 0x2020) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000580)={0x0, 0x2, 0x40}) 903.523244ms ago: executing program 1 (id=104): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 652.101023ms ago: executing program 2 (id=105): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000180)={0x1}) 651.845593ms ago: executing program 3 (id=106): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@grpjquota}, {@auto_da_alloc_val}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@oldalloc}, {@nodelalloc}, {@usrquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x53}}]}, 0xfa, 0x55d, &(0x7f0000000980)="$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") open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfa, 0x56b, &(0x7f0000000f00)="$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") r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0x1, 0xd000001}) 651.569303ms ago: executing program 0 (id=107): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8890) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000000)={0x0, 0x2, "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"}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x7, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xb, &(0x7f0000000000)={0x5, 0x8b}, 0x0) 611.044336ms ago: executing program 1 (id=108): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x1000410, &(0x7f0000000040)={[{@barrier_val={'barrier', 0x3d, 0x7}}, {@i_version}]}, 0x4, 0x504, &(0x7f0000019940)="$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") write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) setxattr(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(0x0, 0x14113e, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') 610.427566ms ago: executing program 1 (id=109): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000003c0)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f00000003c0)=0x3ff, 0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r1, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000f00c00000000", 0x14) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 567.032979ms ago: executing program 5 (id=110): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000180), 0xff, 0x573, &(0x7f0000000cc0)="$eJzs3V9rW+UfAPDvSZP9636/djCGeiGDXTgZS9fWPxOEzUvR4UDvZ2izMpouo0nHWgduF+7GGxmCiAPxBXjv5fAN+CoGOhgyil6IUDnpSZe1Sf8tNbH5fOBsz5Nzkud58pzvyfOck/QEMLBOpv/kIl6OiK+SiJGWdfnIVp5c3W756e2pdEliZeXj35O4sO61kuz/4SzzUkT8/EXEmdzGcmuLS7OlSqU8n+XH6nM3xmqLS2evzZVmyjPl6xOTk+ffnJx45+23utbW1y//+e1HD98//+Wp5W9+fHzsfhIX42i2Lm1XF4q405o5Wfo7SxXi4roNx7tQWD9Jel0BdmUoi/NCpMeAkRjKoh7Y/z6PiBVgQCXiHwZUcxzQnNt3aR78n/HkvdUJ0Mb251fPjcShxtzoyHLy3Mwone+OdqH8tIyffntwP11i8/MQh7fIA+zInbsRcS6f33j8S7Lj3+6da5w83tz6Mgbt8wd66WE6/knuRGyI/9za+CfajH+G28Tubmwd/7nHXSimo3T8927b8e/aoWt0KMv9rzHmKyRXr1XK5yLi/xFxOgoH0/xm13POLz9a6bSudfyXLmn5zbFgVo/H+YPPP2e6VC+9SJtbPbkb8Urb8W+y1v9Jm/5P34/L2yzjRPnBq53Wbd3+vbXyQ8Rrbfv/2RWtZPPrk2ON/WGsuVds9Me9E790Kr/X7U/7/8jm7R9NWq/X1nZexveH/ip3Wrfb/f9A8kkjfSB77FapXp8fjziQfJgfXv/4xLPnNvPN7dP2nz7VPv432//Tyden22z/veP3Om7aD/0/vaP+33ni0Qeffdep/O31/xuN1Onske0c/7ZbwRd57wAAAAAAAKDf5CLiaCS54lo6lysWV7/fcTyO5CrVWv3M1erC9elo/FZ2NAq55pXukZbvQ4xn34dt5ifW5Scj4lhEfD10uJEvTlUr071uPAAAAAAAAAAAAAAAAAAAAPSJ4Q6//0/9OtTr2gF7rnFjg4O9rgXQC1ve8r8bd3oC+tKW8Q/sWzuPf2cGYL/w+Q+DS/zD4BL/MLi2G/+FkT2uCPCv8/kPg0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQFddvnQpXVaWn96eSvPTNxcXZqs3z06Xa7PFuYWp4lR1/kZxplqdqZSLU9W5rV6vUq3eGJ+IhVtj9XKtPlZbXLoyV124Xr9yba40U75SLvhjwwAAAAAAAAAAAAAAAAAAALBBbXFptlSplOclOiYuRF9UYy8buGpXT8/3Syskupro8YEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFr8EwAA//8DDjNQ") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18}, 0xfffffdef) r1 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) 559.682609ms ago: executing program 2 (id=111): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x40, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}]}, 0x40}}, 0x0) 243.006783ms ago: executing program 2 (id=112): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x3, 0x0, @remote, 0x6}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000040)=0xfffffff4, 0x4) 242.529623ms ago: executing program 1 (id=113): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000600)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@errors_remount}, {@noload}]}, 0x3, 0x44a, &(0x7f00000006c0)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) ftruncate(r0, 0x737) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000c00)="e8df7e63667d5fc403743786153fa58559fc523537a834fc7551bfb7c5e779ab87b75143555c79f6dfca98b9f022596123caca8c08097cbc9ede2cc6bc24ef", 0x3f}], 0x1) 38.409388ms ago: executing program 2 (id=114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x50}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x6c}, 0x0, @in6=@local}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 38.214028ms ago: executing program 2 (id=115): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000004c0), 0x1, 0x5e8, &(0x7f0000001880)="$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") 0s ago: executing program 2 (id=116): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x8910, &(0x7f0000000940)={'syztnl0\x00', 0x0}) socket(0x840000000002, 0x3, 0xff) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r2}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r3 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='sys_enter\x00'}, 0x10) getcwd(0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x358, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.197' (ED25519) to the list of known hosts. [ 22.111512][ T23] audit: type=1400 audit(1739705340.050:66): avc: denied { mounton } for pid=341 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.113442][ T341] cgroup1: Unknown subsys name 'net' [ 22.135018][ T23] audit: type=1400 audit(1739705340.050:67): avc: denied { mount } for pid=341 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.139656][ T341] cgroup1: Unknown subsys name 'net_prio' [ 22.161234][ T23] audit: type=1400 audit(1739705340.070:68): avc: denied { read } for pid=146 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 22.166984][ T341] cgroup1: Unknown subsys name 'devices' [ 22.195050][ T23] audit: type=1400 audit(1739705340.130:69): avc: denied { unmount } for pid=341 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.362380][ T341] cgroup1: Unknown subsys name 'hugetlb' [ 22.368022][ T341] cgroup1: Unknown subsys name 'rlimit' [ 22.544096][ T23] audit: type=1400 audit(1739705340.480:70): avc: denied { setattr } for pid=341 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=10869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.567254][ T23] audit: type=1400 audit(1739705340.480:71): avc: denied { mounton } for pid=341 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.591699][ T23] audit: type=1400 audit(1739705340.480:72): avc: denied { mount } for pid=341 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.603959][ T346] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.623439][ T23] audit: type=1400 audit(1739705340.560:73): avc: denied { relabelto } for pid=346 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.648627][ T23] audit: type=1400 audit(1739705340.560:74): avc: denied { write } for pid=346 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.674070][ T23] audit: type=1400 audit(1739705340.580:75): avc: denied { read } for pid=341 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.699349][ T341] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.298513][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.305428][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.312799][ T354] device bridge_slave_0 entered promiscuous mode [ 23.321370][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.328195][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.335538][ T354] device bridge_slave_1 entered promiscuous mode [ 23.364977][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.371820][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.379198][ T355] device bridge_slave_0 entered promiscuous mode [ 23.386222][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.393184][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.400474][ T355] device bridge_slave_1 entered promiscuous mode [ 23.443024][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.450008][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.457372][ T353] device bridge_slave_0 entered promiscuous mode [ 23.466946][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.473822][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.481187][ T353] device bridge_slave_1 entered promiscuous mode [ 23.619828][ T357] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.626669][ T357] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.634290][ T357] device bridge_slave_0 entered promiscuous mode [ 23.644806][ T357] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.651701][ T357] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.659034][ T357] device bridge_slave_1 entered promiscuous mode [ 23.690306][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.697153][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.704609][ T356] device bridge_slave_0 entered promiscuous mode [ 23.715494][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.722471][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.729996][ T356] device bridge_slave_1 entered promiscuous mode [ 23.766216][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.773064][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.780232][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.787048][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.807723][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.814584][ T355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.821713][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.828457][ T355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.927341][ T103] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.934853][ T103] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.942080][ T103] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.949016][ T103] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.957361][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.964624][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.985950][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.993627][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.001849][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.008665][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.034533][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.043281][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.050115][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.059082][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.067950][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.074789][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.089454][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.113082][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.121536][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.128350][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.135658][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.144115][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.150956][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.158593][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.166585][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.173435][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.180607][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.188380][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.224367][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.246601][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.255011][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.276189][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.284889][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.293878][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.302386][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.310954][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.317764][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.325336][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.333317][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.340145][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.347314][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.355261][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.385400][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.393484][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.402209][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.410386][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.418175][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.426330][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.453041][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.461213][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.469142][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.477823][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.496930][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.505152][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.513755][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.522164][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.531067][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.538788][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.547490][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.554899][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.565322][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.573572][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.590296][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.598990][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.606945][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.614817][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.625076][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.633317][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.641339][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.648149][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.672144][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.679926][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.687920][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.696509][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.705363][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.713474][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.721740][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.729927][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.737998][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.746199][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.753030][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.764392][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.772605][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.784329][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.792687][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.801119][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.809133][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.825007][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.833429][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.851474][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.860037][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.872489][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.880614][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.902187][ T353] request_module fs-gadgetfs succeeded, but still no fs? [ 24.920791][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.928676][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.947095][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.958337][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.975549][ T381] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 24.984100][ T381] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5'. [ 24.992577][ T381] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5'. [ 25.056218][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.102565][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.276152][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.285273][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.383410][ T390] Zero length message leads to an empty skb [ 25.395526][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.405420][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.466947][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.477273][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.494175][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.502831][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.522017][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.530272][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.183315][ T396] syz.2.3 (396) used greatest stack depth: 22712 bytes left [ 26.229671][ T386] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.356357][ T407] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 26.499445][ T386] usb 1-1: Using ep0 maxpacket: 8 [ 26.590609][ T416] netlink: 'syz.3.12': attribute type 16 has an invalid length. [ 26.598093][ T416] netlink: 'syz.3.12': attribute type 17 has an invalid length. [ 26.752546][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 26.770200][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 26.780069][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 26.799336][ T386] usb 1-1: config 0 has an invalid interface number: 150 but max is 0 [ 26.807968][ T386] usb 1-1: config 0 has an invalid interface number: 112 but max is 0 [ 26.812052][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 26.816951][ T386] usb 1-1: config 0 has an invalid interface number: 3 but max is 0 [ 26.831671][ T386] usb 1-1: config 0 has 3 interfaces, different from the descriptor's value: 1 [ 26.840476][ T386] usb 1-1: config 0 has no interface number 0 [ 26.846385][ T386] usb 1-1: config 0 has no interface number 1 [ 26.852443][ T386] usb 1-1: config 0 has no interface number 2 [ 26.852593][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 26.858428][ T386] usb 1-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 26.878821][ T386] usb 1-1: too many endpoints for config 0 interface 112 altsetting 233: 104, using maximum allowed: 30 [ 26.887782][ T419] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 26.897302][ T386] usb 1-1: config 0 interface 112 altsetting 233 has 1 endpoint descriptor, different from the interface descriptor's value: 104 [ 26.906715][ T419] EXT4-fs (loop1): orphan cleanup on readonly fs [ 26.912530][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 26.920047][ T419] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6102: Corrupt filesystem [ 26.924850][ T386] usb 1-1: config 0 interface 150 has no altsetting 0 [ 26.935226][ T419] EXT4-fs (loop1): Remounting filesystem read-only [ 26.940819][ T424] netlink: 68 bytes leftover after parsing attributes in process `syz.2.10'. [ 26.947465][ T419] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:455: comm syz.1.14: Invalid block bitmap block 3 in block_group 0 [ 26.956088][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 26.969062][ T419] EXT4-fs error (device loop1): ext4_map_blocks:617: inode #3: block 1: comm syz.1.14: lblock 6 mapped to illegal pblock 1 (length 1) [ 26.976159][ T386] usb 1-1: config 0 interface 112 has no altsetting 0 [ 26.996704][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 27.005260][ T386] usb 1-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 27.015414][ T386] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.024769][ T386] usb 1-1: config 0 descriptor?? [ 27.030715][ T419] EXT4-fs error (device loop1): ext4_map_blocks:617: inode #3: block 48: comm syz.1.14: lblock 0 mapped to illegal pblock 48 (length 1) [ 27.044752][ T419] EXT4-fs (loop1): 1 orphan inode deleted [ 27.050547][ T419] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000005,noquota,minixdf,errors=remount-ro,abort,noblock_validity,barrier,journal_dev=0x0000000000000f35, [ 27.127271][ T426] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 27.129912][ T419] syz.1.14 (419) used greatest stack depth: 20792 bytes left [ 27.136171][ T426] EXT4-fs (loop2): orphan cleanup on readonly fs [ 27.152304][ T426] __quota_error: 46 callbacks suppressed [ 27.152317][ T426] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 16777216 out of range 0-5 [ 27.168310][ T426] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 27.179136][ T426] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm syz.2.15: bg 0: block 40: padding at end of block bitmap is not set [ 27.193384][ T426] EXT4-fs error (device loop2) in ext4_free_blocks:5016: Corrupt filesystem [ 27.204904][ T426] EXT4-fs (loop2): 1 truncate cleaned up [ 27.219499][ T426] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,,errors=continue [ 27.267076][ T23] audit: type=1400 audit(1739705345.200:118): avc: denied { execute } for pid=425 comm="syz.2.15" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 27.291132][ T426] process 'syz.2.15' launched './file1' with NULL argv: empty string added [ 27.313620][ T23] audit: type=1400 audit(1739705345.230:119): avc: denied { read open } for pid=425 comm="syz.2.15" path="/2/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 27.339323][ T23] audit: type=1400 audit(1739705345.250:120): avc: denied { execute_no_trans } for pid=425 comm="syz.2.15" path="/2/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 27.365696][ T23] audit: type=1400 audit(1739705345.300:121): avc: denied { create } for pid=435 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.385119][ T23] audit: type=1400 audit(1739705345.300:122): avc: denied { bind } for pid=435 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.406276][ T23] audit: type=1400 audit(1739705345.300:123): avc: denied { listen } for pid=435 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.435187][ T23] audit: type=1400 audit(1739705345.300:124): avc: denied { accept } for pid=435 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.541692][ T23] audit: type=1400 audit(1739705345.480:125): avc: denied { setopt } for pid=445 comm="syz.2.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.559506][ T386] usb 1-1: string descriptor 0 read error: -71 [ 27.584768][ T386] usb 1-1: USB disconnect, device number 2 [ 27.620632][ T447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18'. [ 27.629308][ T447] netlink: 40 bytes leftover after parsing attributes in process `syz.4.18'. [ 27.637880][ T447] netlink: 40 bytes leftover after parsing attributes in process `syz.4.18'. [ 27.979911][ T430] udevd[430]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.150/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.237868][ T458] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 28.428338][ T465] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5138 sclass=netlink_audit_socket pid=465 comm=syz.0.26 [ 29.514246][ T491] netlink: 12 bytes leftover after parsing attributes in process `syz.1.33'. [ 29.523005][ T491] netlink: 40 bytes leftover after parsing attributes in process `syz.1.33'. [ 29.531568][ T491] netlink: 40 bytes leftover after parsing attributes in process `syz.1.33'. [ 30.074202][ T503] capability: warning: `syz.3.38' uses deprecated v2 capabilities in a way that may be insecure [ 30.482210][ T517] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. [ 30.802609][ T526] ====================================================== [ 30.802609][ T526] WARNING: the mand mount option is being deprecated and [ 30.802609][ T526] will be removed in v5.15! [ 30.802609][ T526] ====================================================== [ 30.862618][ T526] EXT4-fs (loop3): Unrecognized mount option "nodioread_nolock" or missing value [ 30.970960][ T532] cgroup: syz.1.48 (532) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 30.986872][ T532] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 31.341334][ T538] EXT4-fs (loop0): ea_inode feature is not supported for Hurd [ 31.558585][ T549] netlink: 12 bytes leftover after parsing attributes in process `syz.4.52'. [ 31.567248][ T549] netlink: 40 bytes leftover after parsing attributes in process `syz.4.52'. [ 31.575803][ T549] netlink: 40 bytes leftover after parsing attributes in process `syz.4.52'. [ 31.769442][ T125] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 31.812187][ T551] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 31.846627][ T551] ext4 filesystem being mounted at /12/bus supports timestamps until (%ptR?) (0x7fffffff) [ 31.899479][ T5] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 32.059430][ T125] usb 3-1: Using ep0 maxpacket: 8 [ 32.159487][ T5] usb 1-1: Using ep0 maxpacket: 16 [ 32.164169][ T23] kauditd_printk_skb: 33 callbacks suppressed [ 32.164183][ T23] audit: type=1326 audit(1739705350.100:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=545 comm="syz.2.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f90bc9449eb code=0x7ffc0000 [ 32.247826][ T23] audit: type=1326 audit(1739705350.180:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=545 comm="syz.2.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f90bc9449eb code=0x7ffc0000 [ 32.271525][ T23] audit: type=1326 audit(1739705350.210:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=545 comm="syz.2.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f90bc9449eb code=0x7ffc0000 [ 32.294587][ T23] audit: type=1326 audit(1739705350.210:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=545 comm="syz.2.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f90bc9449eb code=0x7ffc0000 [ 32.294678][ T125] usb 3-1: unable to get BOS descriptor or descriptor too short [ 32.317837][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.325111][ T23] audit: type=1326 audit(1739705350.230:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=545 comm="syz.2.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f90bc9449eb code=0x7ffc0000 [ 32.336006][ T5] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 32.359102][ T23] audit: type=1326 audit(1739705350.300:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=545 comm="syz.2.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f90bc9449eb code=0x7ffc0000 [ 32.406065][ T23] audit: type=1326 audit(1739705350.330:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=545 comm="syz.2.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f90bc9449eb code=0x7ffc0000 [ 32.406234][ T5] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 32.435361][ T23] audit: type=1400 audit(1739705350.340:166): avc: denied { wake_alarm } for pid=572 comm="syz.3.62" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 32.439126][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.458672][ T125] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 32.471349][ T5] usb 1-1: config 0 descriptor?? [ 32.485501][ T570] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 32.490324][ T125] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 32.495498][ T570] ext4 filesystem being mounted at /10/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 32.504061][ T23] audit: type=1326 audit(1739705350.370:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=545 comm="syz.2.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f90bc9449eb code=0x7ffc0000 [ 32.536987][ T125] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 32.537409][ T23] audit: type=1326 audit(1739705350.400:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=545 comm="syz.2.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f90bc9449eb code=0x7ffc0000 [ 32.550527][ T125] usb 3-1: config 1 interface 0 has no altsetting 0 [ 32.624241][ T577] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,abort,errors=remount-ro, [ 32.631075][ T570] EXT4-fs error (device loop4): ext4_resize_begin:61: comm syz.4.61: resize_inode disabled but reserved GDT blocks non-zero [ 32.639107][ T577] ext4 filesystem being mounted at /16/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 32.658211][ T353] EXT4-fs error (device loop4): ext4_map_blocks:617: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 32.675369][ T353] EXT4-fs error (device loop4): __ext4_get_inode_loc:4710: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 32.678813][ T577] EXT4-fs error (device loop3): ext4_get_first_dir_block:3644: inode #12: block 32: comm syz.3.63: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 32.692235][ T353] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6102: Corrupt filesystem [ 32.708159][ T577] EXT4-fs (loop3): Remounting filesystem read-only [ 32.723867][ T375] EXT4-fs error (device loop4): __ext4_get_inode_loc:4710: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 32.725624][ T577] EXT4-fs error (device loop3): ext4_get_first_dir_block:3647: inode #12: comm syz.3.63: directory missing '.' [ 32.736655][ T375] EXT4-fs error (device loop4): __ext4_get_inode_loc:4710: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 32.748303][ T125] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 32.769535][ T125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.769555][ T353] EXT4-fs error (device loop4): __ext4_get_inode_loc:4710: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 32.777309][ T125] usb 3-1: Product: syz [ 32.777319][ T125] usb 3-1: Manufacturer: syz [ 32.777330][ T125] usb 3-1: SerialNumber: syz [ 32.799841][ T546] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 32.803288][ T353] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6102: Corrupt filesystem [ 32.819214][ T546] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 32.833186][ T353] EXT4-fs error (device loop4): __ext4_get_inode_loc:4710: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 32.846246][ T353] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6102: Corrupt filesystem [ 33.031305][ T5] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 33.051788][ T5] microsoft 0003:045E:07DA.0001: No inputs registered, leaving [ 33.082819][ T5] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 33.109407][ T5] microsoft 0003:045E:07DA.0001: no inputs found [ 33.115560][ T5] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 33.139558][ T125] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 33.167712][ T125] usb 3-1: USB disconnect, device number 2 [ 33.258792][ T5] usb 1-1: USB disconnect, device number 3 [ 33.308430][ T589] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.315347][ T589] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.323657][ T589] device bridge_slave_0 entered promiscuous mode [ 33.332547][ T589] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.339568][ T589] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.350386][ T589] device bridge_slave_1 entered promiscuous mode [ 33.545360][ T589] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.552224][ T589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.559347][ T589] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.566125][ T589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.654406][ T601] netlink: 'syz.2.71': attribute type 16 has an invalid length. [ 33.662379][ T601] netlink: 'syz.2.71': attribute type 17 has an invalid length. [ 33.718659][ T375] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.743681][ T375] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.793554][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 33.829289][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.837673][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 33.845939][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.854184][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.874366][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.882574][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.892302][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.902032][ T7] device bridge_slave_1 left promiscuous mode [ 33.907980][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.946476][ T7] device bridge_slave_0 left promiscuous mode [ 33.952908][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.041677][ T607] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 34.073260][ T623] netlink: 'syz.0.81': attribute type 16 has an invalid length. [ 34.081174][ T623] netlink: 'syz.0.81': attribute type 17 has an invalid length. [ 34.097777][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 34.106345][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.118076][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 34.126335][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.134772][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.139532][ T531] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 34.142954][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.158167][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.166578][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.185808][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.193407][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.202515][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.210898][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.218930][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.225768][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.233530][ T13] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 34.241800][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.250701][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.258776][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.265640][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.315842][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.323521][ T377] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 34.327037][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.339770][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.347825][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.355698][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.363855][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.376833][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.387103][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.396746][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.406490][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.576666][ T531] usb 2-1: Using ep0 maxpacket: 32 [ 34.594065][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.602198][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.637243][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.645861][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.699586][ T377] usb 4-1: Using ep0 maxpacket: 16 [ 34.704553][ T13] usb 3-1: Using ep0 maxpacket: 8 [ 34.710560][ T531] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 34.718587][ T531] usb 2-1: config 0 has no interface number 0 [ 34.829617][ T13] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.841029][ T377] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 34.860599][ T377] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 34.871675][ T13] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.885233][ T377] usb 4-1: config 1 has no interface number 1 [ 34.898570][ T531] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 34.908472][ T13] usb 3-1: config 0 interface 0 has no altsetting 0 [ 34.923639][ T377] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 34.940320][ T531] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.952719][ T13] usb 3-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 34.962641][ T531] usb 2-1: Product: syz [ 34.967528][ T531] usb 2-1: Manufacturer: syz [ 34.980316][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.988704][ T377] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 34.999513][ T531] usb 2-1: SerialNumber: syz [ 35.032857][ T13] usb 3-1: config 0 descriptor?? [ 35.135984][ T531] usb 2-1: config 0 descriptor?? [ 35.195594][ T531] smsc95xx v1.0.6 [ 35.309518][ T377] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 35.318580][ T377] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.326688][ T377] usb 4-1: Product: syz [ 35.331088][ T377] usb 4-1: Manufacturer: syz [ 35.335638][ T377] usb 4-1: SerialNumber: syz [ 35.342939][ T641] EXT4-fs (loop5): Unsupported blocksize for fs encryption [ 35.661825][ T377] usb 4-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 35.670212][ T377] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 35.683988][ T13] hid-generic 0003:05AC:029F.0002: hidraw0: USB HID v0.00 Device [HID 05ac:029f] on usb-dummy_hcd.2-1/input0 [ 35.710131][ T377] usb 4-1: USB disconnect, device number 2 [ 36.285339][ T377] usb 3-1: USB disconnect, device number 3 [ 36.319508][ T531] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 36.330714][ T531] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 36.359844][ T531] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 36.372161][ T673] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 36.395896][ T531] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 36.553687][ T673] ext4 filesystem being mounted at /20/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 36.572751][ T531] usb 2-1: USB disconnect, device number 2 [ 36.649827][ T681] raw_sendmsg: syz.0.97 forgot to set AF_INET. Fix it! [ 37.110458][ T685] FAT-fs (loop3): Directory bread(block 32) failed [ 37.118099][ T685] FAT-fs (loop3): Directory bread(block 33) failed [ 37.125850][ T685] FAT-fs (loop3): Directory bread(block 34) failed [ 37.132210][ T685] FAT-fs (loop3): Directory bread(block 35) failed [ 37.138590][ T685] FAT-fs (loop3): Directory bread(block 36) failed [ 37.145244][ T687] EXT4-fs (loop0): Ignoring removed nobh option [ 37.145886][ T685] FAT-fs (loop3): Directory bread(block 37) failed [ 37.151334][ T687] EXT4-fs (loop0): Ignoring removed bh option [ 37.157686][ T685] FAT-fs (loop3): Directory bread(block 38) failed [ 37.163597][ T687] EXT4-fs (loop0): error: journal path ./file1 is not a block device [ 37.172984][ T685] FAT-fs (loop3): Directory bread(block 39) failed [ 37.184601][ T685] FAT-fs (loop3): Directory bread(block 40) failed [ 37.190938][ T685] FAT-fs (loop3): Directory bread(block 41) failed [ 37.212848][ T23] kauditd_printk_skb: 62 callbacks suppressed [ 37.212859][ T23] audit: type=1326 audit(1739705355.150:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=682 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fac82c6f750 code=0x7ffc0000 [ 37.241858][ T23] audit: type=1326 audit(1739705355.150:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=682 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fac82c6fb37 code=0x7ffc0000 [ 37.265350][ T23] audit: type=1326 audit(1739705355.150:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=682 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fac82c6f750 code=0x7ffc0000 [ 37.265370][ T23] audit: type=1326 audit(1739705355.180:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=682 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fac82c709eb code=0x7ffc0000 [ 37.265388][ T23] audit: type=1326 audit(1739705355.180:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=682 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fac82c6fa4a code=0x7ffc0000 [ 37.265406][ T23] audit: type=1326 audit(1739705355.180:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=682 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac82c70de9 code=0x7ffc0000 [ 37.265424][ T23] audit: type=1326 audit(1739705355.180:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=682 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fac82c6f750 code=0x7ffc0000 [ 37.268771][ T692] EXT4-fs (loop5): Journaled quota options ignored when QUOTA feature is enabled [ 37.303124][ T692] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrjquota=.,nolazytime,,errors=continue [ 37.314859][ T23] audit: type=1326 audit(1739705355.250:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=682 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac82c70de9 code=0x7ffc0000 [ 37.338722][ T692] ext4 filesystem being mounted at /6/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 37.361630][ T23] audit: type=1326 audit(1739705355.300:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=682 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fac82c70de9 code=0x7ffc0000 [ 37.439135][ T703] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 37.466287][ T703] FAT-fs (loop3): Filesystem has been set read-only [ 37.502115][ T23] audit: type=1326 audit(1739705355.300:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=682 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac82c70de9 code=0x7ffc0000 [ 37.768655][ T692] EXT4-fs (loop5): shut down requested (0) [ 38.269541][ T722] EXT4-fs (loop3): Ignoring removed oldalloc option [ 38.298950][ T722] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,auto_da_alloc=0x0000000000000000,auto_da_alloc=0x0000000000000009,norecovery,debug_want_extra_isize=0x0000000000000080,oldalloc,nodelalloc,usrquota,auto_da_alloc=0x0000000000000053,,errors=continue [ 38.393597][ T731] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support! [ 38.410095][ T731] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 38.420088][ T731] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 38.472638][ T733] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 38.476627][ T722] ------------[ cut here ]------------ [ 38.486595][ T722] kernel BUG at fs/ext4/ext4.h:2984! [ 38.491938][ T722] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 38.497808][ T722] CPU: 0 PID: 722 Comm: syz.3.106 Not tainted 5.4.289-syzkaller-00011-g39762b7a60e9 #0 [ 38.507265][ T722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 38.517177][ T722] RIP: 0010:ext4_trim_fs+0x1ec8/0x1ee0 [ 38.522468][ T722] Code: 80 e1 07 80 c1 03 38 c1 0f 8c fd e6 ff ff 48 8d bc 24 10 02 00 00 e8 c7 a5 c8 ff e9 eb e6 ff ff e8 2d 5f 6f ff e8 98 bb 98 ff <0f> 0b e8 91 bb 98 ff 0f 0b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f [ 38.541891][ T722] RSP: 0018:ffff8881dfc0f4e0 EFLAGS: 00010287 [ 38.547882][ T722] RAX: ffffffff81cb8ed8 RBX: 0000000000000001 RCX: 0000000000080000 [ 38.555609][ T722] RDX: ffffc90002948000 RSI: 0000000000000299 RDI: 000000000000029a [ 38.563419][ T722] RBP: ffff8881dfc0f770 R08: ffffffff81cb77f4 R09: 0000000000000003 [ 38.571233][ T722] R10: ffffffffffffffff R11: dffffc0000000001 R12: dffffc0000000000 [ 38.579045][ T722] R13: 0000000000001fff R14: ffff8881e0a45000 R15: 0000000000000001 [ 38.586856][ T722] FS: 00007fac812db6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 38.595704][ T722] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.602127][ T722] CR2: 00007f90bc928220 CR3: 00000001e13ea000 CR4: 00000000003406b0 [ 38.609940][ T722] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.617750][ T722] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.625559][ T722] Call Trace: [ 38.628698][ T722] ? __die+0xb4/0x100 [ 38.632518][ T722] ? die+0x26/0x50 [ 38.636069][ T722] ? do_trap+0x1e7/0x340 [ 38.640165][ T722] ? ext4_trim_fs+0x1ec8/0x1ee0 [ 38.644835][ T722] ? ext4_trim_fs+0x1ec8/0x1ee0 [ 38.649519][ T722] ? do_invalid_op+0xfb/0x110 [ 38.654042][ T722] ? ext4_trim_fs+0x1ec8/0x1ee0 [ 38.658730][ T722] ? invalid_op+0x1e/0x30 [ 38.662893][ T722] ? ext4_trim_fs+0x7e4/0x1ee0 [ 38.667487][ T722] ? ext4_trim_fs+0x1ec8/0x1ee0 [ 38.672185][ T722] ? ext4_trim_fs+0x1ec8/0x1ee0 [ 38.676870][ T722] ? ext4_group_add_blocks+0xde0/0xde0 [ 38.682159][ T722] ? cap_capable+0x1b1/0x250 [ 38.686600][ T722] ext4_ioctl+0x2168/0x3ff0 [ 38.690927][ T722] ? preempt_schedule+0xd9/0xe0 [ 38.695606][ T722] ? preempt_schedule+0xd9/0xe0 [ 38.700294][ T722] ? schedule_preempt_disabled+0x20/0x20 [ 38.705761][ T722] ? asan.module_dtor+0x20/0x20 [ 38.710461][ T722] ? ___preempt_schedule+0x16/0x20 [ 38.715398][ T722] ? try_to_wake_up+0x9d3/0x14f0 [ 38.720172][ T722] ? cpus_share_cache+0x110/0x110 [ 38.725033][ T722] ? plist_check_list+0x20d/0x220 [ 38.729891][ T722] ? plist_del+0x3bf/0x3e0 [ 38.734141][ T722] ? _raw_spin_trylock_bh+0x190/0x190 [ 38.739359][ T722] ? avc_has_extended_perms+0xb03/0x1120 [ 38.744850][ T722] ? avc_flush+0x1f0/0x1f0 [ 38.749086][ T722] ? do_futex+0x13fe/0x19f0 [ 38.753417][ T722] ? asan.module_dtor+0x20/0x20 [ 38.758104][ T722] do_vfs_ioctl+0x742/0x1720 [ 38.762525][ T722] ? ioctl_preallocate+0x250/0x250 [ 38.767474][ T722] ? __fget+0x407/0x490 [ 38.771476][ T722] ? fget_many+0x20/0x20 [ 38.775544][ T722] ? switch_fpu_return+0x1d4/0x410 [ 38.780490][ T722] ? security_file_ioctl+0x7d/0xa0 [ 38.785440][ T722] __x64_sys_ioctl+0xd4/0x110 [ 38.789951][ T722] do_syscall_64+0xca/0x1c0 [ 38.794379][ T722] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 38.800107][ T722] RIP: 0033:0x7fac82c70de9 [ 38.804366][ T722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.823802][ T722] RSP: 002b:00007fac812db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 38.832044][ T722] RAX: ffffffffffffffda RBX: 00007fac82e89fa0 RCX: 00007fac82c70de9 [ 38.839855][ T722] RDX: 0000400000000080 RSI: 00000000c0185879 RDI: 0000000000000006 [ 38.847775][ T722] RBP: 00007fac82cf22a0 R08: 0000000000000000 R09: 0000000000000000 [ 38.855561][ T722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.863374][ T722] R13: 0000000000000000 R14: 00007fac82e89fa0 R15: 00007fffed031868 [ 38.871185][ T722] Modules linked in: [ 38.888838][ T722] ---[ end trace 9077e03a73073d6e ]--- [ 38.894150][ T722] RIP: 0010:ext4_trim_fs+0x1ec8/0x1ee0 [ 38.899450][ T722] Code: 80 e1 07 80 c1 03 38 c1 0f 8c fd e6 ff ff 48 8d bc 24 10 02 00 00 e8 c7 a5 c8 ff e9 eb e6 ff ff e8 2d 5f 6f ff e8 98 bb 98 ff <0f> 0b e8 91 bb 98 ff 0f 0b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f [ 38.918873][ T722] RSP: 0018:ffff8881dfc0f4e0 EFLAGS: 00010287 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 38.924786][ T722] RAX: ffffffff81cb8ed8 RBX: 0000000000000001 RCX: 0000000000080000 [ 38.933138][ T722] RDX: ffffc90002948000 RSI: 0000000000000299 RDI: 000000000000029a [ 38.940936][ T722] RBP: ffff8881dfc0f770 R08: ffffffff81cb77f4 R09: 0000000000000003 [ 38.966853][ T722] R10: ffffffffffffffff R11: dffffc0000000001 R12: dffffc0000000000 [ 39.000347][ T722] R13: 0000000000001fff R14: ffff8881e0a45000 R15: 0000000000000001 [ 39.008144][ T722] FS: 00007fac812db6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 39.041799][ T722] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.048210][ T722] CR2: 00007fff0578efe8 CR3: 00000001e13ea000 CR4: 00000000003406b0 [ 39.118550][ T356] syz-executor (356) used greatest stack depth: 20760 bytes left [ 39.129555][ T722] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.137386][ T722] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.145363][ T722] Kernel panic - not syncing: Fatal exception [ 39.151510][ T722] Kernel Offset: disabled [ 39.155635][ T722] Rebooting in 86400 seconds..