last executing test programs: 14.477047239s ago: executing program 0 (id=35): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x2048403, &(0x7f0000000080), 0x1, 0x648, &(0x7f0000000100)="$eJzs3c9vFNcdAPDvrNe/aW1Q1ZYeiqWqAqnFxgYqVFUq3BGiP27txcUGUQxG2FVjhISRyCVSbjkg5ZRDyH+RIHHlH8ghUpRTFAlFhEOIUNhoZnfs8XrXv3fXrD8fabLvzXjnvXH4+r15+95sAAfWWESMR8TRiLidRIwUjpWz/5ayH0p/7uWLe1fSLYlK5R/fJnHvfrJcPFdSex2uvfnHkequIz3ry11Yuntjem5u9k4tP7F48/bEwtLdk9dvTl+bvTZ7a+pPU+fOnjl7bvLUrq7vcCF98eF//z/y3qV/ffzh62Tyky8uJXE+vbpMel317+3fVcnp72wsKlWvivvT3+u5XZ57v/h+JP93siqp38G+lsZAb0T8Kkaip/B/cyTe/VtHKwa0VCWJvI0CDpxkR/E/sPcVAdos7wfk9/aN7oMbaHBHD7xtnl+oDkhVY783IvL4L2djfhED2djA0MtkzThPEhG7G5mrSst49vTSw3SLJuNwQGssP8hHuevb/ySLzdEYyHJDL0tr4r9U2NL9f99OoX2rybG6Q+If2mf5QUT8utb+98V24r8chfj/zw7Lz+L/0IuVmxHxDwAAAAAAADv35EJE/LHR/L9SjGXLggayj+ur838+7c3fNxwR5/eg/M0//y/lS/SSPSgOKHh+IeIvDef/5mEXoz213M+y+QC9ydXrc7OnIuLnEXEievvT/GTdeUuF9Mn3jzxqVn5x/l+6peU/e1qcXlz6ply3EHdmenHaXwPYvecPIn6Tzf89Vtuzdv5P2v4nDeb/pvF9e4tlHPn948vFfKVSuZ+nG8d/dS4w0FqVjyKON2z/VxvYZOPnc0xk/YGJvFew3m9fFxYa1RH/0Dlp+z/UPP5Xet4rz+tZ2N75+yLi9FK5WfhvIf4b9//7kn/2RGEpwTvTi4t3JiP6kovr909tr87QrfJ4yOMljf8Tv2s6/re2/1+Iw8GIWN5imb98M/xVs2Paf+icNP5nNu7/jya19j+y9n+lI7DlxNTj0c+yMzV4LtzlLbX/Z7I2/URtTzb+B9SU1u3ZaoB2pLoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8JYrRcShSErjK+lSaXw8YjgifhFDpbn5hcU/XJ3/362Z9Fj2/f+l/Jt+R6r5JP/+/9FCfqoufzoiDkfEBz2DWX78yvzcTKcvHgAAAAAAAAAAAAAAAAAAAPaJ4WzNf6W/fv1/6uueTtcOaLly7XWTeB9oR12A9irv+J2V/j2tCNB2O49/4G239fjvbWk9gPZrHv+vXlcyeT5Jike/a3G9gNbT/4eDa/P4H2y008eD0AUaxP9YJ+oBtNuGY3qPVlI+/Yeu5P4fAAAAAAC6yuFjTz5PImL5z4PZluqrHTPZH7pbqe4VODjM4YWDqzzf6RoAneIeH1hd1/9DpdHx5rP/k9ZUCAAAAAAAAAAAAABY5/hR6//hoNp43b+5/dDNNlj/3yj4PS4Aukjzr/7Q9kO3c48PbNbaW/8PAAAAAAAAAAAAAPvAwN0b03Nzs3cWlnaZiIgvK0nEbs/TJPHvBof+2qKyWppYnt4X1djTxJvWnLk3IvbHBbY7kT+Co4PV6PDfJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMVPAQAA//+2/DDv") bind$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) 14.343441361s ago: executing program 0 (id=38): gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000004000000ff0f", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r2], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f00000030c0)={0x765, {"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", 0x1000}}, 0x1006) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) madvise(&(0x7f00001c0000/0x2000)=nil, 0x2000, 0x11) syz_open_procfs(0xffffffffffffffff, 0x0) umount2(&(0x7f0000000100)='./file0/../file0\x00', 0xa) r5 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$binfmt_misc(r7, &(0x7f0000000440)="d39ba6350a70637c07877b453f747925af3b841daee66c16d76ec312d2c335e950a635ac13784835c9b83c6fd53e03e4ab33f2ff24126847f6352b50e91659b60d243934d47ef3b158b1932ac719a2929f98d6fb3088dc23f6062d647cf5adb71d79dbb0ed61ad2fcaaacd0116e94fee48db8c0ba06e3780023d5784d264f96a84f66dc858", 0x85) splice(r6, 0x0, r5, &(0x7f0000000140)=0x8008, 0x4, 0x0) 13.301746474s ago: executing program 0 (id=44): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x600, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r4, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) listen(r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r6, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r3}, 0x20) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000073c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 12.381498166s ago: executing program 0 (id=54): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) 11.439419499s ago: executing program 0 (id=62): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@nouid32}, {@minixdf}, {@jqfmt_vfsold}, {@nombcache}]}, 0x1, 0x504, &(0x7f0000001480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f0000000280)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x1, 0x4fa, &(0x7f0000000dc0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r1 = open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) fallocate(r1, 0x20, 0x0, 0x7000000) 11.050467854s ago: executing program 0 (id=65): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x3, 0xeeee0000, 0x1, 0xffffffffffffffff, 0xdf79a378d63dec2b}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) 7.903713155s ago: executing program 4 (id=92): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000300)="04a6", 0x2, 0x4c050, 0x0, 0x0) close(r0) 7.903561995s ago: executing program 4 (id=93): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req={0x8001, 0xb4f, 0x300, 0x1daf6}, 0x10) 7.886662046s ago: executing program 4 (id=94): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x6c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x23}}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}]}]}, 0x6c}}, 0x0) 7.857096326s ago: executing program 4 (id=95): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfe, 0x557, &(0x7f0000000280)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000900)='./file1\x00', 0x0) 7.719694808s ago: executing program 4 (id=97): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000180)={0x9, 0x0, 0x3, 0x7fff}) 7.659253109s ago: executing program 4 (id=100): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000017c0)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}}, 0x14}}, 0x2400c060) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x18) ioctl$TCFLSH(r3, 0x400455c8, 0x4) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0x80, 0x17, 0x9, 0x1, 0x0, 0x0, 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) 4.939528075s ago: executing program 3 (id=122): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 4.938990025s ago: executing program 3 (id=123): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)={[{@errors_continue}]}, 0x1, 0x4be, &(0x7f0000000a00)="$eJzs3c9vG1UeAPCv7SZN0uz2x+5h28O22lbqQtW4TdQkQr30hIRUQO2BYxUSNypx4ih2ShPlkEoc4I6gEifEoX8Agis9cewVeoIzUgUhJUKikpHHdppfLgbSWMp8PtLUb+ZN/X0v1vdp5o3HE0Bqnar9k4noj4iHEXG4vrp5h1P1l7WVpfHakolq9fqPmWS/1ZWl8eauzf93KCKWI6InIq69GvF2Znvc8sLi1FixWJhrrOcr07P58sLi+VvTY5OFycLM0MjgyOjw8MjopV3r63t3rrzx0S9X3v/sm/vfvZP54kytWf2Nuo392E31rnfF0Q3bDkTE5RcRrANyjf70droh/CW1z+9fEXE6yf/DkUs+TSANqtVq9Wn1YKvq5Sqwb2WTY+BMdiAi6uVsdmCgfgz/7+jLFkvlyrmbpfmZifqx8pHoyt68VSxcaJwrHImuTG39YlJ+tj64ZX0oIjkG/jDXm6wPjJeKE3s71AFbHNqS/09y9fwHUsIpP6SX/If0kv+QXvIf0kv+Q3rJf0gv+Q/pJf8hveQ/pJf8h/SS/5BKb169Wluqa4373yduL8xPlW6fnyiUpwam58cHxktzswOTpdJkcs/O9B+9X7FUmh2Kmfk7+UqhXMmXFxZvTJfmZyo3kvv6bxS69qRXQDuOnnzwKBMRy6/0JktNd6NOrsL+Vq1motP3IAOdkev0AAR0jKk/SC/n+MAOP9G7SU+ritndbwuwN7LPii1THNifzh53/Q/Syvw/pJf5f0gvx/iA+X9In2ynGwB0TH+L53/9Y8Ozuy5ExD8j4ttc18Hms76A/SD7Q6bVPOCZiO7Mr8klgu6IePeT6x/fGatU5i7Wtv+0vr1yr7F9sP2o3bvWfqBdzTxt5jEAkF6rK0vjzWUv4z6+Uj/5qMVdayz1mgONucme5Bpl32pm0zlKy3OWP2n5bkT8J+LJytJ4c2lGqD/vvH7lo281ty3+scZrpv4WSXsPJM9Nj7a/Tv134h/fEP+/G+Kf2IW/C6TBg9r4c2H7+HewkdOxnn+bx5/+XfruRHP8W9s2/mXXx79ci/HvZJsxLuffWm0Z/27EiR3jN+P1JLG2xq+17Wyb8b/+4OeHreqqn9bfZ6f4TbVSvjI9my8vLJ5PfkdusjAzNDI4Mjo8PDJ6KZ/MUeebM9XbPfrf06+e1/++FvF36n/3hja91Gb/f7v35blTz4n//9M7f/7Hdojf1BsRL7cZ/7XPv7/Wqq4Wf6JF/7Mt4mcilmvbhtqMf/3+49fb3BUA2APlhcWpsWKxMKegoKCwXuj0yAS8aM+SvtMtAQAAAAAAAAAAANq1F18n7nQfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD2g98DAAD//3wG2HA=") r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x8002, 0xc) pwritev(r0, &(0x7f0000000100)=[{0x0}], 0x1, 0x10000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x7) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r8, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4d3, 0x3c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@broadcast}]}, 0x104}}, 0x0) 4.323042713s ago: executing program 2 (id=127): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000680)={0xbd, 0x7f}, 0x2) 4.296321323s ago: executing program 2 (id=128): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r4, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000003880), 0x0, 0x12141, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="12000000020000"], 0x48) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2c8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0xfffffffd) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) 3.859847679s ago: executing program 2 (id=129): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@none}]}) 3.859549449s ago: executing program 2 (id=130): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x28, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10820, 0x400}, [@IFLA_GROUP={0x8, 0x1b, 0x74}]}, 0x28}}, 0x4004) 3.859128159s ago: executing program 3 (id=131): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0xf417, 0x2, 0x2, 0x15a}) io_uring_enter(r0, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) 3.834508519s ago: executing program 2 (id=132): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000480, &(0x7f00000003c0), 0x1, 0x773, &(0x7f0000000880)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) rt_tgsigqueueinfo(0x0, 0x0, 0x1c, &(0x7f0000000580)={0x40, 0x5e, 0x2}) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) symlink(&(0x7f0000002100)='./file0\x00', &(0x7f0000002140)='./file0\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 3.80483012s ago: executing program 3 (id=133): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x45, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x34, [{{0x9, 0x4, 0x0, 0xb9, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x800, 0x5, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x6, "209f5ac2"}]}}, 0x0}, 0x0) 2.857588042s ago: executing program 2 (id=136): ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000500)={0x0, 0xfffffffc, 0x12c0002, 0x2002, 0x188, &(0x7f00000000c0)="a89ee0b916e63cba6fbaeb576fd08fc82fbbd4845e4f1a396572b258dc220400779a3ca0d252ede0e7d71ed34b3ef9df34aeaa2fc8b83f3fef3814c3f8fd8d4834abf4aa74da11317c3fdbd486af0752cbfa68a6a7c732d9adacd688295a4a71cd2770f2ca36d2436b7b474e53933f7155d4457861b75713dac4bd48c568473fb17614dba46a16decf9f3ef28798ba901ce657534000d542c1ab43236e1cb9ef88f687c3c3e44dbb60409adcb92ba1b4bf1625a91ed65429cab03c8e034846599fb5306052525392c82ac018bedfa64c3f13160b6612ba7150af65225dcdb01de7be716d15f6833191f598feaab6850cc8f306d01ac3ef15b03f0539cc30bb78bcbc203e23c42e12516bca365b97e407dd3253654ab328d3771fe54f53bdea594cea3fd0d8367888cd3cbdde654c3b7411292bcafc8f05ca8d78b5e00709f860e7893c75163238ed2c911a8f85cf16d845d87a60aad967f548b781b717a592bf1f78fccede925380edda6067efeababa2c34823cf69c1a12a0909ba86bf49687f3f609d1593d6d813313d57661f5c9099f77883e3c0cce162edba23c27cdbf39893884d1ae468ecdb9e58d015abd49287d20c2ab9f07589c145403ba9b2fb7f1a5c84a53ff4bee6fc588b307bfc164fda953500f8b7f9abef010f1dac41b5d111b609243fe085f3aa5f26b60ac37560439bd6e0d0bd05dde51877091f04f5fb67e58f8c8a221180df35bc5e2b0274e9556c4e19de1f1623c74bd845950ceb0ea8331ced20ae9e2ffada2dd3712995f282a97f53df5d5c69991bfb589ce52bb774f989827c29e4f7d9d4d586ef6ee45b2cfa17494e5e6c2001ce8659feed5ea4f3db78ad23dcddd676de3f42289699373a7f796cf1a1c8b33b59c848f30a72afaa965484635f42a62374b84451c4605c704325c3c1de544c04c2e7b7b1d2928a3b72f4d1068965640e3564c94065d9f03a40480d2254238f3f3b724fe562e02c17c4c77d58664c4a1617c9b426b1143929610df29239f89e1f75e424424a519b7a9142993d036c2bd2c0cc9e162baf820d4ffad4da33ea23cf3d0931f1fc35cff230f12986cc438b9e29aceca31a680c009d1ac8b91cde131cbd2011122c33d59fc687f52ed91578599416da1410f401dff7a9c00630081e04605ae0d67bc50e534f28bfc0e0f98b5af41febbc39a8377ef0b54b866e6637d8feeb822a552862abaacd4c8fa3099ead394074bee4193d5a88aa1caa3150356f03b20b101efb6cee7b821c29a17ab91fe42f5c7fa41018f709b03e2905be9d9dbfb2c8c4e14a6ec5040a8726f56d3705267be004a34026d7b3190f8e9cf8c9ff7650d6339991dbf7ba1d35e6579c326cd531e14e911e82ef5ff886e72a0766531fd25073601983713fea715669121bcf400"}) r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d00000905820200020000000905"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xb, 0x0, 0x1, 0x4, 0x7, 0x40, 0x2, 0xe, 0x0, 0x1000}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.663882328s ago: executing program 3 (id=140): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000004000c800490"], 0x28}}, 0x0) 1.54114931s ago: executing program 3 (id=141): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000c0100000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000003c0)='htcp\x00', 0x5) 377.297445ms ago: executing program 1 (id=147): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x40, &(0x7f0000000340), 0x0, 0x4f7, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x4) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x187102, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') bind$unix(0xffffffffffffffff, &(0x7f0000000400)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) symlink(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) 226.654737ms ago: executing program 1 (id=148): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz1\x00', 0x3f}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, 0x0) 71.970539ms ago: executing program 1 (id=149): capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000003c0)={0x200000, 0x200000, 0x0, 0x0, 0x8, 0x1}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6a}}, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) 71.753519ms ago: executing program 1 (id=150): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea20}, [@call={0x85, 0x0, 0x0, 0x97}]}, &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 71.525079ms ago: executing program 1 (id=151): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r2, &(0x7f0000000100)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) dup2(r1, r2) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 0s ago: executing program 1 (id=152): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="cc1d69dbb5c318349797ae9aece3ec0880000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='skip_task_reaping\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) getpid() syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x40, &(0x7f0000000080)={[{@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x0, 0x4f7, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x187102, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r2, 0x0) chdir(&(0x7f0000000240)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@noload}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x562, &(0x7f0000000440)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x11, @desc1}}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.168' (ED25519) to the list of known hosts. [ 21.664767][ T23] audit: type=1400 audit(1746548607.740:81): avc: denied { mounton } for pid=329 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.666516][ T329] cgroup1: Unknown subsys name 'net' [ 21.687543][ T23] audit: type=1400 audit(1746548607.740:82): avc: denied { mount } for pid=329 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.693744][ T329] cgroup1: Unknown subsys name 'net_prio' [ 21.720980][ T329] cgroup1: Unknown subsys name 'devices' [ 21.727903][ T23] audit: type=1400 audit(1746548607.800:83): avc: denied { unmount } for pid=329 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.894613][ T329] cgroup1: Unknown subsys name 'hugetlb' [ 21.900429][ T329] cgroup1: Unknown subsys name 'rlimit' [ 22.071626][ T23] audit: type=1400 audit(1746548608.140:84): avc: denied { setattr } for pid=329 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=10282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.095445][ T23] audit: type=1400 audit(1746548608.140:85): avc: denied { mounton } for pid=329 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.116197][ T332] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.120356][ T23] audit: type=1400 audit(1746548608.150:86): avc: denied { mount } for pid=329 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.152597][ T23] audit: type=1400 audit(1746548608.200:87): avc: denied { relabelto } for pid=332 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.178017][ T23] audit: type=1400 audit(1746548608.200:88): avc: denied { write } for pid=332 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.203721][ T329] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.203776][ T23] audit: type=1400 audit(1746548608.230:89): avc: denied { read } for pid=329 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.238009][ T23] audit: type=1400 audit(1746548608.230:90): avc: denied { open } for pid=329 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.055226][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.062325][ T341] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.069758][ T341] device bridge_slave_0 entered promiscuous mode [ 23.087990][ T339] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.095213][ T339] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.102950][ T339] device bridge_slave_0 entered promiscuous mode [ 23.110401][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.117875][ T341] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.126319][ T341] device bridge_slave_1 entered promiscuous mode [ 23.143816][ T339] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.151186][ T339] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.159305][ T339] device bridge_slave_1 entered promiscuous mode [ 23.185257][ T343] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.192525][ T343] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.200270][ T343] device bridge_slave_0 entered promiscuous mode [ 23.210415][ T343] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.217557][ T343] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.225427][ T343] device bridge_slave_1 entered promiscuous mode [ 23.257082][ T340] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.264182][ T340] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.271578][ T340] device bridge_slave_0 entered promiscuous mode [ 23.281366][ T340] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.288547][ T340] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.296180][ T340] device bridge_slave_1 entered promiscuous mode [ 23.329865][ T342] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.337032][ T342] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.344611][ T342] device bridge_slave_0 entered promiscuous mode [ 23.383740][ T342] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.390815][ T342] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.398475][ T342] device bridge_slave_1 entered promiscuous mode [ 23.507465][ T339] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.514529][ T339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.521807][ T339] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.528887][ T339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.537986][ T343] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.545200][ T343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.552581][ T343] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.559593][ T343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.569941][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.577118][ T341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.584489][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.591501][ T341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.618395][ T340] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.625457][ T340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.632757][ T340] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.639992][ T340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.657399][ T342] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.664476][ T342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.671862][ T342] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.679091][ T342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.714647][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.722044][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.729183][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.737016][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.744363][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.751533][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.759087][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.766489][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.773892][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.781114][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.788469][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.799574][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.807425][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.839735][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.848323][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.855398][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.863385][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.871550][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.878598][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.886191][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.894502][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.901523][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.908933][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.917226][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.924382][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.931842][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.965672][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.974511][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.982575][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.990606][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.999891][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.007026][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.015605][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.024709][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.031724][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.039109][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.046644][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.054699][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.062884][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.069907][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.077394][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.085796][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.092865][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.108517][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.116792][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.125681][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.132832][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.152019][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.160921][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.169650][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.176800][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.184308][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.192906][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.201232][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.209522][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.217923][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.226181][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.234633][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.242508][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.273342][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.281727][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.291089][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.299436][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.307695][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.316407][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.325550][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.333529][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.341400][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.349614][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.357736][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.366072][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.384929][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.393398][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.415390][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.424125][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.432880][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.441019][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.449534][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.457937][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.466461][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.475071][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.483561][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.491778][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.502911][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.511351][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.522738][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.530765][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.542609][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.551044][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.561147][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.569533][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.594278][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.602789][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.613811][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.622208][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.622731][ T339] request_module fs-gadgetfs succeeded, but still no fs? [ 24.644948][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.653888][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.690261][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.703185][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.717779][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.727310][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.736061][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.744519][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.753140][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.761354][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.775427][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.784545][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.804964][ T367] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,sysvgroups,minixdf, [ 24.815688][ T374] ====================================================== [ 24.815688][ T374] WARNING: the mand mount option is being deprecated and [ 24.815688][ T374] will be removed in v5.15! [ 24.815688][ T374] ====================================================== [ 24.858989][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.869264][ T367] ext4 filesystem being mounted at /1/bus supports timestamps until (%ptR?) (0x7fffffff) [ 24.880113][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.893173][ T374] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 24.909045][ T374] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 24.918973][ T367] EXT4-fs error (device loop0): ext4_get_first_dir_block:3644: inode #12: block 32: comm syz.0.6: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 24.939786][ T374] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 24.944826][ T367] EXT4-fs (loop0): Remounting filesystem read-only [ 24.963107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.976251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.993140][ T367] EXT4-fs error (device loop0): ext4_get_first_dir_block:3647: inode #12: comm syz.0.6: directory missing '.' [ 24.994621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.014017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.031017][ T379] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 26.812156][ T23] kauditd_printk_skb: 37 callbacks suppressed [ 26.812446][ T23] audit: type=1400 audit(1746548611.800:128): avc: denied { map_create } for pid=383 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 27.578041][ T23] audit: type=1400 audit(1746548611.800:129): avc: denied { map_read map_write } for pid=383 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 27.613705][ T23] audit: type=1400 audit(1746548612.420:130): avc: denied { prog_run } for pid=383 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 27.664636][ T23] audit: type=1400 audit(1746548613.320:131): avc: denied { read } for pid=381 comm="syz.4.5" name="msr" dev="devtmpfs" ino=9407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 27.733999][ T23] audit: type=1400 audit(1746548613.320:132): avc: denied { open } for pid=381 comm="syz.4.5" path="/dev/cpu/0/msr" dev="devtmpfs" ino=9407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 28.273445][ T23] audit: type=1400 audit(1746548614.350:133): avc: denied { read } for pid=381 comm="syz.4.5" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 28.295919][ T23] audit: type=1400 audit(1746548614.350:134): avc: denied { open } for pid=381 comm="syz.4.5" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 28.372657][ T382] binder: 381:382 ioctl 4018620d 0 returned -22 [ 28.379067][ T23] audit: type=1400 audit(1746548614.450:135): avc: denied { ioctl } for pid=381 comm="syz.4.5" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 28.520334][ T388] syz.4.5 (388) used greatest stack depth: 23904 bytes left [ 28.563778][ T23] audit: type=1400 audit(1746548614.630:136): avc: denied { read write } for pid=396 comm="syz.3.13" name="raw-gadget" dev="devtmpfs" ino=10282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.587543][ T23] audit: type=1400 audit(1746548614.630:137): avc: denied { open } for pid=396 comm="syz.3.13" path="/dev/raw-gadget" dev="devtmpfs" ino=10282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.619678][ T401] device syzkaller0 entered promiscuous mode [ 28.667011][ T399] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=continue,,errors=continue [ 28.691336][ T399] ext4 filesystem being mounted at /1/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 28.832004][ T360] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.916810][ T412] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 28.966694][ T412] EXT4-fs (loop4): Unrecognized mount option "appraise" or missing value [ 29.042020][ T5] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 29.092086][ T360] usb 4-1: Using ep0 maxpacket: 8 [ 29.103815][ T417] EXT4-fs (loop4): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue [ 29.114071][ T417] ext4 filesystem being mounted at /2/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 29.212104][ T360] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 29.221204][ T360] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.230702][ T360] usb 4-1: config 0 descriptor?? [ 29.393327][ T423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17'. [ 29.402309][ T5] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.412872][ T5] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 29.483265][ T399] syz.2.12 (399) used greatest stack depth: 23840 bytes left [ 29.492121][ T360] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 29.506627][ T5] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 29.515872][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 29.523938][ T5] usb 2-1: SerialNumber: syz [ 30.524041][ T446] EXT4-fs (loop0): mounted filesystem without journal. Opts: inlinecrypt,errors=remount-ro,grpquota, [ 30.535466][ T446] ext4 filesystem being mounted at /6/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 30.582731][ T446] syz.0.24 (446) used greatest stack depth: 23648 bytes left [ 30.722048][ T360] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 30.756078][ T5] usb 2-1: 0:2 : does not exist [ 30.763209][ T360] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffe0 [ 30.792195][ T5] usb 2-1: USB disconnect, device number 2 [ 30.832084][ T360] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 30.983960][ T458] input: syz1 as /devices/virtual/input/input4 [ 31.041245][ T458] binder: 457:458 ioctl c00c620f 200000002480 returned -22 [ 31.112575][ T338] udevd[338]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.157224][ T463] syz.1.30 (463) used greatest stack depth: 22936 bytes left [ 31.213048][ T465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.31'. [ 31.562003][ T5] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 32.071994][ T5] usb 3-1: Using ep0 maxpacket: 16 [ 32.117855][ T23] kauditd_printk_skb: 45 callbacks suppressed [ 32.117866][ T23] audit: type=1400 audit(1746548618.190:183): avc: denied { create } for pid=491 comm="syz.4.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 32.145801][ T23] audit: type=1400 audit(1746548618.220:184): avc: denied { write } for pid=491 comm="syz.4.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 32.203026][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.219556][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.229915][ T5] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 32.238094][ T496] SELinux: failed to load policy [ 32.242938][ T23] audit: type=1400 audit(1746548618.300:185): avc: denied { load_policy } for pid=495 comm="syz.4.41" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 32.269619][ T5] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 32.279109][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.292315][ T5] usb 3-1: config 0 descriptor?? [ 32.301198][ T500] [ 32.303623][ T500] ********************************************************** [ 32.311045][ T500] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 32.318602][ T500] ** ** [ 32.318606][ T500] ** trace_printk() being used. Allocating extra memory. ** [ 32.318610][ T500] ** ** [ 32.318613][ T500] ** This means that this is a DEBUG kernel and it is ** [ 32.318616][ T500] ** unsafe for production use. ** [ 32.318620][ T500] ** ** [ 32.318623][ T500] ** If you see this message and you are not debugging ** [ 32.318627][ T500] ** the kernel, report this immediately to your vendor! ** [ 32.318630][ T500] ** ** [ 32.318634][ T500] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 32.318649][ T500] ********************************************************** [ 32.666139][ T23] audit: type=1400 audit(1746548618.700:186): avc: denied { create } for pid=502 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.686543][ T23] audit: type=1400 audit(1746548618.710:187): avc: denied { create } for pid=502 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 32.707759][ T23] audit: type=1400 audit(1746548618.720:188): avc: denied { mount } for pid=499 comm="syz.4.43" name="/" dev="ramfs" ino=13784 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 32.802242][ T360] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 32.824107][ T5] microsoft 0003:045E:07DA.0001: unbalanced collection at end of report description [ 32.835749][ T360] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0336: ffffffb9 [ 32.848942][ T23] audit: type=1400 audit(1746548618.920:189): avc: denied { read } for pid=507 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.868556][ T5] microsoft 0003:045E:07DA.0001: parse failed [ 32.875357][ T5] microsoft: probe of 0003:045E:07DA.0001 failed with error -22 [ 32.883378][ T360] asix: probe of 4-1:0.0 failed with error -71 [ 32.895710][ T360] usb 4-1: USB disconnect, device number 2 [ 33.075169][ T359] usb 3-1: USB disconnect, device number 2 [ 33.321595][ T524] capability: warning: `syz.4.53' uses deprecated v2 capabilities in a way that may be insecure [ 33.701821][ T5] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 33.734062][ T528] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,data_err=ignore,,errors=continue [ 33.752596][ T23] audit: type=1400 audit(1746548619.830:190): avc: denied { mount } for pid=527 comm="syz.4.55" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.778887][ T23] audit: type=1400 audit(1746548619.850:191): avc: denied { setattr } for pid=527 comm="syz.4.55" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 33.800574][ T23] audit: type=1400 audit(1746548619.860:192): avc: denied { unmount } for pid=340 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.893725][ T535] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support! [ 33.904438][ T535] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 33.914625][ T535] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 33.952096][ T5] usb 2-1: Using ep0 maxpacket: 32 [ 34.044533][ T542] EXT4-fs (loop4): 1 orphan inode deleted [ 34.050306][ T542] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 34.059450][ T542] ext4 filesystem being mounted at /15/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 34.069968][ T24] cfg80211: failed to load regulatory.db [ 34.072693][ T5] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 34.090338][ T5] usb 2-1: config 0 has no interface number 0 [ 34.098568][ T5] usb 2-1: config 0 interface 51 has no altsetting 0 [ 34.282060][ T360] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 34.292252][ T5] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 34.305463][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.314460][ T5] usb 2-1: Product: syz [ 34.319408][ T5] usb 2-1: Manufacturer: syz [ 34.324318][ T5] usb 2-1: SerialNumber: syz [ 34.331248][ T5] usb 2-1: config 0 descriptor?? [ 34.356449][ T553] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 34.374807][ T5] usb 2-1: Ignoring serial port reserved for JTAG [ 34.385128][ T553] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nouid32,minixdf,jqfmt=vfsold,nombcache,,errors=continue [ 34.398360][ T553] ext4 filesystem being mounted at /14/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 34.466461][ T553] loop_set_status: loop0 () has still dirty pages (nrpages=2) [ 34.537782][ T561] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 34.547055][ T360] usb 3-1: Using ep0 maxpacket: 16 [ 34.552204][ T561] ext4 filesystem being mounted at /16/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 34.623736][ T108] usb 2-1: USB disconnect, device number 3 [ 34.636923][ T561] syz.4.64 (561) used greatest stack depth: 20016 bytes left [ 34.641840][ T341] EXT4-fs error (device loop0): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /14/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 34.682184][ T360] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 34.759739][ T360] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 34.772045][ T360] usb 3-1: config 0 interface 0 has no altsetting 0 [ 34.781371][ T360] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 34.792051][ T360] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.814773][ T360] usb 3-1: config 0 descriptor?? [ 34.832068][ T540] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 35.174011][ T572] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,,errors=continue [ 35.184640][ T572] ext4 filesystem being mounted at /12/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 35.247930][ T572] EXT4-fs error (device loop1): ext4_validate_block_bitmap:409: comm syz.1.68: bg 0: block 18: invalid block bitmap [ 35.603141][ T360] hid (null): bogus close delimiter [ 35.615534][ T360] hid (null): report_id 396546218 is invalid [ 35.622838][ T360] hid (null): bogus close delimiter [ 35.630816][ T360] hid (null): unknown global tag 0xc [ 35.636595][ T360] hid (null): report_id 1196726220 is invalid [ 35.645714][ T360] hid (null): unknown global tag 0xe [ 35.651047][ T360] hid (null): global environment stack underflow [ 35.810295][ T450] usb 3-1: USB disconnect, device number 3 [ 36.536575][ T596] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 36.558063][ T596] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 36.677430][ T605] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 36.694222][ T603] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,sysvgroups,i_version, [ 36.710730][ T603] ext4 filesystem being mounted at /8/bus supports timestamps until (%ptR?) (0x7fffffff) [ 36.866971][ T610] EXT4-fs (loop1): Test dummy encryption mode enabled [ 36.874043][ T610] EXT4-fs (loop1): Unrecognized mount option "uid>00000000000000000000" or missing value [ 37.481226][ T23] kauditd_printk_skb: 19 callbacks suppressed [ 37.481238][ T23] audit: type=1400 audit(1746548623.550:210): avc: denied { accept } for pid=628 comm="syz.4.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.608737][ T23] audit: type=1400 audit(1746548623.676:211): avc: denied { write } for pid=635 comm="syz.1.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 37.629764][ T636] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=636 comm=syz.1.89 [ 37.650228][ T636] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=636 comm=syz.1.89 [ 37.718254][ T23] audit: type=1400 audit(1746548623.778:212): avc: denied { mounton } for pid=638 comm="syz.1.90" path="/19/file0" dev="tmpfs" ino=15495 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 37.903365][ T649] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 37.927975][ T649] EXT4-fs warning (device loop4): ext4_empty_dir:3059: inode #11: comm syz.4.95: directory missing '..' [ 38.224348][ T660] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,sysvgroups,minixdf, [ 38.235531][ T660] ext4 filesystem being mounted at /20/bus supports timestamps until (%ptR?) (0x7fffffff) [ 38.514993][ T666] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e802c118, mo2=0002] [ 38.526621][ T666] System zones: 0-2, 18-18, 34-34 [ 38.539391][ T666] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm syz.2.101: bg 0: block 248: padding at end of block bitmap is not set [ 38.568990][ T666] Quota error (device loop2): write_blk: dquota write failed [ 38.584592][ T666] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 38.605570][ T666] EXT4-fs (loop2): 1 truncate cleaned up [ 38.618209][ T666] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,noload,debug,,errors=continue [ 38.675513][ T666] ext4 filesystem being mounted at /11/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 38.696492][ T674] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 38.722048][ T674] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 39.004921][ T377] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.306305][ T686] tc_dump_action: action bad kind [ 39.336533][ T23] audit: type=1400 audit(1746548625.264:213): avc: denied { bind } for pid=687 comm="syz.1.107" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.357395][ T23] audit: type=1400 audit(1746548625.264:214): avc: denied { node_bind } for pid=687 comm="syz.1.107" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 39.416162][ T692] raw_sendmsg: syz.1.109 forgot to set AF_INET. Fix it! [ 39.441456][ T683] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 39.638158][ T23] audit: type=1400 audit(1746548625.550:215): avc: denied { bind } for pid=703 comm="syz.2.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.638690][ T704] Zero length message leads to an empty skb [ 39.658954][ T23] audit: type=1400 audit(1746548625.568:216): avc: denied { read append } for pid=701 comm="syz.3.114" name="rtc0" dev="devtmpfs" ino=10287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 39.726315][ T707] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 39.740247][ T450] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 39.750669][ T23] audit: type=1400 audit(1746548625.568:217): avc: denied { open } for pid=701 comm="syz.3.114" path="/dev/rtc0" dev="devtmpfs" ino=10287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 39.847882][ T710] EXT4-fs (loop2): Ignoring removed bh option [ 39.854229][ T710] EXT4-fs (loop2): can't mount with dioread_nolock if block size != PAGE_SIZE [ 40.000200][ T450] usb 2-1: Using ep0 maxpacket: 8 [ 40.032604][ T713] loop3: p1 < > p3 [ 40.039452][ T713] loop3: p3 size 134217728 extends beyond EOD, truncated [ 40.195397][ T450] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 40.203734][ T450] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 40.220398][ T450] usb 2-1: config 0 has no interface number 0 [ 40.227003][ T450] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 40.241626][ T450] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 40.404969][ T372] udevd[372]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 40.415162][ T338] udevd[338]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 40.424927][ T450] usb 2-1: config 0 interface 52 has no altsetting 0 [ 40.520782][ T450] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 40.529924][ T450] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 40.549195][ T450] usb 2-1: Manufacturer: syz [ 40.581467][ T450] usb 2-1: config 0 descriptor?? [ 40.852781][ T730] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=continue,,errors=continue [ 40.863453][ T730] ext4 filesystem being mounted at /31/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 41.115186][ T739] mip6: mip6_destopt_init_state: spi is not 0: 3540254720 [ 41.182301][ T450] Bluetooth: hci0: command 0x1003 tx timeout [ 41.214225][ T677] Bluetooth: hci0: sending frame failed (-49) [ 41.347624][ T744] netlink: 44 bytes leftover after parsing attributes in process `syz.2.126'. [ 41.356742][ T744] netlink: 12 bytes leftover after parsing attributes in process `syz.2.126'. [ 41.365973][ T744] netlink: 16 bytes leftover after parsing attributes in process `syz.2.126'. [ 41.374932][ T744] netlink: 16 bytes leftover after parsing attributes in process `syz.2.126'. [ 41.821264][ T754] cgroup1: none used incorrectly [ 41.974545][ T760] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 42.210552][ T359] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 42.600486][ T359] usb 4-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.610558][ T359] usb 4-1: config 0 interface 0 has no altsetting 0 [ 42.617580][ T359] usb 4-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 42.626910][ T359] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.639271][ T359] usb 4-1: config 0 descriptor?? [ 42.722471][ T126] usb 2-1: USB disconnect, device number 4 [ 42.767351][ T769] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 43.039940][ T772] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 43.049101][ T772] ext4 filesystem being mounted at /27/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 43.165961][ T359] wacom 0003:056A:0045.0003: Unknown device_type for 'HID 056a:0045'. Assuming pen. [ 43.186629][ T359] wacom 0003:056A:0045.0003: hidraw0: USB HID v8.00 Device [HID 056a:0045] on usb-dummy_hcd.3-1/input0 [ 43.208487][ T359] input: Wacom Intuos2 12x18 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0045.0003/input/input5 [ 43.223227][ T23] kauditd_printk_skb: 52 callbacks suppressed [ 43.223238][ T23] audit: type=1400 audit(1746548628.854:270): avc: denied { read } for pid=149 comm="acpid" name="event3" dev="devtmpfs" ino=16138 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.252116][ T126] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 43.264225][ T23] audit: type=1400 audit(1746548628.854:271): avc: denied { open } for pid=149 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=16138 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.296680][ T779] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 43.308748][ T23] audit: type=1400 audit(1746548628.928:272): avc: denied { ioctl } for pid=149 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=16138 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.344004][ T23] audit: type=1400 audit(1746548628.946:273): avc: denied { mount } for pid=778 comm="syz.1.137" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 43.379355][ T23] audit: type=1400 audit(1746548628.983:274): avc: denied { write } for pid=778 comm="syz.1.137" name="event2" dev="devtmpfs" ino=10390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 43.410768][ T359] usb 4-1: USB disconnect, device number 3 [ 43.435138][ T450] Bluetooth: hci0: command 0x1001 tx timeout [ 43.441272][ T677] Bluetooth: hci0: sending frame failed (-49) [ 43.449764][ T23] audit: type=1400 audit(1746548628.983:275): avc: denied { open } for pid=778 comm="syz.1.137" path="/dev/input/event2" dev="devtmpfs" ino=10390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 43.475036][ T23] audit: type=1400 audit(1746548628.983:276): avc: denied { ioctl } for pid=778 comm="syz.1.137" path="/dev/input/event2" dev="devtmpfs" ino=10390 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 43.501739][ T23] audit: type=1400 audit(1746548629.066:277): avc: denied { unmount } for pid=339 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 43.705580][ T126] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 43.714590][ T126] usb 3-1: config 1 has no interface number 0 [ 43.720948][ T126] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.732081][ T126] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 43.741324][ T126] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x4 has invalid maxpacket 26301, setting to 1024 [ 44.150131][ T126] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 44.159193][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.167230][ T23] audit: type=1400 audit(1746548629.712:278): avc: denied { ioctl } for pid=790 comm="syz.3.140" path="socket:[16246]" dev="sockfs" ino=16246 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.192345][ T126] usb 3-1: Product: syz [ 44.196711][ T126] usb 3-1: Manufacturer: syz [ 44.201315][ T126] usb 3-1: SerialNumber: syz [ 44.485574][ T108] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 44.713662][ T23] audit: type=1400 audit(1746548630.239:279): avc: denied { unmount } for pid=339 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 44.812262][ T795] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 44.821508][ T795] ext4 filesystem being mounted at /31/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 44.860104][ T795] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 44.908130][ T108] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 44.916306][ T108] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 44.926631][ T108] usb 4-1: config 0 has no interface number 0 [ 44.933274][ T108] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 44.943708][ T108] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 45.040256][ T806] erofs: (device loop1): erofs_read_superblock: blkszbits 9 isn't supported on this platform [ 45.124888][ T108] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 45.134207][ T108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.142487][ T108] usb 4-1: Product: syz [ 45.146840][ T108] usb 4-1: Manufacturer: syz [ 45.151425][ T108] usb 4-1: SerialNumber: syz [ 45.159798][ T108] usb 4-1: config 0 descriptor?? [ 45.190310][ T126] cdc_ncm 3-1:1.1: bind() failure [ 45.228356][ T806] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 45.250330][ T806] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 45.259536][ T806] EXT4-fs (loop1): orphan cleanup on readonly fs [ 45.266337][ T806] EXT4-fs error (device loop1): ext4_free_blocks:4795: comm syz.1.146: Freeing blocks not in datazone - block = 0, count = 4096 [ 45.280331][ T806] EXT4-fs (loop1): 1 orphan inode deleted [ 45.286064][ T806] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=continue,barrier=0x0000000000000004,nouid32,init_itable=0x0000000000007ab4,jqfmt=vfsv0,,errors=continue [ 45.324004][ T806] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 45.412178][ T126] usb 3-1: USB disconnect, device number 4 [ 45.425318][ T811] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 45.437099][ T811] ext4 filesystem being mounted at /36/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 45.460735][ T811] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 45.578605][ T816] input: syz1 as /devices/virtual/input/input8 [ 45.688172][ T126] Bluetooth: hci0: command 0x1009 tx timeout [ 45.798132][ T825] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x0000000000000002, [ 45.810446][ T825] ext4 filesystem being mounted at /41/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 45.863506][ T825] ------------[ cut here ]------------ [ 45.868993][ T825] kernel BUG at fs/ext4/ext4.h:2985! [ 45.874724][ T825] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 45.880803][ T825] CPU: 1 PID: 825 Comm: syz.1.152 Not tainted 5.4.292-syzkaller-00021-gcd8e74fa0fa3 #0 [ 45.890416][ T825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 45.900610][ T825] RIP: 0010:ext4_trim_fs+0x1cc3/0x1cd0 [ 45.906159][ T825] Code: 66 fe ff ff 89 d1 80 e1 07 38 c1 0f 8c 79 fe ff ff 48 8b 7c 24 68 e8 2c 6e cc ff 48 8b 54 24 68 e9 65 fe ff ff e8 4d 74 9e ff <0f> 0b e8 46 74 9e ff 0f 0b 0f 1f 40 00 55 48 89 e5 41 57 41 56 41 [ 45.925762][ T825] RSP: 0018:ffff8881cbfcf540 EFLAGS: 00010287 [ 45.931828][ T825] RAX: ffffffff81c10a93 RBX: ffff8881eb8f0000 RCX: 0000000000080000 [ 45.939794][ T825] RDX: ffffc90000944000 RSI: 0000000000000035 RDI: 0000000000000036 [ 45.947765][ T825] RBP: ffff8881cbfcf790 R08: 0000000000000004 R09: 0000000000000003 [ 45.955732][ T825] R10: fffffbfff0caceb0 R11: 1ffffffff0caceb0 R12: dffffc0000000000 [ 45.963788][ T825] R13: ffff8881eb8f23f0 R14: 0000000000000001 R15: 0000000000000880 [ 45.971755][ T825] FS: 00007f153deba6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 45.980677][ T825] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.987254][ T825] CR2: 00007f1535b19000 CR3: 00000001ecbad000 CR4: 00000000003406a0 [ 45.995219][ T825] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 46.003188][ T825] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 46.011179][ T825] Call Trace: [ 46.014475][ T825] ? selinux_capable+0x29c/0x380 [ 46.019405][ T825] ? selinux_capset+0xf0/0xf0 [ 46.024073][ T825] ? __this_cpu_preempt_check+0x1c/0x20 [ 46.029614][ T825] ? check_preemption_disabled+0x9b/0x300 [ 46.035329][ T825] ? cap_capable+0x19c/0x220 [ 46.039913][ T825] ? ext4_group_add_blocks+0xa50/0xa50 [ 46.045364][ T825] ? security_capable+0x87/0xb0 [ 46.050215][ T825] ? __kasan_check_write+0x14/0x20 [ 46.055320][ T825] ? _copy_from_user+0xaa/0xe0 [ 46.060084][ T825] ext4_ioctl+0x2069/0x3aa0 [ 46.064581][ T825] ? _raw_spin_unlock_irq+0x4e/0x70 [ 46.069781][ T825] ? finish_task_switch+0x12e/0x590 [ 46.074985][ T825] ? asan.module_dtor+0x20/0x20 [ 46.079839][ T825] ? __schedule+0xa57/0x12a0 [ 46.084427][ T825] ? __sched_text_start+0x8/0x8 [ 46.089271][ T825] ? check_preemption_disabled+0x9b/0x300 [ 46.094988][ T825] ? enqueue_task_fair+0x1a90/0x1bd0 [ 46.100269][ T825] ? debug_smp_processor_id+0x20/0x20 [ 46.105682][ T825] ? __kasan_check_read+0x11/0x20 [ 46.110713][ T825] ? preempt_schedule_common+0xbe/0xf0 [ 46.116184][ T825] ? preempt_schedule+0xa7/0xb0 [ 46.121035][ T825] ? schedule_preempt_disabled+0x20/0x20 [ 46.126671][ T825] ? tracing_record_taskinfo+0x7c/0x230 [ 46.132225][ T825] ? probe_sched_wakeup+0x64/0x80 [ 46.137254][ T825] ? avc_has_extended_perms+0x9d0/0xe20 [ 46.142796][ T825] ? try_to_wake_up+0x978/0x1580 [ 46.147731][ T825] ? avc_flush+0x220/0x220 [ 46.152150][ T825] ? wake_up_q+0x95/0xd0 [ 46.156400][ T825] ? asan.module_dtor+0x20/0x20 [ 46.161360][ T825] do_vfs_ioctl+0x753/0x13f0 [ 46.165948][ T825] ? ioctl_preallocate+0x1c0/0x1c0 [ 46.171051][ T825] ? check_preemption_disabled+0x118/0x300 [ 46.176975][ T825] ? __fget+0x3be/0x440 [ 46.181134][ T825] ? fget_many+0x30/0x30 [ 46.185370][ T825] ? switch_fpu_return+0x197/0x3b0 [ 46.190478][ T825] ? fpu__clear+0x3b0/0x3b0 [ 46.195162][ T825] ? task_work_run+0x15e/0x170 [ 46.199922][ T825] ? security_file_ioctl+0x84/0xa0 [ 46.205027][ T825] __x64_sys_ioctl+0xe1/0x120 [ 46.209699][ T825] do_syscall_64+0xcf/0x170 [ 46.214202][ T825] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 46.220090][ T825] RIP: 0033:0x7f153f851969 [ 46.224508][ T825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.244211][ T825] RSP: 002b:00007f153deba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 46.252740][ T825] RAX: ffffffffffffffda RBX: 00007f153fa78fa0 RCX: 00007f153f851969 [ 46.260707][ T825] RDX: 0000200000000000 RSI: 00000000c0185879 RDI: 0000000000000007 [ 46.268789][ T825] RBP: 00007f153f8d3ab1 R08: 0000000000000000 R09: 0000000000000000 [ 46.276841][ T825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.285243][ T825] R13: 0000000000000000 R14: 00007f153fa78fa0 R15: 00007ffdf66ab968 [ 46.293218][ T825] Modules linked in: [ 46.321844][ T825] ---[ end trace 76dc22ecce8e8a20 ]--- [ 46.322006][ T830] EXT4-fs error (device loop1): ext4_dx_csum_verify:486: inode #2: comm syz.1.152: dir seems corrupt? Run e2fsck -D. [ 46.327591][ T825] RIP: 0010:ext4_trim_fs+0x1cc3/0x1cd0 [ 46.345500][ T825] Code: 66 fe ff ff 89 d1 80 e1 07 38 c1 0f 8c 79 fe ff ff 48 8b 7c 24 68 e8 2c 6e cc ff 48 8b 54 24 68 e9 65 fe ff ff e8 4d 74 9e ff <0f> 0b e8 46 74 9e ff 0f 0b 0f 1f 40 00 55 48 89 e5 41 57 41 56 41 [ 46.365447][ T825] RSP: 0018:ffff8881cbfcf540 EFLAGS: 00010287 [ 46.372122][ T825] RAX: ffffffff81c10a93 RBX: ffff8881eb8f0000 RCX: 0000000000080000 [ 46.380192][ T825] RDX: ffffc90000944000 RSI: 0000000000000035 RDI: 0000000000000036 [ 46.388859][ T825] RBP: ffff8881cbfcf790 R08: 0000000000000004 R09: 0000000000000003 [ 46.389716][ T830] EXT4-fs (loop1): Remounting filesystem read-only [ 46.397440][ T825] R10: fffffbfff0caceb0 R11: 1ffffffff0caceb0 R12: dffffc0000000000 [ 46.403528][ T830] EXT4-fs error (device loop1): dx_probe:782: inode #2: comm syz.1.152: Directory index failed checksum [ 46.422806][ T825] R13: ffff8881eb8f23f0 R14: 0000000000000001 R15: 0000000000000880 [ 46.430909][ T825] FS: 00007f153deba6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 46.439933][ T825] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.446816][ T825] CR2: 00007f153de98f98 CR3: 00000001ecbad000 CR4: 00000000003406b0 [ 46.454846][ T825] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 46.462907][ T825] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 46.470962][ T825] Kernel panic - not syncing: Fatal exception [ 46.477234][ T825] Kernel Offset: disabled [ 46.481562][ T825] Rebooting in 86400 seconds..