last executing test programs: 8.212173888s ago: executing program 1 (id=300): io_setup(0x490, &(0x7f0000000000)) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) 7.87088026s ago: executing program 1 (id=306): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$tipc(0x1e, 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fe", 0xb}], 0x1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, 0x0, 0x0) splice(r7, 0x0, r2, 0x0, 0x10000008ebc, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x300c056, &(0x7f0000000d80)={[{@noload}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55a, &(0x7f0000000480)="$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") 6.835287027s ago: executing program 3 (id=316): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) 6.834836408s ago: executing program 3 (id=317): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 6.782113031s ago: executing program 3 (id=319): pidfd_send_signal(0xffffffffffffffff, 0x21, 0x0, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)={0x39, 0x6, 0x0, {0x0, 0x6, 0x10, 0x0, 'veth1_virt_wifi\x00'}}, 0x39) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400feffb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$packet(0xffffffffffffffff, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, 0x0, 0x1, 0xd8, 0x6, @multicast}, 0x14) sendto$packet(r1, &(0x7f0000000300)="a9175ad6bc90f82565382deec8ff1976eb46525bffb6737e066d63d79a3c3484cab99f43139e6dc1e8a207dd186cfd4dacd3a1540820b16b378e6f0e415584a00788a9d2da749ede", 0x48, 0x801, &(0x7f0000000000)={0x11, 0x9, 0x0, 0x1, 0x4, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x2, 0x53a, &(0x7f0000000c80)="$eJzs3c9vI1cdAPDvOPHmR7NNCj0AArqUwoJW6yTeNqp6YXsBoaoSouLEYRsSN4pir6PYK5qwh+yReyVW4gT8B9w4IPXEgRs3kDj0Ug5IC6xADRIHoxlPEjexE7dJ7ST+fKTJzHszO9/34n3veV5kvwBG1o2I2I2IaxHxdkTM5vlJvsXd9pZe99HThyt7Tx+uJNFqvfXPJDuf5kXHv0k9k99zMiJ++L2InyTH4za2dzaWq9XKVp6eb9Y25xvbO7fXC3lOeWlxaeHVO6+Uz62uL9R+++S762/86Pe/+8qHf9r99s/SYs38/Hp2rrMeh4pnjpnk95npyBuPiDfOfOeLYzz//8Plk7a2z0XEi1n7n42x7NUEAK6yVms2WrOdaQDgqkuf/2ciKZTyuYCZKBRKpfYc3vMxXajWG81bs/UH91cjm8Oai2LhnfVqZSGfK5yLYpKmF7Pjw3T5Y+n3Knci4rmIeG9iKjtfWqlXV4f5xgcARtgzR8b//0y0x/9OZ/8rGABw4UwOuwAAwMB1jP9zwywHADA4nv8BYPR8gvHfpwMB4Irw/A8Ao8f4DwCj59Tx/9FgygEADMQP3nwz3Vp77e+/3v+m7turlcZGqfZgpbRS39osrdXra9VKaaXVOu1+1Xp9c/Hlg2Rje+derf7gfvPeem15rXKv4rsEAGD4nnvh/b+kg/7ua1PZFh1rORir4WorDLsAwNCMDbsAwND4PA+Mrj6e8U0DwBXXZYnetnyCIOl1wWOLv8JldfOL5v9hVJ1l/t/cAVxun27+/zvnXg5g8IzhMLparcSa/wAwYszxAz3//p/r+RUhj/u4+d1PXh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4DGayLSmUsrXAd9OfhVIp4npEzEUxeWe9WlmIiGcj4s8TxYk0vTjsQgMAZ1T4e5Kv/3Vz9qWZo2evJf+dyPYR8dNfvvWLd5ebza3FNP9fB/nNx2n+VHOrfG0YFQAAOu2vu/nBYVY2fpfzfceD/EdPH67sb4Ms4pPXI2JyKou/l2/tM+Mxnu0noxgR0/9O8nRb+n5l7Bzi7z6KiC/s138y3u2IMJPNgbRXPj0aP419/dzjd/7+j8YvfKy+hexcui9mv4vPx5HCAad6//V2P5m3vbSJ5+2vEDeyfff2P5n1UGeX9n9pc9071v8VDvq/sWPxk6zN3zhIn1ySJy//4fvHMluz7XOPIr403i1+chA/6d7/Fl/qs44ffPmrL/Y61/pVxM2u9d9fkbqWdbPzzdrmfGN75/Z6bXmtsla5Xy4vLS4tvHrnlfJ8Nkfd/vnHbjH+8dqtZ3vFT+s/3SP+5Mn1j2/0Wf9f/+/tH3/thPjf+nr31//5E+KnY+I3+4y/PH235/LdafzVHvU/5fWPW33G//BvO6t9XgoADEBje2djuVqtbJ1ykL7XPO0aB/0fpM/2F6AY2UHsRpzXDbNJiYjoek36jvpiVPmzOkiGFv03533DYfdMwGftsNH3vuavgywQAAAAAAAAAAAAAABwTGN7Z2Oi+6e1zu1g2HUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6vp/AAAA//9W1cZQ") socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r1, &(0x7f0000000080)={0x11, 0xf8}, 0x14) 5.850610081s ago: executing program 0 (id=322): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000180)='./mnt\x00', 0x0, &(0x7f00000001c0)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}, {@nomblk_io_submit}, {@commit}]}, 0x1, 0x241, &(0x7f00000007c0)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x108b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x8) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) setsockopt$inet6_group_source_req(r0, 0x29, 0x12, &(0x7f0000000000)={0x4, {{0xa, 0x0, 0x0, @mcast2, 0xb}}, {{0xa, 0x4e21, 0x1, @empty, 0x5}}}, 0x108) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="30000000100001080000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b0000"], 0x30}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000007000020080000000000418a000000000000005f615f00"], 0x0, 0x2b, 0x0, 0x0, 0x0, 0x10000, @value=r1}, 0x28) close(0x3) 5.70423304s ago: executing program 2 (id=324): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@resgid}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") mkdir(0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1588c1000300000008001b000000000008000d0003"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 5.671429453s ago: executing program 1 (id=326): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000080)=0x3, 0x4) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f00000001c0)=0xffffffff, 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000800000000000000", @ANYBLOB, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 4.074819806s ago: executing program 0 (id=327): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) fstat(r1, 0x0) 4.073976326s ago: executing program 1 (id=328): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) recvmmsg(r4, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1c9, 0x12) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd70000000000021040000180001801400020064756d6d7930"], 0x2c}}, 0x880) 3.522175842s ago: executing program 2 (id=330): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f00000000c0)={[{@errors_remount}, {@nobh}]}, 0x1, 0x513, &(0x7f0000000380)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002700)=ANY=[], 0x1015, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sync() chmod(&(0x7f0000000040)='./file0\x00', 0xce) bpf$MAP_CREATE(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x502002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x800000000003) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000080)={0xed, 0x0, 0xfffffffffffffffe}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = memfd_create(&(0x7f0000000cc0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\xd5\xfd\xa9\r\xac7V\xf2\x93A\x94k\xcd\t\x00\x90\xbe\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\agB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\x9f#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xd8\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x96!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2_\x16\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0V\\w\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x17fNo\xb3\x1d\xbb\xcaI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%UH\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\x02Y\x8e\xae\xf5m\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5\x04\x00\x00\x00\x00\x00\x00\x00\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9\xcfJ\t}\xd4:\xe4\xbe\x1c\x10\n\xc6hPO\xeagxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!D\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\xca\xc5kz\x8e9\xd6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa3d5V\x80\x1a\x90\x10\xe3\xdf%\xfdz\xf7\x9aE\xe6\x9b\x00'/993, 0x3) r5 = syz_io_uring_setup(0x783a, 0x0, &(0x7f0000000300), &(0x7f0000000440)) syz_io_uring_setup(0xeb, &(0x7f0000000480)={0x0, 0x7dbf, 0x8, 0x0, 0x1f0, 0x0, r5}, &(0x7f0000000500), &(0x7f0000000540)) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x6, 0x1000000}) fcntl$addseals(r4, 0x409, 0xb) openat$snapshot(0xffffffffffffff9c, 0x0, 0x80, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.358000982s ago: executing program 0 (id=332): openat(0xffffffffffffff9c, 0x0, 0x42, 0x85) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, 0x0) 3.342644243s ago: executing program 0 (id=333): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000100), 0x4) r5 = fcntl$dupfd(r4, 0x406, r4) setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f0000000040)=0x5, 0x4) write$cgroup_pid(r5, 0x0, 0x0) read$FUSE(r5, &(0x7f0000002540)={0x2020}, 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[{@fat=@flush}, {@utf8}, {@numtail}, {@fat=@quiet}, {@fat=@nfs_nostale_ro}, {@uni_xlateno}, {@fat=@nocase}, {@uni_xlate}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@shortname_lower}, {@uni_xlateno}, {@shortname_mixed}, {@uni_xlate}, {@shortname_win95}]}, 0x26, 0x33e, &(0x7f0000000800)="$eJzs3U1oXNUXAPAzfUkmDfSfLP5QdDW6E6Q0ERe6SigVilloZfBrY7CJ1ryxkMGBuMh0NopLxY2gK3dd6LJrcSHizoVbK5SquLG7QotPZt58vPmITcCZiv5+i3A495655725ZF4CuXltPXYvzcfO7du3YnGxFHPr59bjTilW4sTNJHJXAwD4N7mTZfF7lrv/7I+WetHClPsCAKan8/n/xqlBovwguwEAZuGIP/8/NzF7ZWptAQBTNPb5/+jQ8Miv+ecimWVzAMBUvPDyK89ubEZcrFQWI2rvN6qNajw9GN/YicVIYzvOxnLci8gfFPKnhfbXZy5snj9baft5JartikY1otZsVPMnhY0kLkca5ViN5Vjp1mf9+qRdv9qpr0TE1WZn/aiVGtX5WMrXv/zjUmzHWizH/8fqIy5snl+rdF+gWuvVNyNasdi7iHb/Z2I5vn89rkQal6JdO+j/YLVSOZdtDtU3rpU78wAAAAAAAAAAAAAAAAAAAAAAYBrOVPpW+uffZLVm472LhQnNGBrvnO+TD2/sdM73aeXnA2Xl3uk8HySj5wMNn8/TqM7FiQd65QAAAAAAAAAAAAAAAAAAAPDPUd9fiK003d6r77+7Wwyahczb337x9ckYnfNWMsjEXP5yQ3O6uShUJdEvz/rlWTI0pxskEYPJ1673Oy7OKfevYqy8HZTHhkrdnrbS9NQjNz+dVPXHIJPE2G0ZDkrd9QtDtf/lqb+oOjxYu8+cG1mWHVZ+8Ml4VZQi5sbeuL8j+ObWmw89UT/9ZCfzVffQh8ceX37xxsef/7q7lUb31qTpwl79XtYrT467VlLYP6XufS5N2AmTg9Yg09qr728lP/z20sMffjcyOZm8f7Ji5p3D1/pyNLOQB+02j3Kl8xM2/+Tg1bv93Xv8N+70Z+tb1w9++uWoVYVvEg7qAAAAAAAAAAAAAAAAAACAmSj8rfgxPPX89DoCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNkb/P//QtAayxwluNuM8aHy9l790MVPzvRSAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4D/szAAD//+w+eTc=") connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 2.699845865s ago: executing program 3 (id=334): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x6, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x8, 0x1004, 0x9, 0xc595, 0x9, 0x8, 0xfffffffffffffffe, 0x8, 0x80000004000000, 0x1c], 0x80a0000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.699427705s ago: executing program 4 (id=336): sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e0089e9aa", 0xf, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f0000000240)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="090000000400"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf74c5fa4596d483b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4013, &(0x7f00000003c0)={[{@errors_remount}, {@data_err_abort}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$eJzs3N1rXGUaAPDnnEymaZvtpMuybPdmsyxLC8tOky4p27KwrVS88ULQW6EhnZSQ6QdJpCbNxUT/AVGvBW8EtShe2OveKHrrjba3ihdCkdgoiGjkzEeSNjNJ2s70hPb3g3fO+553Zp7nmcPMOS/MTABPrOHsJo04FBFnk4hSc38aEcV6byCi1rjfyvLixE/LixNJrK4+/30SSUTcWV6caD1X0tzubw4GIuKLp5L446ub487OL0yPV6uVmeb46NyFy0dn5xf+PXVh/HzlfOXi6PH/jh0bOz5yYqxrtf789anrP/79mW9rv7z367Uf3ngniVMx2JzbWEe3DMfw2muyUSEixrsdLCd9zXo21pkUtnlQ2uOkAADoKN1wDffnKEVfrF+8leKTL3NNDgAAAOiK1b6IVQAAAOAxl1j/AwAAwGOu9T2AO8uLE62W7zcSHq3bpyNiqFH/SrM1ZgpRq28Hoj8i9t1JYuPPWpPGwx7acER8c+vEh1mLHv0OeSu1pYj4S7vjn9TrH6r/intz/WlEjHQh/vA9423q7+tCyLs8TP2nuhD/PusHgK64cbpxItt8/kvXrn+izfmv0Obc9SDanP+6fo7fSuv6b2XT9d96/X0drv+e22GMq+++daXTXFb//64//UGrZfGz7bZPuu2frOzM7aWIvxba1Z+s1Z90qP/sDmOUfrtS6TT3wPV3yerbEYejff0tydb/T3R0cqpaGWncto2x9PnY+53i511/dvz3dai/9f9PnY7/5R3GePHMmY827by13t26/vS7YvJCvVds7nl5fG5uZjSimDy7ef+xrXNp3af1HFn9R/6x9fu/Xf3ZZ0Kt+Tpka4Gl5jYbv3JPzP9fu/pxp3xa6788j/+5Dsd/Y/2fFTYf/9d2GOOfn75+pNPcxvVv1rL4rbUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALSkETEYSVpe66dpuRyxPyL+FPvS6qXZuX9NXnrp4rlsLmIo+tPJqWplJCJKjXGSjUfr/fXxsXvG/4mIgxHxZmlvfVyeuFQ9l3fxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArNkfEYORpOWISCNipZSm5XLeWQEAAABddyDvBAAAAICeG8o7AQAAAKDnrP8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADosYN/u3EziYjayb31lik25/pzzQzotTTvBIDc9OWdAJCbQt4JALm5zzW+ywV4DCXbzA90nNnT9VwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2L0OH7pxM4mI2sm99ZYpNuf6c80M6LU07wSA3PR1mhiIiMKjzQV4tLzF4clljQ8k28wPrN+ndvfMnp7lBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDuM1hvSVqOiGJzX7kc8YeIGIr+ZHKqWhmJiAMR8VWpf082Hs05ZwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALpvdn5herxarcxknTSanbU9OuudpPGK1XZLPjoP2SnGrkhjl3by/mQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPs/ML0+PVamVmNu9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLzNzi9Mj1erlZkedvKuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/PweAAD//1pFCiI=") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rmdir(&(0x7f0000000200)='./file0\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) clock_gettime(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x8c) 2.508707657s ago: executing program 1 (id=337): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, r2, 0x25, 0x4, @val=@tcx={@void, @value=r0}}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[], 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) write$tun(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000540)={0x1, &(0x7f0000000580)=[{0x6, 0x1}]}) sendmsg$nl_route_sched(r3, &(0x7f0000001a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4040804}, 0x24000000) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 2.451415501s ago: executing program 0 (id=338): getuid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000006b80)=[{{&(0x7f0000000340)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e80200000000000029"], 0x2e8}}], 0x1, 0x4800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$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") r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000090000000000000000000000850000004100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000240)="bf1ea0e3c19ed614ebadb3161741", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 2.364233597s ago: executing program 4 (id=339): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7}, {0x7, 0xfffffffffffffe6e}}}]}]}]}}]}, 0x54}}, 0x0) 2.338493148s ago: executing program 3 (id=340): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x50) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)=@secondary) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) clock_gettime(0x0, 0x0) clock_gettime(0x2, &(0x7f0000000300)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 2.338355728s ago: executing program 4 (id=341): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) 2.326505359s ago: executing program 4 (id=342): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) fstat(r1, 0x0) 2.30644779s ago: executing program 4 (id=343): openat(0xffffffffffffff9c, 0x0, 0x42, 0x85) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, 0x0) 2.30613044s ago: executing program 4 (id=344): pidfd_send_signal(0xffffffffffffffff, 0x21, 0x0, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)={0x39, 0x6, 0x0, {0x0, 0x6, 0x10, 0x0, 'veth1_virt_wifi\x00'}}, 0x39) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400feffb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$packet(0xffffffffffffffff, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, 0x0, 0x1, 0xd8, 0x6, @multicast}, 0x14) sendto$packet(r1, &(0x7f0000000300)="a9175ad6bc90f82565382deec8ff1976eb46525bffb6737e066d63d79a3c3484cab99f43139e6dc1e8a207dd186cfd4dacd3a1540820b16b378e6f0e415584a00788a9d2da749ede", 0x48, 0x801, &(0x7f0000000000)={0x11, 0x9, 0x0, 0x1, 0x4, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x2, 0x53a, &(0x7f0000000c80)="$eJzs3c9vI1cdAPDvOPHmR7NNCj0AArqUwoJW6yTeNqp6YXsBoaoSouLEYRsSN4pir6PYK5qwh+yReyVW4gT8B9w4IPXEgRs3kDj0Ug5IC6xADRIHoxlPEjexE7dJ7ST+fKTJzHszO9/34n3veV5kvwBG1o2I2I2IaxHxdkTM5vlJvsXd9pZe99HThyt7Tx+uJNFqvfXPJDuf5kXHv0k9k99zMiJ++L2InyTH4za2dzaWq9XKVp6eb9Y25xvbO7fXC3lOeWlxaeHVO6+Uz62uL9R+++S762/86Pe/+8qHf9r99s/SYs38/Hp2rrMeh4pnjpnk95npyBuPiDfOfOeLYzz//8Plk7a2z0XEi1n7n42x7NUEAK6yVms2WrOdaQDgqkuf/2ciKZTyuYCZKBRKpfYc3vMxXajWG81bs/UH91cjm8Oai2LhnfVqZSGfK5yLYpKmF7Pjw3T5Y+n3Knci4rmIeG9iKjtfWqlXV4f5xgcARtgzR8b//0y0x/9OZ/8rGABw4UwOuwAAwMB1jP9zwywHADA4nv8BYPR8gvHfpwMB4Irw/A8Ao8f4DwCj59Tx/9FgygEADMQP3nwz3Vp77e+/3v+m7turlcZGqfZgpbRS39osrdXra9VKaaXVOu1+1Xp9c/Hlg2Rje+derf7gfvPeem15rXKv4rsEAGD4nnvh/b+kg/7ua1PZFh1rORir4WorDLsAwNCMDbsAwND4PA+Mrj6e8U0DwBXXZYnetnyCIOl1wWOLv8JldfOL5v9hVJ1l/t/cAVxun27+/zvnXg5g8IzhMLparcSa/wAwYszxAz3//p/r+RUhj/u4+d1PXh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4DGayLSmUsrXAd9OfhVIp4npEzEUxeWe9WlmIiGcj4s8TxYk0vTjsQgMAZ1T4e5Kv/3Vz9qWZo2evJf+dyPYR8dNfvvWLd5ebza3FNP9fB/nNx2n+VHOrfG0YFQAAOu2vu/nBYVY2fpfzfceD/EdPH67sb4Ms4pPXI2JyKou/l2/tM+Mxnu0noxgR0/9O8nRb+n5l7Bzi7z6KiC/s138y3u2IMJPNgbRXPj0aP419/dzjd/7+j8YvfKy+hexcui9mv4vPx5HCAad6//V2P5m3vbSJ5+2vEDeyfff2P5n1UGeX9n9pc9071v8VDvq/sWPxk6zN3zhIn1ySJy//4fvHMluz7XOPIr403i1+chA/6d7/Fl/qs44ffPmrL/Y61/pVxM2u9d9fkbqWdbPzzdrmfGN75/Z6bXmtsla5Xy4vLS4tvHrnlfJ8Nkfd/vnHbjH+8dqtZ3vFT+s/3SP+5Mn1j2/0Wf9f/+/tH3/thPjf+nr31//5E+KnY+I3+4y/PH235/LdafzVHvU/5fWPW33G//BvO6t9XgoADEBje2djuVqtbJ1ykL7XPO0aB/0fpM/2F6AY2UHsRpzXDbNJiYjoek36jvpiVPmzOkiGFv03533DYfdMwGftsNH3vuavgywQAAAAAAAAAAAAAABwTGN7Z2Oi+6e1zu1g2HUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6vp/AAAA//9W1cZQ") bind$packet(r1, &(0x7f0000000080)={0x11, 0xf8}, 0x14) 755.338891ms ago: executing program 3 (id=345): mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r7}, 0x18) rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x103180, 0x0) ioctl$TIOCGRS485(r8, 0x542e, 0xfffffffffffffffe) 579.164412ms ago: executing program 1 (id=346): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008010bd40820514009dbf0000000109022400011b00f00009040000022a3e74000905ba727f0000100109050b", @ANYRES8], 0x0) 165.377749ms ago: executing program 2 (id=347): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) recvmmsg(r4, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1c9, 0x12) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd70000000000021040000180001801400020064756d6d7930"], 0x2c}}, 0x880) 117.895222ms ago: executing program 2 (id=348): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400ea00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) 55.180666ms ago: executing program 2 (id=349): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000b80), 0x204008, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) 204.54µs ago: executing program 0 (id=350): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7}, {0x7, 0xfffffffffffffe6e}}}]}]}]}}]}, 0x54}}, 0x0) 0s ago: executing program 2 (id=351): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) kernel console output (not intermixed with test programs): syzkaller login: [ 7.898913][ T105] udevd (105) used greatest stack depth: 22912 bytes left [ 13.968844][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 13.968861][ T30] audit: type=1400 audit(1761660852.089:59): avc: denied { transition } for pid=223 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.976119][ T30] audit: type=1400 audit(1761660852.089:60): avc: denied { noatsecure } for pid=223 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.979986][ T30] audit: type=1400 audit(1761660852.099:61): avc: denied { write } for pid=223 comm="sh" path="pipe:[13928]" dev="pipefs" ino=13928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 13.985091][ T30] audit: type=1400 audit(1761660852.099:62): avc: denied { rlimitinh } for pid=223 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.988829][ T30] audit: type=1400 audit(1761660852.099:63): avc: denied { siginh } for pid=223 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.596449][ T227] sftp-server (227) used greatest stack depth: 22048 bytes left [ 14.606356][ T226] sshd-session (226) used greatest stack depth: 21536 bytes left Warning: Permanently added '10.128.1.131' (ED25519) to the list of known hosts. [ 20.705987][ T30] audit: type=1400 audit(1761660858.829:64): avc: denied { mounton } for pid=273 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.707023][ T273] cgroup: Unknown subsys name 'net' [ 20.728630][ T30] audit: type=1400 audit(1761660858.829:65): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.755875][ T30] audit: type=1400 audit(1761660858.859:66): avc: denied { unmount } for pid=273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.756062][ T273] cgroup: Unknown subsys name 'devices' [ 20.932924][ T273] cgroup: Unknown subsys name 'hugetlb' [ 20.938523][ T273] cgroup: Unknown subsys name 'rlimit' [ 21.134290][ T30] audit: type=1400 audit(1761660859.259:67): avc: denied { setattr } for pid=273 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.157466][ T30] audit: type=1400 audit(1761660859.259:68): avc: denied { mounton } for pid=273 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.182202][ T30] audit: type=1400 audit(1761660859.259:69): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.209480][ T275] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.218256][ T30] audit: type=1400 audit(1761660859.339:70): avc: denied { relabelto } for pid=275 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.243943][ T30] audit: type=1400 audit(1761660859.339:71): avc: denied { write } for pid=275 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.280036][ T30] audit: type=1400 audit(1761660859.399:72): avc: denied { read } for pid=273 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.280488][ T273] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.305533][ T30] audit: type=1400 audit(1761660859.399:73): avc: denied { open } for pid=273 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.297076][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.304167][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.311545][ T281] device bridge_slave_0 entered promiscuous mode [ 22.319182][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.326258][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.333722][ T281] device bridge_slave_1 entered promiscuous mode [ 22.391548][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.398590][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.405991][ T282] device bridge_slave_0 entered promiscuous mode [ 22.421837][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.428865][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.436238][ T282] device bridge_slave_1 entered promiscuous mode [ 22.460075][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.467147][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.474538][ T283] device bridge_slave_0 entered promiscuous mode [ 22.481471][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.488675][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.496124][ T283] device bridge_slave_1 entered promiscuous mode [ 22.558787][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.565911][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.573365][ T285] device bridge_slave_0 entered promiscuous mode [ 22.588073][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.595134][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.602519][ T285] device bridge_slave_1 entered promiscuous mode [ 22.632787][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.639829][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.647249][ T284] device bridge_slave_0 entered promiscuous mode [ 22.666457][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.673506][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.680993][ T284] device bridge_slave_1 entered promiscuous mode [ 22.762245][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.769290][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.776575][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.783604][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.816769][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.823839][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.831081][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.838122][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.853265][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.860300][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.867577][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.874595][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.883718][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.890748][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.898036][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.905053][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.935940][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.943000][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.950246][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.957280][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.970392][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.978310][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.985754][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.993077][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.000180][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.007413][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.014661][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.022484][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.029588][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.036837][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.044002][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.063574][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.071227][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.079321][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.086348][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.098434][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.106149][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.114320][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.121339][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.128835][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.137109][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.144133][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.173575][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.181675][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.188674][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.196169][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.204126][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.212071][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.220130][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.227591][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.234915][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.242351][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.249670][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.257902][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.264929][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.272385][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.280471][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.287496][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.294827][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.302855][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.315403][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.323706][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.333827][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.342290][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.350366][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.357394][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.377509][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.385964][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.394117][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.402283][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.410165][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.417613][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.429115][ T285] device veth0_vlan entered promiscuous mode [ 23.440033][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.448497][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.456996][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.465069][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.473132][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.481485][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.489567][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.496604][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.503992][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.512516][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.520840][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.528361][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.538966][ T282] device veth0_vlan entered promiscuous mode [ 23.549703][ T281] device veth0_vlan entered promiscuous mode [ 23.556204][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.564211][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.572391][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.580161][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.588162][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.595891][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.603551][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.610910][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.626337][ T282] device veth1_macvtap entered promiscuous mode [ 23.636055][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.644376][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.652730][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.659754][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.667806][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.675842][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.683779][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.691785][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.699646][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.707875][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.715798][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.723986][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.732064][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.739582][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.747643][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.766169][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.774467][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.782664][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.790802][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.803026][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.811606][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.819817][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.828281][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.838525][ T285] device veth1_macvtap entered promiscuous mode [ 23.846561][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.855015][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.863231][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.876023][ T283] device veth0_vlan entered promiscuous mode [ 23.886366][ T284] device veth0_vlan entered promiscuous mode [ 23.893048][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.901077][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.908613][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.916208][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.924161][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.932404][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.939839][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.949254][ T281] device veth1_macvtap entered promiscuous mode [ 23.963083][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.973028][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.981658][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.981808][ T282] request_module fs-gadgetfs succeeded, but still no fs? [ 23.994400][ T284] device veth1_macvtap entered promiscuous mode [ 24.009394][ T283] device veth1_macvtap entered promiscuous mode [ 24.024139][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.032411][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.040740][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.049536][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.057920][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.066358][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.074251][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.082705][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.091379][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.099615][ T335] loop3: detected capacity change from 0 to 512 [ 24.099631][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.135016][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.146551][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.155372][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.166417][ T335] EXT4-fs (loop3): Ignoring removed bh option [ 24.167719][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.180615][ T335] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 24.181261][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.197236][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.213646][ T335] EXT4-fs (loop3): 1 truncate cleaned up [ 24.219388][ T335] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,auto_da_alloc,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 24.235694][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.244230][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.311066][ T340] loop1: detected capacity change from 0 to 256 [ 24.331450][ T344] loop2: detected capacity change from 0 to 128 [ 24.363975][ T340] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 24.374816][ T340] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 24.385419][ T340] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 24.749305][ T350] loop0: detected capacity change from 0 to 512 [ 25.296883][ T344] FAT-fs (loop2): Unrecognized mount option "0xffffffffffffffff01777777777777777777777=d̞ YS38`" or missing value [ 26.351673][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 26.351689][ T30] audit: type=1400 audit(1761660863.699:112): avc: denied { write } for pid=339 comm="syz.1.2" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.389239][ T350] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.1: casefold flag without casefold feature [ 26.407857][ T350] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.1: couldn't read orphan inode 15 (err -117) [ 26.419713][ T350] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,user_xattr,,errors=continue. Quota mode: writeback. [ 26.432431][ T30] audit: type=1400 audit(1761660863.699:113): avc: denied { add_name } for pid=339 comm="syz.1.2" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.452903][ T30] audit: type=1400 audit(1761660863.699:114): avc: denied { create } for pid=339 comm="syz.1.2" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 26.492522][ T30] audit: type=1400 audit(1761660863.699:115): avc: denied { associate } for pid=339 comm="syz.1.2" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 27.377936][ T30] audit: type=1400 audit(1761660863.699:116): avc: denied { read } for pid=339 comm="syz.1.2" name="file1" dev="loop1" ino=1048597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 27.419052][ T30] audit: type=1400 audit(1761660864.469:117): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 27.448122][ T374] loop1: detected capacity change from 0 to 256 [ 27.501517][ T30] audit: type=1400 audit(1761660864.559:118): avc: denied { write } for pid=333 comm="syz.3.4" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.515282][ T378] loop3: detected capacity change from 0 to 256 [ 27.558853][ T30] audit: type=1400 audit(1761660864.639:119): avc: denied { name_bind } for pid=358 comm="syz.1.6" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 27.585958][ T30] audit: type=1400 audit(1761660864.639:120): avc: denied { node_bind } for pid=358 comm="syz.1.6" saddr=224.0.0.2 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 27.607681][ T30] audit: type=1400 audit(1761660864.639:121): avc: denied { read } for pid=358 comm="syz.1.6" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 27.623018][ T374] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 27.651598][ T374] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 27.668423][ T374] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 28.169048][ T385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13'. [ 28.307336][ T385] netlink: 'syz.4.13': attribute type 16 has an invalid length. [ 29.157435][ T385] netlink: 'syz.4.13': attribute type 17 has an invalid length. [ 29.183464][ T397] loop0: detected capacity change from 0 to 1024 [ 29.373768][ T397] EXT4-fs (loop0): Test dummy encryption mode enabled [ 29.554372][ T397] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 29.582657][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 29.593929][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 29.606606][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 29.614999][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 29.623567][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 29.632360][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 29.640740][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 29.649119][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 29.703908][ T404] tipc: Started in network mode [ 29.709349][ T404] tipc: Node identity 06b25c2f0952, cluster identity 4711 [ 29.729145][ T404] tipc: Enabled bearer , priority 0 [ 29.820288][ T407] loop1: detected capacity change from 0 to 1024 [ 29.886881][ T408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15'. [ 29.902337][ T410] tmpfs: Unknown parameter 'nolazytime' [ 29.911842][ T407] ======================================================= [ 29.911842][ T407] WARNING: The mand mount option has been deprecated and [ 29.911842][ T407] and is ignored by this kernel. Remove the mand [ 29.911842][ T407] option from the mount to silence this warning. [ 29.911842][ T407] ======================================================= [ 29.950873][ T407] EXT4-fs (loop1): Ignoring removed nobh option [ 29.957952][ T407] EXT4-fs (loop1): Ignoring removed bh option [ 30.021820][ T407] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 30.737049][ T417] block device autoloading is deprecated and will be removed. [ 30.760190][ T407] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,data_err=abort,barrier=0x0000000000000002,dioread_lock,errors=remount-ro,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,. Quota mode: writeback. [ 31.157849][ T402] tipc: Resetting bearer [ 31.194537][ T390] tipc: Node number set to 266361903 [ 31.291655][ T402] tipc: Disabling bearer [ 31.697131][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 31.697154][ T30] audit: type=1400 audit(1761660869.819:142): avc: denied { ioctl } for pid=416 comm="syz.2.21" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 31.730777][ T417] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 31.821119][ C0] sched: RT throttling activated [ 31.849531][ T30] audit: type=1400 audit(1761660869.969:143): avc: denied { read write } for pid=431 comm="syz.1.22" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 31.890486][ T30] audit: type=1400 audit(1761660870.009:144): avc: denied { open } for pid=431 comm="syz.1.22" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 31.904604][ T39] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.920929][ T30] audit: type=1400 audit(1761660870.019:145): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 31.927113][ T39] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 31.945112][ T30] audit: type=1400 audit(1761660870.069:146): avc: denied { create } for pid=435 comm="syz.3.23" dev="anon_inodefs" ino=16454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 31.972040][ T30] audit: type=1400 audit(1761660870.069:147): avc: denied { ioctl } for pid=435 comm="syz.3.23" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16454 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 31.999456][ T437] loop3: detected capacity change from 0 to 128 [ 32.002524][ T30] audit: type=1400 audit(1761660870.069:148): avc: denied { read } for pid=435 comm="syz.3.23" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 32.053812][ T30] audit: type=1400 audit(1761660870.179:149): avc: denied { read } for pid=435 comm="syz.3.23" dev="nsfs" ino=4026532377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 32.076157][ T30] audit: type=1400 audit(1761660870.199:150): avc: denied { open } for pid=435 comm="syz.3.23" path="net:[4026532377]" dev="nsfs" ino=4026532377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 32.101819][ T442] loop1: detected capacity change from 0 to 128 [ 32.145468][ T439] fido_id[439]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 32.153794][ T444] loop0: detected capacity change from 0 to 128 [ 32.165231][ T39] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 32.433382][ T30] audit: type=1400 audit(1761660870.539:151): avc: denied { write } for pid=433 comm="syz.4.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.006621][ T460] loop4: detected capacity change from 0 to 256 [ 33.146124][ T460] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 33.171644][ T39] usb 3-1: device descriptor read/all, error -71 [ 33.322844][ T460] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 33.332707][ T460] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 34.825041][ T473] loop2: detected capacity change from 0 to 512 [ 35.460242][ T386] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 36.003865][ T473] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 36.015319][ T473] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.098441][ T473] netlink: 'syz.2.32': attribute type 13 has an invalid length. [ 36.150352][ T491] loop4: detected capacity change from 0 to 16 [ 36.697093][ T491] erofs: (device loop4): mounted with root inode @ nid 36. [ 36.861016][ T497] loop3: detected capacity change from 0 to 4096 [ 37.700981][ T505] netlink: 16 bytes leftover after parsing attributes in process `syz.2.36'. [ 37.713604][ T504] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 36 [ 38.072886][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 38.072900][ T30] audit: type=1400 audit(1761660876.199:158): avc: denied { read write } for pid=509 comm="syz.2.43" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 38.088893][ T514] loop1: detected capacity change from 0 to 256 [ 38.108784][ T497] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,data_err=abort,grpquota,stripe=0x0000000000000001,. Quota mode: writeback. [ 38.130339][ T30] audit: type=1400 audit(1761660876.199:159): avc: denied { open } for pid=509 comm="syz.2.43" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 38.155491][ T514] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 38.226363][ T514] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 38.245605][ T514] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 38.263923][ T30] audit: type=1400 audit(1761660876.389:160): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 38.524282][ T517] syz.0.41 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 38.599419][ T30] audit: type=1400 audit(1761660876.669:161): avc: denied { write } for pid=515 comm="syz.4.40" name="ip_tables_matches" dev="proc" ino=4026532607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 38.753184][ T30] audit: type=1400 audit(1761660876.669:162): avc: denied { create } for pid=515 comm="syz.4.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.772514][ T30] audit: type=1400 audit(1761660876.669:163): avc: denied { ioctl } for pid=515 comm="syz.4.40" path="socket:[16625]" dev="sockfs" ino=16625 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.852637][ T30] audit: type=1400 audit(1761660876.979:164): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.426956][ T526] overlayfs: unrecognized mount option "subj_type=" or missing value [ 39.458833][ T30] audit: type=1400 audit(1761660877.519:165): avc: denied { create } for pid=513 comm="syz.1.42" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 39.492194][ T530] loop4: detected capacity change from 0 to 512 [ 39.504745][ T30] audit: type=1400 audit(1761660877.549:166): avc: denied { mounton } for pid=513 comm="syz.1.42" path="/8/file0/bus" dev="loop1" ino=1048608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.535327][ T30] audit: type=1400 audit(1761660877.659:167): avc: denied { name_bind } for pid=528 comm="syz.3.45" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 39.581263][ T530] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.622277][ T530] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 39.644601][ T535] loop2: detected capacity change from 0 to 1024 [ 39.657187][ T537] SELinux: policydb magic number 0x6c657344 does not match expected magic number 0xf97cff8c [ 39.671513][ T537] SELinux: failed to load policy [ 39.677696][ T530] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #17: comm syz.4.46: inline data xattr refers to an external xattr inode [ 39.716561][ T535] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 39.730211][ T530] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.46: couldn't read orphan inode 17 (err -117) [ 39.860562][ T530] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,jqfmt=vfsv0,data_err=ignore,inode_readahead_blks=0x0000000000010000,resuid=0x0000000000000000,norecovery,,errors=continue. Quota mode: none. [ 39.887098][ T535] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000003,min_batch_time=0x0000000000000001,nogrpid,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x0000000000. Quota mode: none. [ 40.538373][ T558] loop2: detected capacity change from 0 to 512 [ 40.686989][ T559] loop0: detected capacity change from 0 to 512 [ 40.889453][ T559] EXT4-fs (loop0): 1 orphan inode deleted [ 40.895322][ T559] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 40.906771][ T559] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.765478][ T571] loop2: detected capacity change from 0 to 256 [ 42.880544][ T571] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 42.891841][ T571] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 42.909958][ T571] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 42.978944][ T575] loop0: detected capacity change from 0 to 1024 [ 43.062443][ T575] EXT4-fs (loop0): Test dummy encryption mode enabled [ 43.550323][ T575] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 43.740913][ T582] syz.3.56 (582) used greatest stack depth: 21272 bytes left [ 43.789441][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 43.789455][ T30] audit: type=1400 audit(1761660881.909:180): avc: denied { write } for pid=570 comm="syz.0.53" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.823591][ T30] audit: type=1400 audit(1761660881.909:181): avc: denied { add_name } for pid=570 comm="syz.0.53" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.957077][ T575] fscrypt (loop0): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 44.440871][ T30] audit: type=1400 audit(1761660882.559:182): avc: denied { write } for pid=600 comm="syz.0.60" name="001" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 44.553608][ T604] netlink: 16 bytes leftover after parsing attributes in process `syz.2.61'. [ 46.101494][ T609] loop0: detected capacity change from 0 to 256 [ 46.117529][ T30] audit: type=1400 audit(1761660884.239:183): avc: denied { create } for pid=610 comm="syz.2.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.139541][ T613] loop1: detected capacity change from 0 to 256 [ 46.147629][ T30] audit: type=1400 audit(1761660884.279:184): avc: denied { ioctl } for pid=610 comm="syz.2.64" path="socket:[16171]" dev="sockfs" ino=16171 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.174848][ T30] audit: type=1326 audit(1761660884.279:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=610 comm="syz.2.64" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c8967bfc9 code=0x0 [ 46.224466][ T609] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 46.235143][ T609] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 46.244828][ T609] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 46.250686][ T616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.64'. [ 46.870335][ T628] loop1: detected capacity change from 0 to 256 [ 46.924448][ T628] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 46.935254][ T628] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 46.952168][ T628] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x44ede5da, utbl_chksum : 0xe619d30d) [ 46.965863][ T386] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 47.380954][ T634] loop0: detected capacity change from 0 to 128 [ 47.728296][ T642] loop4: detected capacity change from 0 to 256 [ 47.735624][ T636] SELinux: policydb magic number 0x6c657344 does not match expected magic number 0xf97cff8c [ 47.751336][ T386] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.768640][ T642] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 47.779752][ T634] FAT-fs (loop0): Unrecognized mount option "C9:*&" or missing value [ 47.793317][ T386] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.803466][ T636] SELinux: failed to load policy [ 47.806434][ T642] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 47.809615][ T386] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 47.827440][ T642] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 47.854191][ T386] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.937961][ T386] usb 4-1: config 0 descriptor?? [ 47.944334][ T30] audit: type=1400 audit(1761660886.049:186): avc: denied { create } for pid=646 comm="syz.1.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.987033][ T30] audit: type=1400 audit(1761660886.109:187): avc: denied { create } for pid=649 comm="syz.0.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.062407][ T652] xt_CT: No such helper "pptp" [ 48.237418][ T30] audit: type=1400 audit(1761660886.359:188): avc: denied { connect } for pid=649 comm="syz.0.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.277670][ T30] audit: type=1400 audit(1761660886.359:189): avc: denied { write } for pid=649 comm="syz.0.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.491614][ T386] usbhid 4-1:0.0: can't add hid device: -71 [ 48.497874][ T386] usbhid: probe of 4-1:0.0 failed with error -71 [ 49.264626][ T30] audit: type=1400 audit(1761660887.319:190): avc: denied { append } for pid=659 comm="syz.2.77" name="ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 49.274046][ T386] usb 4-1: USB disconnect, device number 4 [ 49.506559][ T667] loop4: detected capacity change from 0 to 512 [ 49.561625][ T667] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 49.583239][ T669] loop3: detected capacity change from 0 to 128 [ 49.604425][ T671] loop0: detected capacity change from 0 to 512 [ 49.613154][ T667] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #17: comm syz.4.78: inline data xattr refers to an external xattr inode [ 49.628136][ T667] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.78: couldn't read orphan inode 17 (err -117) [ 49.643826][ T674] loop1: detected capacity change from 0 to 16 [ 49.677459][ T669] EXT4-fs (loop3): Test dummy encryption mode enabled [ 49.684326][ T667] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,jqfmt=vfsv0,data_err=ignore,inode_readahead_blks=0x0000000000010000,resuid=0x0000000000000000,norecovery,,errors=continue. Quota mode: none. [ 49.716148][ T669] EXT4-fs (loop3): Test dummy encryption mode enabled [ 49.729608][ T671] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 49.741179][ T669] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 49.748875][ T671] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 49.758970][ T674] erofs: (device loop1): erofs_read_superblock: cannot find valid erofs superblock [ 49.768375][ T671] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 49.769731][ T669] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 50.577072][ T669] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 50.695712][ T683] loop2: detected capacity change from 0 to 512 [ 50.720061][ T671] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 50.742802][ T671] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 50.756376][ T671] EXT4-fs (loop0): orphan cleanup on readonly fs [ 50.819192][ T671] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.80: bg 0: block 34: padding at end of block bitmap is not set [ 50.896501][ T683] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.81: bg 0: block 328: padding at end of block bitmap is not set [ 50.912092][ T683] EXT4-fs (loop2): Remounting filesystem read-only [ 50.918655][ T683] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 50.928116][ T683] EXT4-fs (loop2): Remounting filesystem read-only [ 50.935140][ T683] EXT4-fs (loop2): 1 orphan inode deleted [ 50.941004][ T683] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,max_dir_size_kb=0x0000000000000008,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 50.962962][ T683] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.341580][ T671] Quota error (device loop0): write_blk: dquota write failed [ 51.356371][ T671] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 51.376410][ T671] EXT4-fs error (device loop0): ext4_acquire_dquot:6200: comm syz.0.80: Failed to acquire dquot type 1 [ 51.401881][ T671] EXT4-fs (loop0): 1 truncate cleaned up [ 51.409735][ T669] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 51.418073][ T671] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,barrier,,errors=continue. Quota mode: writeback. [ 52.331157][ T694] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 52.427348][ T691] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 52.437030][ T691] overlayfs: upper fs does not support tmpfile. [ 52.444423][ T691] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 52.685015][ T679] syz.2.81 (679) used greatest stack depth: 21216 bytes left [ 52.726351][ T30] audit: type=1400 audit(1761660889.999:191): avc: denied { mounton } for pid=668 comm="syz.3.79" path="/15/mnt/bus" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 52.781483][ T30] audit: type=1400 audit(1761660889.999:192): avc: denied { write } for pid=668 comm="syz.3.79" name="bus" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 52.845996][ T704] loop3: detected capacity change from 0 to 512 [ 52.860929][ T707] tipc: Started in network mode [ 52.887893][ T30] audit: type=1400 audit(1761660889.999:193): avc: denied { add_name } for pid=668 comm="syz.3.79" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 52.908006][ T30] audit: type=1400 audit(1761660889.999:194): avc: denied { setattr } for pid=668 comm="syz.3.79" name="work" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 52.909400][ T707] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 52.929760][ T30] audit: type=1400 audit(1761660890.959:195): avc: denied { create } for pid=702 comm="syz.0.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 53.135129][ T707] tipc: Enabled bearer , priority 10 [ 53.143221][ T716] fuse: Bad value for 'fd' [ 53.148722][ T30] audit: type=1400 audit(1761660890.979:196): avc: denied { write } for pid=702 comm="syz.0.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 53.216240][ T704] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.85: iget: bad i_size value: 38620345925642 [ 53.254901][ T30] audit: type=1400 audit(1761660891.269:197): avc: denied { mounton } for pid=705 comm="syz.2.84" path="/17/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 53.280164][ T704] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.85: couldn't read orphan inode 15 (err -117) [ 53.418195][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 53.432225][ T704] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,delalloc,data_err=ignore,nojournal_checksum,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 53.713137][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.734802][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 53.760303][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.781555][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.789701][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.810785][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.827156][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.991936][ T730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.92'. [ 54.329557][ T30] audit: type=1400 audit(1761660892.449:198): avc: denied { read write open } for pid=703 comm="syz.3.85" path="/16/file1/bus/file1" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 54.355943][ T475] tipc: Node number set to 4269801491 [ 54.754954][ T747] binder: BINDER_SET_CONTEXT_MGR already set [ 54.754966][ T747] binder: 746:747 ioctl 4018620d 2000000001c0 returned -16 [ 54.951399][ T30] audit: type=1400 audit(1761660892.959:199): avc: denied { unlink } for pid=738 comm="syz.3.94" name="#2" dev="tmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 55.004892][ T30] audit: type=1400 audit(1761660893.109:200): avc: denied { ioctl } for pid=744 comm="syz.2.97" path="socket:[17013]" dev="sockfs" ino=17013 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.040654][ T749] loop2: detected capacity change from 0 to 512 [ 55.070523][ T751] loop0: detected capacity change from 0 to 512 [ 55.105490][ T751] EXT4-fs (loop0): Ignoring removed nobh option [ 55.118625][ T753] loop4: detected capacity change from 0 to 128 [ 55.120365][ T751] EXT4-fs error (device loop0): ext4_do_update_inode:5241: inode #3: comm syz.0.99: corrupted inode contents [ 55.142182][ T749] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 55.153630][ T751] EXT4-fs (loop0): Remounting filesystem read-only [ 55.153659][ T751] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #3: comm syz.0.99: mark_inode_dirty error [ 55.153892][ T751] EXT4-fs (loop0): Remounting filesystem read-only [ 55.154703][ T751] EXT4-fs error (device loop0): ext4_do_update_inode:5241: inode #3: comm syz.0.99: corrupted inode contents [ 55.154951][ T751] EXT4-fs (loop0): Remounting filesystem read-only [ 55.154974][ T751] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.99: mark_inode_dirty error [ 55.155170][ T751] EXT4-fs (loop0): Remounting filesystem read-only [ 55.155639][ T751] Quota error (device loop0): write_blk: dquota write failed [ 55.155782][ T751] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 55.155863][ T751] EXT4-fs error (device loop0): ext4_acquire_dquot:6200: comm syz.0.99: Failed to acquire dquot type 0 [ 55.156069][ T751] EXT4-fs (loop0): Remounting filesystem read-only [ 55.156559][ T751] EXT4-fs error (device loop0): ext4_do_update_inode:5241: inode #16: comm syz.0.99: corrupted inode contents [ 55.156704][ T751] EXT4-fs (loop0): Remounting filesystem read-only [ 55.156726][ T751] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #16: comm syz.0.99: mark_inode_dirty error [ 55.156864][ T751] EXT4-fs (loop0): Remounting filesystem read-only [ 55.156892][ T751] EXT4-fs error (device loop0): ext4_do_update_inode:5241: inode #16: comm syz.0.99: corrupted inode contents [ 55.157019][ T751] EXT4-fs (loop0): Remounting filesystem read-only [ 55.157040][ T751] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.99: mark_inode_dirty error [ 55.157170][ T751] EXT4-fs (loop0): Remounting filesystem read-only [ 55.157220][ T751] EXT4-fs error (device loop0): ext4_do_update_inode:5241: inode #16: comm syz.0.99: corrupted inode contents [ 55.157352][ T751] EXT4-fs (loop0): Remounting filesystem read-only [ 55.157373][ T751] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 55.157519][ T751] EXT4-fs (loop0): Remounting filesystem read-only [ 55.157546][ T751] EXT4-fs error (device loop0): ext4_do_update_inode:5241: inode #16: comm syz.0.99: corrupted inode contents [ 55.157683][ T751] EXT4-fs (loop0): Remounting filesystem read-only [ 55.157704][ T751] EXT4-fs error (device loop0): ext4_truncate:4310: inode #16: comm syz.0.99: mark_inode_dirty error [ 55.157831][ T751] EXT4-fs (loop0): Remounting filesystem read-only [ 55.157853][ T751] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 55.157969][ T751] EXT4-fs (loop0): Remounting filesystem read-only [ 55.158153][ T751] EXT4-fs (loop0): 1 truncate cleaned up [ 55.158170][ T751] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nobh,. Quota mode: writeback. [ 55.158249][ T751] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.160179][ T749] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a816e11d, mo2=0002] [ 55.160279][ T749] System zones: 1-12 [ 55.162073][ T753] FAT-fs (loop4): Unrecognized mount option "C9:*&" or missing value [ 55.163028][ T749] EXT4-fs (loop2): orphan cleanup on readonly fs [ 55.164435][ T749] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.97: bg 0: block 361: padding at end of block bitmap is not set [ 55.164594][ T749] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 55.164760][ T749] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.97: attempt to clear invalid blocks 33619980 len 1 [ 55.165030][ T749] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.97: invalid indirect mapped block 1811939328 (level 0) [ 55.165211][ T749] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.97: invalid indirect mapped block 2 (level 2) [ 55.165450][ T749] EXT4-fs (loop2): 1 truncate cleaned up [ 55.165468][ T749] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,journal_ioprio=0x0000000000000002,nojournal_checksum,nombcache,grpquota,errors=continue. Quota mode: writeback. [ 55.169526][ T30] audit: type=1400 audit(1761660893.289:201): avc: denied { create } for pid=744 comm="syz.2.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 55.621373][ T749] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (17031!=33349) [ 55.690329][ T764] loop3: detected capacity change from 0 to 256 [ 55.690494][ T30] audit: type=1400 audit(1761660893.309:202): avc: denied { setattr } for pid=750 comm="syz.0.99" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.690517][ T30] audit: type=1400 audit(1761660893.749:203): avc: denied { remount } for pid=744 comm="syz.2.97" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 55.698901][ T30] audit: type=1400 audit(1761660893.819:204): avc: denied { connect } for pid=752 comm="syz.4.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.703162][ T764] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 55.703179][ T764] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 55.707508][ T764] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 55.917388][ T766] xt_CT: No such helper "pptp" [ 56.119104][ T30] audit: type=1400 audit(1761660894.239:205): avc: denied { setopt } for pid=768 comm="syz.1.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 56.136731][ T751] netlink: 20 bytes leftover after parsing attributes in process `syz.0.99'. [ 56.248728][ T751] syz.0.99 (751) used greatest stack depth: 21184 bytes left [ 56.432102][ T781] loop1: detected capacity change from 0 to 512 [ 57.286183][ T766] syz.3.101 (766) used greatest stack depth: 20304 bytes left [ 57.715455][ T781] EXT4-fs (loop1): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 57.756864][ T793] 9pnet: p9_errstr2errno: server reported unknown error [ 57.820059][ T781] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.631639][ T802] xt_CT: No such helper "pptp" [ 59.452651][ T804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.110'. [ 59.673757][ T813] loop2: detected capacity change from 0 to 512 [ 59.704103][ T813] EXT4-fs (loop2): Ignoring removed nobh option [ 59.786375][ T813] EXT4-fs error (device loop2): ext4_do_update_inode:5241: inode #3: comm syz.2.114: corrupted inode contents [ 59.811599][ T813] EXT4-fs (loop2): Remounting filesystem read-only [ 59.818128][ T813] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #3: comm syz.2.114: mark_inode_dirty error [ 59.829956][ T813] EXT4-fs (loop2): Remounting filesystem read-only [ 59.837505][ T813] EXT4-fs error (device loop2): ext4_do_update_inode:5241: inode #3: comm syz.2.114: corrupted inode contents [ 59.849600][ T813] EXT4-fs (loop2): Remounting filesystem read-only [ 59.856196][ T813] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.114: mark_inode_dirty error [ 59.899387][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 59.899440][ T30] audit: type=1400 audit(1761660897.999:208): avc: denied { create } for pid=808 comm="syz.4.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 60.006476][ T813] EXT4-fs (loop2): Remounting filesystem read-only [ 60.156298][ T813] Quota error (device loop2): write_blk: dquota write failed [ 60.234174][ T823] loop3: detected capacity change from 0 to 128 [ 60.249683][ T813] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 60.297754][ T30] audit: type=1400 audit(1761660898.009:209): avc: denied { connect } for pid=808 comm="syz.4.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 60.458211][ T813] EXT4-fs error (device loop2): ext4_acquire_dquot:6200: comm syz.2.114: Failed to acquire dquot type 0 [ 60.498999][ T823] FAT-fs (loop3): Unrecognized mount option "C9:*&" or missing value [ 60.613052][ T30] audit: type=1400 audit(1761660898.019:210): avc: denied { write } for pid=808 comm="syz.4.112" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 60.651518][ T813] EXT4-fs (loop2): Remounting filesystem read-only [ 60.700863][ T813] EXT4-fs error (device loop2): ext4_do_update_inode:5241: inode #16: comm syz.2.114: corrupted inode contents [ 60.731747][ T813] EXT4-fs (loop2): Remounting filesystem read-only [ 60.738276][ T813] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #16: comm syz.2.114: mark_inode_dirty error [ 60.761341][ T813] EXT4-fs (loop2): Remounting filesystem read-only [ 60.767963][ T813] EXT4-fs error (device loop2): ext4_do_update_inode:5241: inode #16: comm syz.2.114: corrupted inode contents [ 60.801348][ T813] EXT4-fs (loop2): Remounting filesystem read-only [ 60.807871][ T813] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.114: mark_inode_dirty error [ 60.841343][ T813] EXT4-fs (loop2): Remounting filesystem read-only [ 60.847889][ T813] EXT4-fs error (device loop2): ext4_do_update_inode:5241: inode #16: comm syz.2.114: corrupted inode contents [ 60.881334][ T813] EXT4-fs (loop2): Remounting filesystem read-only [ 60.887864][ T813] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 60.911333][ T813] EXT4-fs (loop2): Remounting filesystem read-only [ 60.917860][ T813] EXT4-fs error (device loop2): ext4_do_update_inode:5241: inode #16: comm syz.2.114: corrupted inode contents [ 60.951362][ T813] EXT4-fs (loop2): Remounting filesystem read-only [ 60.957902][ T813] EXT4-fs error (device loop2): ext4_truncate:4310: inode #16: comm syz.2.114: mark_inode_dirty error [ 60.991151][ T813] EXT4-fs (loop2): Remounting filesystem read-only [ 60.997717][ T813] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 61.021353][ T813] EXT4-fs (loop2): Remounting filesystem read-only [ 61.028255][ T813] EXT4-fs (loop2): 1 truncate cleaned up [ 61.041171][ T813] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nobh,. Quota mode: writeback. [ 61.061232][ T813] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.173106][ T834] loop0: detected capacity change from 0 to 256 [ 62.191360][ T841] loop0: detected capacity change from 0 to 256 [ 62.232955][ T841] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 62.243666][ T841] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 62.277985][ T841] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x44ede5da, utbl_chksum : 0xe619d30d) [ 62.821738][ T844] Zero length message leads to an empty skb [ 62.832632][ T844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.122'. [ 62.857209][ T849] 9pnet: p9_errstr2errno: server reported unknown error [ 63.059256][ T854] tmpfs: Unknown parameter 'nolazytime' [ 63.454293][ T855] loop1: detected capacity change from 0 to 256 [ 63.517264][ T855] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 63.547512][ T855] FAT-fs (loop1): Directory bread(block 64) failed [ 63.554289][ T855] FAT-fs (loop1): Directory bread(block 65) failed [ 63.561068][ T855] FAT-fs (loop1): Directory bread(block 66) failed [ 63.567691][ T855] FAT-fs (loop1): Directory bread(block 67) failed [ 63.574517][ T855] FAT-fs (loop1): Directory bread(block 68) failed [ 63.581100][ T855] FAT-fs (loop1): Directory bread(block 69) failed [ 63.587872][ T855] FAT-fs (loop1): Directory bread(block 70) failed [ 63.594463][ T855] FAT-fs (loop1): Directory bread(block 71) failed [ 63.601187][ T855] FAT-fs (loop1): Directory bread(block 72) failed [ 63.607754][ T855] FAT-fs (loop1): Directory bread(block 73) failed [ 63.854413][ T860] loop0: detected capacity change from 0 to 256 [ 63.999729][ T865] loop2: detected capacity change from 0 to 128 [ 64.039149][ T860] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 64.054495][ T860] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 64.065557][ T860] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 64.109600][ T865] FAT-fs (loop2): Unrecognized mount option "C9:*&" or missing value [ 64.483102][ T873] xt_CT: No such helper "pptp" [ 64.851922][ T885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.136'. [ 65.266009][ T891] tmpfs: Unknown parameter 'nolazytime' [ 65.313410][ T894] loop1: detected capacity change from 0 to 512 [ 65.386750][ T894] EXT4-fs (loop1): Ignoring removed nobh option [ 65.493660][ T30] audit: type=1400 audit(1761660903.619:211): avc: denied { setopt } for pid=896 comm="syz.2.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 65.513450][ T30] audit: type=1400 audit(1761660903.619:212): avc: denied { write } for pid=896 comm="syz.2.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 65.675847][ T894] EXT4-fs error (device loop1): ext4_do_update_inode:5241: inode #3: comm syz.1.139: corrupted inode contents [ 65.702031][ T915] 9pnet: Insufficient options for proto=fd [ 65.711520][ T894] EXT4-fs (loop1): Remounting filesystem read-only [ 65.718047][ T894] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #3: comm syz.1.139: mark_inode_dirty error [ 65.739516][ T894] EXT4-fs (loop1): Remounting filesystem read-only [ 65.756497][ T894] EXT4-fs error (device loop1): ext4_do_update_inode:5241: inode #3: comm syz.1.139: corrupted inode contents [ 65.787088][ T894] EXT4-fs (loop1): Remounting filesystem read-only [ 65.793807][ T894] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #3: comm syz.1.139: mark_inode_dirty error [ 65.806671][ T894] EXT4-fs (loop1): Remounting filesystem read-only [ 65.814116][ T894] Quota error (device loop1): write_blk: dquota write failed [ 65.821807][ T894] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 66.531289][ T923] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 66.533049][ T894] EXT4-fs error (device loop1): ext4_acquire_dquot:6200: comm syz.1.139: Failed to acquire dquot type 0 [ 66.540039][ T923] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 66.579875][ T894] EXT4-fs (loop1): Remounting filesystem read-only [ 66.995614][ T930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.149'. [ 67.004866][ T894] EXT4-fs error (device loop1): ext4_do_update_inode:5241: inode #16: comm syz.1.139: corrupted inode contents [ 67.065697][ T894] EXT4-fs (loop1): Remounting filesystem read-only [ 67.076454][ T894] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #16: comm syz.1.139: mark_inode_dirty error [ 67.097685][ T30] audit: type=1400 audit(1761660905.219:213): avc: denied { nlmsg_write } for pid=933 comm="syz.3.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 67.132698][ T894] EXT4-fs (loop1): Remounting filesystem read-only [ 67.173919][ T894] EXT4-fs error (device loop1): ext4_do_update_inode:5241: inode #16: comm syz.1.139: corrupted inode contents [ 67.991195][ T894] EXT4-fs (loop1): Remounting filesystem read-only [ 68.003541][ T30] audit: type=1400 audit(1761660905.429:214): avc: denied { getopt } for pid=931 comm="syz.0.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.141385][ T894] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.139: mark_inode_dirty error [ 68.152761][ T894] EXT4-fs (loop1): Remounting filesystem read-only [ 68.159287][ T894] EXT4-fs error (device loop1): ext4_do_update_inode:5241: inode #16: comm syz.1.139: corrupted inode contents [ 68.183542][ T894] EXT4-fs (loop1): Remounting filesystem read-only [ 68.190071][ T894] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 68.214340][ T894] EXT4-fs (loop1): Remounting filesystem read-only [ 68.239763][ T894] EXT4-fs error (device loop1): ext4_do_update_inode:5241: inode #16: comm syz.1.139: corrupted inode contents [ 68.247025][ T944] loop2: detected capacity change from 0 to 128 [ 68.252231][ T894] EXT4-fs (loop1): Remounting filesystem read-only [ 68.282906][ T944] FAT-fs (loop2): Unrecognized mount option "C +A'|S " or missing value [ 68.323344][ T894] EXT4-fs error (device loop1): ext4_truncate:4310: inode #16: comm syz.1.139: mark_inode_dirty error [ 68.334653][ T26] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 68.341396][ T894] EXT4-fs (loop1): Remounting filesystem read-only [ 68.349183][ T894] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 68.358763][ T894] EXT4-fs (loop1): Remounting filesystem read-only [ 68.382987][ T894] EXT4-fs (loop1): 1 truncate cleaned up [ 68.464778][ T952] loop0: detected capacity change from 0 to 512 [ 68.521209][ T894] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nobh,. Quota mode: writeback. [ 68.642020][ T952] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 68.656863][ T952] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.686007][ T30] audit: type=1400 audit(1761660906.809:215): avc: denied { bind } for pid=947 comm="syz.0.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.739285][ T894] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.801309][ T26] usb 4-1: unable to get BOS descriptor or descriptor too short [ 68.881737][ T26] usb 4-1: not running at top speed; connect to a high speed hub [ 69.709420][ T961] 9pnet: Insufficient options for proto=fd [ 69.768261][ T26] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.778413][ T26] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 511, setting to 64 [ 69.842985][ T969] 9pnet: p9_errstr2errno: server reported unknown error @ [ 73.311531][ T992] loop1: detected capacity change from 0 to 512 [ 73.331237][ T26] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 73.340546][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.353140][ T997] loop0: detected capacity change from 0 to 1024 [ 73.359736][ T26] usb 4-1: Product: syz [ 73.381205][ T26] usb 4-1: can't set config #1, error -71 [ 73.388567][ T26] usb 4-1: USB disconnect, device number 5 [ 73.392814][ T992] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 73.405637][ T992] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.420444][ T30] audit: type=1400 audit(1761660911.549:216): avc: denied { read } for pid=980 comm="syz.1.157" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 73.444694][ T981] SELinux: Context system_u:object_r:crond_unit_file_t:s0 is not valid (left unmapped). [ 73.462774][ T997] EXT4-fs (loop0): Ignoring removed nobh option [ 73.471254][ T30] audit: type=1400 audit(1761660911.579:217): avc: denied { relabelto } for pid=980 comm="syz.1.157" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_unit_file_t:s0" [ 73.485995][ T997] EXT4-fs (loop0): Ignoring removed bh option [ 73.498618][ T30] audit: type=1400 audit(1761660911.579:218): avc: denied { setattr } for pid=980 comm="syz.1.157" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 73.731211][ T1014] incfs: Backing dir is not set, filesystem can't be mounted. [ 73.739237][ T1014] incfs: mount failed -2 [ 73.772763][ T997] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 73.865955][ T981] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #12: block 32: comm syz.1.157: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 74.066373][ T30] audit: type=1400 audit(1761660911.969:219): avc: denied { mounton } for pid=980 comm="syz.1.157" path="/27/bus/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.104489][ T981] incfs: Can't find or create .index dir in ./file0 [ 74.117366][ T981] incfs: mount failed -117 [ 74.122741][ T997] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,data_err=abort,barrier=0x0000000000000002,dioread_lock,errors=remount-ro,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,. Quota mode: writeback. [ 74.472003][ T1026] loop3: detected capacity change from 0 to 256 [ 74.521528][ T1026] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.532186][ T1026] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 74.554332][ T1026] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 74.605269][ T1041] loop1: detected capacity change from 0 to 256 [ 74.634080][ T1045] loop0: detected capacity change from 0 to 128 [ 74.664288][ T1041] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.675035][ T1041] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 75.235412][ T1041] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 75.756897][ T1056] overlayfs: unrecognized mount option "subj_type=" or missing value [ 76.318446][ T1068] loop1: detected capacity change from 0 to 128 [ 77.028649][ T1089] loop2: detected capacity change from 0 to 256 [ 77.092623][ T1089] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 77.104770][ T1089] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 77.116043][ T1089] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 77.341277][ T30] audit: type=1400 audit(1761660915.449:220): avc: denied { write } for pid=1098 comm="syz.1.207" path="socket:[18144]" dev="sockfs" ino=18144 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.828043][ T30] audit: type=1400 audit(1761660915.449:221): avc: denied { read write } for pid=1098 comm="syz.1.207" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.856785][ T30] audit: type=1400 audit(1761660915.449:222): avc: denied { open } for pid=1098 comm="syz.1.207" path="/dev/uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.889611][ T30] audit: type=1400 audit(1761660917.009:223): avc: denied { setopt } for pid=1112 comm="syz.0.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.633260][ T1128] loop0: detected capacity change from 0 to 16 [ 79.868801][ T1128] erofs: (device loop0): mounted with root inode @ nid 36. [ 80.216521][ T1136] netlink: 64 bytes leftover after parsing attributes in process `syz.2.217'. [ 80.987379][ T1151] loop0: detected capacity change from 0 to 2048 [ 81.945323][ T1151] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 82.079210][ T30] audit: type=1400 audit(1761660920.199:224): avc: denied { append } for pid=1150 comm="syz.0.221" path="/44/file2/cgroup.controllers" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 82.550621][ T1176] loop2: detected capacity change from 0 to 128 [ 82.565689][ T1178] loop1: detected capacity change from 0 to 128 [ 82.624807][ T1151] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 82.646243][ T1151] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 82.658816][ T1151] EXT4-fs (loop0): This should not happen!! Data will be lost [ 82.658816][ T1151] [ 82.669076][ T1151] EXT4-fs (loop0): Total free blocks count 0 [ 82.675501][ T1151] EXT4-fs (loop0): Free/Dirty block details [ 82.686572][ T1151] EXT4-fs (loop0): free_blocks=2415919104 [ 82.689448][ T1178] attempt to access beyond end of device [ 82.689448][ T1178] loop1: rw=2049, want=140, limit=128 [ 82.692866][ T1151] EXT4-fs (loop0): dirty_blocks=2944 [ 82.708551][ T1151] EXT4-fs (loop0): Block reservation details [ 82.714611][ T1151] EXT4-fs (loop0): i_reserved_data_blocks=184 [ 82.734318][ T585] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 892 with error 28 [ 82.747115][ T585] EXT4-fs (loop0): This should not happen!! Data will be lost [ 82.747115][ T585] [ 82.890458][ T1191] loop1: detected capacity change from 0 to 16 [ 82.925732][ T1191] erofs: (device loop1): mounted with root inode @ nid 36. [ 82.984401][ T1193] overlayfs: failed to resolve './file1': -2 [ 83.083550][ T60] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 84.165963][ T60] usb 3-1: Using ep0 maxpacket: 16 [ 85.172833][ T1219] loop3: detected capacity change from 0 to 1024 [ 85.245667][ T1219] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 85.400258][ T1219] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000003,min_batch_time=0x0000000000000001,nogrpid,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x0000000000. Quota mode: none. [ 85.544126][ T60] usb 3-1: config 1 interface 0 has no altsetting 0 [ 85.591188][ T60] usb 3-1: string descriptor 0 read error: -71 [ 85.597441][ T60] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.40 [ 85.606872][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.687931][ T1235] overlayfs: failed to resolve './file1': -2 [ 87.862228][ T1239] loop0: detected capacity change from 0 to 512 [ 87.985264][ T60] usb 3-1: can't set config #1, error -71 [ 87.993309][ T1239] EXT4-fs (loop0): Ignoring removed nobh option [ 87.993855][ T60] usb 3-1: USB disconnect, device number 4 [ 88.085253][ T1250] loop1: detected capacity change from 0 to 256 [ 88.142059][ T1250] FAT-fs (loop1): Directory bread(block 64) failed [ 88.148685][ T1250] FAT-fs (loop1): Directory bread(block 65) failed [ 88.155404][ T1250] FAT-fs (loop1): Directory bread(block 66) failed [ 88.161990][ T1250] FAT-fs (loop1): Directory bread(block 67) failed [ 88.168675][ T1250] FAT-fs (loop1): Directory bread(block 68) failed [ 88.175260][ T1250] FAT-fs (loop1): Directory bread(block 69) failed [ 88.181969][ T1250] FAT-fs (loop1): Directory bread(block 70) failed [ 88.188533][ T1250] FAT-fs (loop1): Directory bread(block 71) failed [ 88.195239][ T1250] FAT-fs (loop1): Directory bread(block 72) failed [ 88.201813][ T1250] FAT-fs (loop1): Directory bread(block 73) failed [ 88.281216][ T30] audit: type=1400 audit(1761660926.389:225): avc: denied { read } for pid=1240 comm="syz.1.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.397525][ T1239] EXT4-fs error (device loop0): ext4_do_update_inode:5241: inode #3: comm syz.0.250: corrupted inode contents [ 88.426225][ T1239] EXT4-fs (loop0): Remounting filesystem read-only [ 88.543381][ T1239] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #3: comm syz.0.250: mark_inode_dirty error [ 88.559857][ T1261] loop3: detected capacity change from 0 to 256 [ 88.637668][ T1262] incfs: Backing dir is not set, filesystem can't be mounted. [ 88.645370][ T1262] incfs: mount failed -2 [ 88.845428][ T1239] EXT4-fs (loop0): Remounting filesystem read-only [ 88.852533][ T1261] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 88.868761][ T1239] EXT4-fs error (device loop0): ext4_do_update_inode:5241: inode #3: comm syz.0.250: corrupted inode contents [ 88.869527][ T1261] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 88.889250][ T1239] EXT4-fs (loop0): Remounting filesystem read-only [ 88.896364][ T1239] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.250: mark_inode_dirty error [ 88.896496][ T1261] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 88.907565][ T1239] EXT4-fs (loop0): Remounting filesystem read-only [ 88.926994][ T1239] Quota error (device loop0): write_blk: dquota write failed [ 88.934651][ T1239] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 88.945892][ T1239] EXT4-fs error (device loop0): ext4_acquire_dquot:6200: comm syz.0.250: Failed to acquire dquot type 0 [ 88.962028][ T1239] EXT4-fs (loop0): Remounting filesystem read-only [ 88.968957][ T1239] EXT4-fs error (device loop0): ext4_do_update_inode:5241: inode #16: comm syz.0.250: corrupted inode contents [ 88.981208][ T1239] EXT4-fs (loop0): Remounting filesystem read-only [ 88.987745][ T1239] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #16: comm syz.0.250: mark_inode_dirty error [ 89.005624][ T1239] EXT4-fs (loop0): Remounting filesystem read-only [ 89.012984][ T1239] EXT4-fs error (device loop0): ext4_do_update_inode:5241: inode #16: comm syz.0.250: corrupted inode contents [ 89.025120][ T1239] EXT4-fs (loop0): Remounting filesystem read-only [ 89.031778][ T1239] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.250: mark_inode_dirty error [ 89.043257][ T1239] EXT4-fs (loop0): Remounting filesystem read-only [ 89.049809][ T1239] EXT4-fs error (device loop0): ext4_do_update_inode:5241: inode #16: comm syz.0.250: corrupted inode contents [ 89.061964][ T1239] EXT4-fs (loop0): Remounting filesystem read-only [ 89.068516][ T1239] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 89.077449][ T1239] EXT4-fs (loop0): Remounting filesystem read-only [ 89.090274][ T1239] EXT4-fs error (device loop0): ext4_do_update_inode:5241: inode #16: comm syz.0.250: corrupted inode contents [ 89.102510][ T1239] EXT4-fs (loop0): Remounting filesystem read-only [ 89.109052][ T1239] EXT4-fs error (device loop0): ext4_truncate:4310: inode #16: comm syz.0.250: mark_inode_dirty error [ 89.124848][ T1239] EXT4-fs (loop0): Remounting filesystem read-only [ 89.131591][ T1239] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 89.140632][ T1239] EXT4-fs (loop0): Remounting filesystem read-only [ 89.147560][ T1239] EXT4-fs (loop0): 1 truncate cleaned up [ 89.153429][ T1239] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nobh,. Quota mode: writeback. [ 89.994078][ T1239] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.174894][ T1275] tipc: Started in network mode [ 90.184179][ T1275] tipc: Node identity ae51103fdd57, cluster identity 4711 [ 90.198512][ T1275] tipc: Enabled bearer , priority 0 [ 90.303835][ T1286] overlayfs: failed to resolve './file1': -2 [ 90.482294][ T1275] loop2: detected capacity change from 0 to 1024 [ 90.562488][ T1275] EXT4-fs (loop2): Ignoring removed nobh option [ 90.578060][ T1275] EXT4-fs (loop2): Ignoring removed bh option [ 90.586286][ T1275] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 90.612379][ T1275] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,data_err=abort,barrier=0x0000000000000002,dioread_lock,errors=remount-ro,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,. Quota mode: writeback. [ 90.627594][ T1282] loop3: detected capacity change from 0 to 40427 [ 90.682217][ T1282] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 90.709571][ T1282] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 90.722103][ T1282] F2FS-fs (loop3): invalid crc value [ 90.729293][ T1282] F2FS-fs (loop3): Found nat_bits in checkpoint [ 90.750691][ T1282] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 90.758083][ T1282] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 91.281418][ T1298] loop0: detected capacity change from 0 to 1024 [ 91.415798][ T429] tipc: Node number set to 1929777215 [ 91.472282][ T1298] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 91.497742][ T1271] tipc: Resetting bearer [ 91.549661][ T1271] tipc: Disabling bearer [ 91.595452][ T1298] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000003,min_batch_time=0x0000000000000001,nogrpid,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x0000000000. Quota mode: none. [ 91.956406][ T1314] loop2: detected capacity change from 0 to 128 [ 92.680378][ T1336] incfs: Backing dir is not set, filesystem can't be mounted. [ 92.688034][ T1336] incfs: mount failed -2 [ 93.445953][ T1337] overlayfs: failed to resolve './file0': -2 [ 93.517223][ T1342] overlayfs: failed to clone upperpath [ 93.666407][ T1357] loop1: detected capacity change from 0 to 128 [ 93.678181][ T1350] tipc: Started in network mode [ 93.684740][ T1350] tipc: Node identity 168d0e0f0a05, cluster identity 4711 [ 93.692084][ T1350] tipc: Enabled bearer , priority 0 [ 93.719768][ T30] audit: type=1400 audit(1761660931.839:226): avc: denied { wake_alarm } for pid=1363 comm="syz.2.285" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 93.766249][ T1365] loop3: detected capacity change from 0 to 1024 [ 93.796853][ T1365] EXT4-fs (loop3): Ignoring removed nobh option [ 93.806171][ T1365] EXT4-fs (loop3): Ignoring removed bh option [ 93.812606][ T1365] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 93.833023][ T1365] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,data_err=abort,barrier=0x0000000000000002,dioread_lock,errors=remount-ro,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,. Quota mode: writeback. [ 93.990478][ T30] audit: type=1400 audit(1761660932.109:227): avc: denied { create } for pid=1375 comm="syz.2.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 94.477334][ T1349] tipc: Resetting bearer [ 94.491076][ T1349] tipc: Disabling bearer [ 94.712736][ T1391] overlayfs: failed to clone upperpath [ 95.413960][ T1411] loop0: detected capacity change from 0 to 1024 [ 95.505008][ T1411] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 95.557481][ T30] audit: type=1400 audit(1761660934.689:228): avc: denied { setattr } for pid=1419 comm="syz.4.302" name="NETLINK" dev="sockfs" ino=20693 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 95.581749][ T1411] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000003,min_batch_time=0x0000000000000001,nogrpid,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x0000000000. Quota mode: none. [ 95.684310][ T1432] tipc: Enabled bearer , priority 0 [ 95.745975][ T1445] loop1: detected capacity change from 0 to 1024 [ 96.107141][ T1448] overlayfs: failed to clone upperpath [ 96.577399][ T1451] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.584732][ T1451] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.614878][ T1445] EXT4-fs (loop1): Ignoring removed nobh option [ 96.622044][ T1445] EXT4-fs (loop1): Ignoring removed bh option [ 96.628856][ T1445] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 96.659921][ T1461] loop0: detected capacity change from 0 to 256 [ 96.679679][ T1461] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 96.704597][ T1461] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 96.715511][ T1461] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 97.111983][ T1445] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,data_err=abort,barrier=0x0000000000000002,dioread_lock,errors=remount-ro,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,. Quota mode: writeback. [ 97.466788][ T1473] loop3: detected capacity change from 0 to 512 [ 97.562019][ T1473] EXT4-fs (loop3): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 97.587357][ T1473] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.641707][ T1431] tipc: Resetting bearer [ 97.673339][ T1431] tipc: Disabling bearer [ 97.680478][ T1481] loop0: detected capacity change from 0 to 128 [ 97.714688][ T1481] EXT4-fs (loop0): Test dummy encryption mode enabled [ 97.755052][ T1481] EXT4-fs (loop0): Test dummy encryption mode enabled [ 97.763524][ T1481] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 97.850448][ T1481] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 97.879510][ T1481] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 97.975128][ T1491] loop2: detected capacity change from 0 to 512 [ 98.788719][ T1495] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 98.799083][ T1495] overlayfs: upper fs does not support tmpfile. [ 98.812433][ T1495] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 99.298332][ T1491] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 99.428424][ T1491] EXT4-fs (loop2): 1 truncate cleaned up [ 99.434228][ T1491] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,resgid=0x0000000000000000,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 99.593054][ T1491] device veth0_vlan left promiscuous mode [ 99.599911][ T1491] device veth0_vlan entered promiscuous mode [ 99.612057][ T1491] device veth1_macvtap left promiscuous mode [ 99.621703][ T1491] device veth1_macvtap entered promiscuous mode [ 99.793749][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.825577][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.868631][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.888685][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.895762][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.904622][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.913423][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.921957][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.928978][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.937567][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.945858][ T1507] loop2: detected capacity change from 0 to 512 [ 99.945901][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 99.960152][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.968895][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 99.977074][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.987184][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.995439][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.008767][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.018968][ T1507] EXT4-fs (loop2): Ignoring removed nobh option [ 100.026206][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.034630][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.043406][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.056189][ T1507] EXT4-fs error (device loop2): ext4_do_update_inode:5241: inode #3: comm syz.2.330: corrupted inode contents [ 100.075409][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.089831][ T1507] EXT4-fs (loop2): Remounting filesystem read-only [ 100.141170][ T1507] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #3: comm syz.2.330: mark_inode_dirty error [ 100.157037][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.166172][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.168084][ T1507] EXT4-fs (loop2): Remounting filesystem read-only [ 100.180837][ T1507] EXT4-fs error (device loop2): ext4_do_update_inode:5241: inode #3: comm syz.2.330: corrupted inode contents [ 100.192705][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.200761][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.208803][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.211323][ T1507] EXT4-fs (loop2): Remounting filesystem read-only [ 100.217154][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.229851][ T1507] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.330: mark_inode_dirty error [ 100.294712][ T1507] EXT4-fs (loop2): Remounting filesystem read-only [ 100.487003][ T1507] Quota error (device loop2): write_blk: dquota write failed [ 100.494631][ T1507] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 100.506054][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.524138][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.540705][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.550722][ T1507] EXT4-fs error (device loop2): ext4_acquire_dquot:6200: comm syz.2.330: Failed to acquire dquot type 0 [ 100.568735][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.581589][ T1507] EXT4-fs (loop2): Remounting filesystem read-only [ 100.590577][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.603632][ T1507] EXT4-fs error (device loop2): ext4_do_update_inode:5241: inode #16: comm syz.2.330: corrupted inode contents [ 100.618938][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.635921][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 100.651448][ T1507] EXT4-fs (loop2): Remounting filesystem read-only [ 100.658916][ T1507] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #16: comm syz.2.330: mark_inode_dirty error [ 100.670697][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 100.689895][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.697691][ T1507] EXT4-fs (loop2): Remounting filesystem read-only [ 100.714973][ T1507] EXT4-fs error (device loop2): ext4_do_update_inode:5241: inode #16: comm syz.2.330: corrupted inode contents [ 100.747415][ T1507] EXT4-fs (loop2): Remounting filesystem read-only [ 100.754352][ T1507] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.330: mark_inode_dirty error [ 100.781559][ T1507] EXT4-fs (loop2): Remounting filesystem read-only [ 100.791286][ T1507] EXT4-fs error (device loop2): ext4_do_update_inode:5241: inode #16: comm syz.2.330: corrupted inode contents [ 100.821503][ T1507] EXT4-fs (loop2): Remounting filesystem read-only [ 100.828077][ T1507] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 100.848628][ T1507] EXT4-fs (loop2): Remounting filesystem read-only [ 100.867074][ T1507] EXT4-fs error (device loop2): ext4_do_update_inode:5241: inode #16: comm syz.2.330: corrupted inode contents [ 100.891328][ T1507] EXT4-fs (loop2): Remounting filesystem read-only [ 100.902755][ T1507] EXT4-fs error (device loop2): ext4_truncate:4310: inode #16: comm syz.2.330: mark_inode_dirty error [ 100.924093][ T1507] EXT4-fs (loop2): Remounting filesystem read-only [ 100.930643][ T1507] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 100.939860][ T1507] EXT4-fs (loop2): Remounting filesystem read-only [ 100.941430][ T30] audit: type=1326 audit(1761660940.049:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1526 comm="syz.1.337" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8516148fc9 code=0x0 [ 100.949361][ T1507] EXT4-fs (loop2): 1 truncate cleaned up [ 100.975419][ T1507] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nobh,. Quota mode: writeback. [ 100.987962][ T1507] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.061807][ T1533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.337'. [ 101.213258][ T1549] loop0: detected capacity change from 0 to 512 [ 102.207794][ T1548] hub 6-0:1.0: USB hub found [ 102.213097][ T1548] hub 6-0:1.0: 1 port detected [ 102.859072][ T1549] EXT4-fs error (device loop0): ext4_do_update_inode:5241: inode #16: comm syz.0.338: corrupted inode contents [ 102.972910][ T1549] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #16: comm syz.0.338: mark_inode_dirty error [ 102.984419][ T1549] EXT4-fs error (device loop0): ext4_do_update_inode:5241: inode #16: comm syz.0.338: corrupted inode contents [ 102.996499][ T1549] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.338: mark_inode_dirty error [ 103.007842][ T1549] EXT4-fs error (device loop0): ext4_do_update_inode:5241: inode #16: comm syz.0.338: corrupted inode contents [ 103.019784][ T1549] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 103.161883][ T1549] EXT4-fs error (device loop0): ext4_do_update_inode:5241: inode #16: comm syz.0.338: corrupted inode contents [ 103.174932][ T1549] EXT4-fs error (device loop0): ext4_truncate:4310: inode #16: comm syz.0.338: mark_inode_dirty error [ 103.187690][ T1549] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 103.202544][ T1549] EXT4-fs (loop0): 1 truncate cleaned up [ 103.208334][ T1549] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 103.219432][ T1549] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.432335][ T30] audit: type=1400 audit(1761660942.559:230): avc: denied { setopt } for pid=1576 comm="syz.2.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 103.433260][ T1577] ================================================================== [ 103.459607][ T1577] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 103.468817][ T1577] Read of size 1 at addr ffff888115f9e3f8 by task syz.2.351/1577 [ 103.476531][ T1577] [ 103.478858][ T1577] CPU: 1 PID: 1577 Comm: syz.2.351 Not tainted syzkaller #0 [ 103.486134][ T1577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 103.496209][ T1577] Call Trace: [ 103.499492][ T1577] [ 103.502505][ T1577] __dump_stack+0x21/0x30 [ 103.506837][ T1577] dump_stack_lvl+0xee/0x150 [ 103.511521][ T1577] ? show_regs_print_info+0x20/0x20 [ 103.516735][ T1577] ? load_image+0x3a0/0x3a0 [ 103.521241][ T1577] ? unwind_get_return_address+0x4d/0x90 [ 103.526878][ T1577] print_address_description+0x7f/0x2c0 [ 103.532432][ T1577] ? xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 103.538937][ T1577] kasan_report+0xf1/0x140 [ 103.543357][ T1577] ? xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 103.549861][ T1577] __asan_report_load1_noabort+0x14/0x20 [ 103.555499][ T1577] xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 103.561828][ T1577] xfrm_policy_inexact_insert_node+0x938/0xb50 [ 103.567983][ T1577] ? xfrm_netlink_rcv+0x72/0x90 [ 103.572836][ T1577] ? netlink_unicast+0x876/0xa40 [ 103.577769][ T1577] ? netlink_sendmsg+0x86a/0xb70 [ 103.582705][ T1577] ? ____sys_sendmsg+0x5a2/0x8c0 [ 103.587643][ T1577] ? ___sys_sendmsg+0x1f0/0x260 [ 103.592500][ T1577] ? x64_sys_call+0x4b/0x9a0 [ 103.597091][ T1577] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.603163][ T1577] xfrm_policy_inexact_alloc_chain+0x53a/0xb30 [ 103.610881][ T1577] xfrm_policy_inexact_insert+0x70/0x1130 [ 103.616604][ T1577] ? __get_hash_thresh+0x10c/0x420 [ 103.621738][ T1577] ? policy_hash_bysel+0x110/0x4f0 [ 103.626855][ T1577] xfrm_policy_insert+0x126/0x9a0 [ 103.631880][ T1577] ? xfrm_policy_construct+0x54f/0x1f00 [ 103.637433][ T1577] xfrm_add_policy+0x4d1/0x830 [ 103.642320][ T1577] ? xfrm_dump_sa_done+0xc0/0xc0 [ 103.647266][ T1577] xfrm_user_rcv_msg+0x45c/0x6e0 [ 103.652212][ T1577] ? xfrm_netlink_rcv+0x90/0x90 [ 103.657071][ T1577] ? avc_has_perm_noaudit+0x460/0x460 [ 103.662447][ T1577] ? x64_sys_call+0x4b/0x9a0 [ 103.667044][ T1577] ? selinux_nlmsg_lookup+0x237/0x4c0 [ 103.672418][ T1577] netlink_rcv_skb+0x1e0/0x430 [ 103.677187][ T1577] ? xfrm_netlink_rcv+0x90/0x90 [ 103.682040][ T1577] ? netlink_ack+0xb60/0xb60 [ 103.686635][ T1577] ? wait_for_completion_killable_timeout+0x10/0x10 [ 103.693228][ T1577] ? __netlink_lookup+0x387/0x3b0 [ 103.698263][ T1577] xfrm_netlink_rcv+0x72/0x90 [ 103.702949][ T1577] netlink_unicast+0x876/0xa40 [ 103.707721][ T1577] netlink_sendmsg+0x86a/0xb70 [ 103.712690][ T1577] ? netlink_getsockopt+0x530/0x530 [ 103.717891][ T1577] ? sock_alloc_file+0xba/0x260 [ 103.722747][ T1577] ? security_socket_sendmsg+0x82/0xa0 [ 103.728204][ T1577] ? netlink_getsockopt+0x530/0x530 [ 103.733410][ T1577] ____sys_sendmsg+0x5a2/0x8c0 [ 103.738275][ T1577] ? __sys_sendmsg_sock+0x40/0x40 [ 103.743301][ T1577] ? import_iovec+0x7c/0xb0 [ 103.747786][ T1577] ___sys_sendmsg+0x1f0/0x260 [ 103.752441][ T1577] ? __sys_sendmsg+0x250/0x250 [ 103.757285][ T1577] ? __fdget+0x1a1/0x230 [ 103.761517][ T1577] __x64_sys_sendmsg+0x1e2/0x2a0 [ 103.766438][ T1577] ? ___sys_sendmsg+0x260/0x260 [ 103.771272][ T1577] ? __kasan_check_write+0x14/0x20 [ 103.776361][ T1577] ? switch_fpu_return+0x15d/0x2c0 [ 103.781453][ T1577] x64_sys_call+0x4b/0x9a0 [ 103.785849][ T1577] do_syscall_64+0x4c/0xa0 [ 103.790249][ T1577] ? clear_bhb_loop+0x50/0xa0 [ 103.794912][ T1577] ? clear_bhb_loop+0x50/0xa0 [ 103.799577][ T1577] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.805463][ T1577] RIP: 0033:0x7f0c8967bfc9 [ 103.809859][ T1577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.829444][ T1577] RSP: 002b:00007f0c880e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.837840][ T1577] RAX: ffffffffffffffda RBX: 00007f0c898d2fa0 RCX: 00007f0c8967bfc9 [ 103.845792][ T1577] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 103.853738][ T1577] RBP: 00007f0c896fef91 R08: 0000000000000000 R09: 0000000000000000 [ 103.861687][ T1577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.869641][ T1577] R13: 00007f0c898d3038 R14: 00007f0c898d2fa0 R15: 00007ffcb10d0b38 [ 103.877592][ T1577] [ 103.880587][ T1577] [ 103.882885][ T1577] Allocated by task 1577: [ 103.887181][ T1577] __kasan_kmalloc+0xda/0x110 [ 103.891832][ T1577] __kmalloc+0x13d/0x2c0 [ 103.896059][ T1577] sk_prot_alloc+0xed/0x320 [ 103.900541][ T1577] sk_alloc+0x38/0x430 [ 103.904580][ T1577] pfkey_create+0x12a/0x660 [ 103.909058][ T1577] __sock_create+0x38d/0x7a0 [ 103.913638][ T1577] __sys_socket+0xec/0x190 [ 103.918031][ T1577] __x64_sys_socket+0x7a/0x90 [ 103.922681][ T1577] x64_sys_call+0x8c5/0x9a0 [ 103.927155][ T1577] do_syscall_64+0x4c/0xa0 [ 103.931543][ T1577] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.937410][ T1577] [ 103.939705][ T1577] The buggy address belongs to the object at ffff888115f9e000 [ 103.939705][ T1577] which belongs to the cache kmalloc-1k of size 1024 [ 103.953725][ T1577] The buggy address is located 1016 bytes inside of [ 103.953725][ T1577] 1024-byte region [ffff888115f9e000, ffff888115f9e400) [ 103.967144][ T1577] The buggy address belongs to the page: [ 103.972744][ T1577] page:ffffea000457e600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x115f98 [ 103.982950][ T1577] head:ffffea000457e600 order:3 compound_mapcount:0 compound_pincount:0 [ 103.991245][ T1577] flags: 0x4000000000010200(slab|head|zone=1) [ 103.997300][ T1577] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043080 [ 104.005852][ T1577] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 104.016180][ T1577] page dumped because: kasan: bad access detected [ 104.022570][ T1577] page_owner tracks the page as allocated [ 104.028262][ T1577] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 113, ts 4633523341, free_ts 0 [ 104.046468][ T1577] post_alloc_hook+0x192/0x1b0 [ 104.051220][ T1577] prep_new_page+0x1c/0x110 [ 104.055703][ T1577] get_page_from_freelist+0x2cc5/0x2d50 [ 104.061220][ T1577] __alloc_pages+0x18f/0x440 [ 104.065782][ T1577] new_slab+0xa1/0x4d0 [ 104.069828][ T1577] ___slab_alloc+0x381/0x810 [ 104.074396][ T1577] __slab_alloc+0x49/0x90 [ 104.078700][ T1577] __kmalloc_track_caller+0x169/0x2c0 [ 104.084058][ T1577] __alloc_skb+0x21a/0x740 [ 104.088450][ T1577] netlink_sendmsg+0x602/0xb70 [ 104.093185][ T1577] ____sys_sendmsg+0x5a2/0x8c0 [ 104.097924][ T1577] ___sys_sendmsg+0x1f0/0x260 [ 104.102575][ T1577] __x64_sys_sendmsg+0x1e2/0x2a0 [ 104.107487][ T1577] x64_sys_call+0x4b/0x9a0 [ 104.111880][ T1577] do_syscall_64+0x4c/0xa0 [ 104.116270][ T1577] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.122138][ T1577] page_owner free stack trace missing [ 104.127481][ T1577] [ 104.129789][ T1577] Memory state around the buggy address: [ 104.135401][ T1577] ffff888115f9e280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 104.143441][ T1577] ffff888115f9e300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 104.151476][ T1577] >ffff888115f9e380: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 104.159516][ T1577] ^ [ 104.167465][ T1577] ffff888115f9e400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 104.175503][ T1577] ffff888115f9e480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 104.183535][ T1577] ================================================================== [ 104.191565][ T1577] Disabling lock debugging due to kernel taint [ 104.204103][ T30] audit: type=1400 audit(1761660943.329:231): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 104.238692][ T30] audit: type=1400 audit(1761660943.329:232): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.264416][ T30] audit: type=1400 audit(1761660943.329:233): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.285739][ T30] audit: type=1400 audit(1761660943.329:234): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.306334][ T30] audit: type=1400 audit(1761660943.329:235): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 104.326872][ T30] audit: type=1400 audit(1761660943.329:236): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1