last executing test programs: 25m49.740712281s ago: executing program 1 (id=1381): r0 = socket$can_bcm(0x1d, 0x2, 0x2) close_range(r0, r0, 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) socket$xdp(0x2c, 0x3, 0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000002c0)={0x400000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000200)="05", 0x1}]) 25m49.607633071s ago: executing program 1 (id=1388): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) close(r0) 25m49.449665921s ago: executing program 1 (id=1393): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) 25m49.371547091s ago: executing program 1 (id=1395): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x1d, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x18, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800700, &(0x7f0000000980)={[{@barrier}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@test_dummy_encryption}, {@usrjquota}]}, 0x3, 0x474, &(0x7f0000000a00)="$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") 25m48.878830842s ago: executing program 1 (id=1400): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8002}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000140)="0b03060003001000020047c8aa96a13bb1001911000088ca1a00772bfc0d166321f30f7d26e3a9c898fa5645f412", 0x2e, 0x0, &(0x7f0000000040)={0x11, 0x0, r3}, 0x14) 25m48.508357373s ago: executing program 1 (id=1404): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) close(r0) 25m48.356353653s ago: executing program 32 (id=1404): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) close(r0) 21m33.192556636s ago: executing program 4 (id=3337): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x1010000, &(0x7f0000000300)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@utf8no}, {@utf8}, {@numtail}, {@numtail}, {}, {@shortname_lower}, {@utf8no}, {@shortname_win95}, {@shortname_lower}, {@shortname_lower}, {@shortname_win95}, {@fat=@check_strict}, {@rodir}]}, 0x1, 0x36c, &(0x7f0000000b00)="$eJzs3U1oY1UbAOA3vWnSDnxfuxMFIboTtMzMTjdOkQ4MdqMS/FmIwWlVmiq0WOwspq0LxaXgUlfuFHThQlyKoIg7F64ER5BRcaGzG3DwSHJzc2+TtFNHqhSfB5qcvue855z7Q3J7SU6fORdrF6dj9dq1qzEzU4v6uYfOxfVazEcWhd0Y15gQAwBOhuspxW8pd8SU2jFPCQA4Zv33/+ciohXzeeTVzw9rn7z7A8CJN/j7f/awNjMHVbx0LFMCAI7Z2P3/u/dVN/o/9eLXeuVTAQDASfXYk089vLgc8WirNROx/vpWe6sdD5T1i6vxQnRjJU7HXNyIyC8Ueg+1/uP5C8tLp1ut1k78OB/tiJgaJLbzK4XFrJ/fjDMxF/OD/MHVRkopO//R8tKZVl9E7O70x4/12lZ7Ok4Nxv/uVKyUFx5FJ/2niAvLS2dbgw7a60X+TsReed+iN/+FmIuvnx12k1LxCcblpctnikmX+VvtZlwc7oUD74AAAAAAAAAAAAAAAAAAAAAAAMAtWWgNzQ/Xz0m953ylnIWFCfX99XHy/MXV+Da6sZevD5SaKVL69ZX72m9ksW99oHJ9nkaebyFBAAAAAAAAAAAAAAAAAAAAGNrcbkSn213Z2Ny+tFYt7Gxsbk9FRC/y4pcffDYbZZvZQfJ41r5CPW/VjBgO0RpkXlrrpKxonLKI8fSsN3gRee/j4YyrbZrDrZg4jebBVd3u/+764e0ycmdW9PxH2SaLyRuYVabx4EjP6//Pp3TwbjmkcLYaaY6PfiWlVIm8Vk2//PR4h1GLqN/sME0qTMXBbVKv8MXV528v9n7n05S75965x6+89e7Pa51ub+ToH8HGxuaNtNapFY3/2m7p7eoiUou8UKueCfXD0vf2RzrZN788ccebXx1t9FSNvNw7n0faZPnmfDia3sgLvWmOVM2W6dODjeiuTE84+W9WuIVjets7n7yf0vc/HXmI0tTYy0bt77/yAAAAAAAAAAAAAAAAAAAAoyrfFR8YfNl3+rCs+x85/pkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwD+n/P//lcLeboxEjlL4fWdCVnNlYzOi8W9vJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/3F/BgAA//9AE1cg") openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 21m30.213733401s ago: executing program 4 (id=3339): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="09000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) timerfd_create(0x8, 0x0) 21m30.085095671s ago: executing program 4 (id=3341): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 21m28.965255273s ago: executing program 4 (id=3345): r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000080)={[{@errors_remount}]}, 0x3, 0x500, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) timer_create(0x2, 0x0, &(0x7f0000000080)) timer_create(0x2, 0x0, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x1c9c380}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000340)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@jqfmt_vfsv0}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000255, &(0x7f0000000280)=ANY=[@ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x100000d) sched_setscheduler(r4, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000000d80)=ANY=[], 0x42c}, 0x1, 0x0, 0x0, 0x20000804}, 0x40081) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x5e, &(0x7f0000000300)=[{0x86, 0x10, 0x0, 0x7fffff7f}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) 21m28.384399074s ago: executing program 4 (id=3346): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x82020000) 21m28.181594594s ago: executing program 4 (id=3347): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 21m28.087994175s ago: executing program 33 (id=3347): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 4.895771431s ago: executing program 2 (id=11278): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000a50000002a00000095"], &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 4.87233384s ago: executing program 2 (id=11279): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) io_uring_setup(0x3eae, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$P9_RWALK(r3, &(0x7f0000000000)=ANY=[], 0x9) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f00005bd000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0f21cd0f001b66b9c50900000f323e0f2299f2e3060f013d66b8001000000f23d80f21f86635400000600f23f836660f3a0a6063f3b800008ed0f30f167005", 0x3f}], 0x1, 0xa, &(0x7f0000000180), 0x0) madvise(&(0x7f000028c000/0x1000)=nil, 0x1000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000004b2d7596301226c4157e791360820000e3d4211d00"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) sendfile(r6, r6, 0x0, 0x6) 3.762685053s ago: executing program 3 (id=11295): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800b6ab8d1775317f22c6c77ed3e25466490000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000280), &(0x7f0000000880)}, 0x20) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r1}, 0x10) r2 = io_uring_setup(0x1d7f, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0xd, 0x0, 0x20) 3.741716573s ago: executing program 2 (id=11297): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000840)='./file0\x00', 0x801, &(0x7f0000000080), 0x64, 0x518, &(0x7f0000000200)="$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") llistxattr(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) 3.608437053s ago: executing program 3 (id=11298): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r2, 0x25, 0x2, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x5}}, 0x30) syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0x0, 0x1ff0000aa}, @remote}}}}}}, 0x0) 3.607996643s ago: executing program 2 (id=11299): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000380)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1414aa000000000100000000000000fe80000000000000ff0300000000000000000000000000000000000000d00000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001c0044"], 0x154}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 3.607410803s ago: executing program 3 (id=11300): r0 = epoll_create(0x3ff) r1 = epoll_create1(0x80000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000280)) 3.584308253s ago: executing program 2 (id=11301): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') 3.557604803s ago: executing program 3 (id=11302): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[], 0x1, 0x17d, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) socket(0x10, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$eJzs3c9vHFcdAPDvjH82TesEeoAKSIBCQFF2400bVb20uYBQVQlRcUAcUmNvLJNdr/GuS20s4f4NIIHECf4EDkgckHriwI0jEgeEVA5IASxQjATSopkdO1t7TZbsepd6Px9pMvPmzcz3vWxm39u3m3kBTKyrEbEXEbMR8VZELBT7k2KJ1zpLdtzD/d3lg/3d5STa7Tf/muT52b7oOifzdHHN+Yj42pcjvpWcjNvc3rm/VKtVN4t0uVXfKDe3d26s1ZdWq6vV9Url9uLtmy/feqkytLpeqf/8wZfWXv/6r375yfd/u/fF72XFuljkdddjmDpVnzmKk5mOiNfPItgYTBXr2TGXgyeTRsRHIuIz+f2/EFP5v04A4DxrtxeivdCdBgDOuzQfA0vSUkSkadEJKHXG8J6LC2mt0Wxdv9fYWl/pjJVdipn03lqtevPy3O+/kx88k2TpxTwvz8/TlWPpWxFxOSJ+OPdUni4tN2or4+nyAMDEe7q7/Y+If8ylaanU16k9vtUDAD405sddAABg5LT/ADB5tP8AMHn6aP+LL/v3zrwsAMBo+PwPAJNH+w8Ak0f7DwAT5atvvJEt7YPi+dcrb29v3W+8fWOl2rxfqm8tl5Ybmxul1UZjNX9mT/1x16s1GhuLL8bWO+VWtdkqN7d37tYbW+utu/lzve9WZ0ZSKwDgv7l85b3fJRGx98pT+RJdczloq+F8S8ddAGBspgY5WQcBPtTM9gWTq68mPO8k/ObMywKMR8+Hec/33PygH/8PQfzOCP6vXPt4/+P/5niG88X4P0yuJxv/f3Xo5QBGz/g/TK52Ozk+5//sURYAcC4N8BO+9veH1QkBxupxk3kP5ft/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOGcuRsS3I0lL+VzgafZnWipFPBMRl2ImubdWq96MiGfjSkTMzGXpxXEXGgAYUPrnpJj/69rCCxeP584m/5zL1xHx3Z+8+aN3llqtzcVs/9+O9s8dTh9WeXTeAPMKAgBDlrfflWLd9UH+4f7u8uEyyvI8uBP/LqYiXj7Y382XTs50ZDsj5vO+xIW/JzFdnDMfEc9HxNQQ4u+9GxEf61X/JB8buVTMfNodP4rYz4w0fvqB+Gme11lnna+PDqEsMGneuxMRr/W6/9K4mq973//z+TvU4B7c6Vzs8L3voCv+dBFpqkf87J6/2m+MF3/9lRM72wudvHcjnp/uFT85ip+cEv+FPuP/4ROf+sGrp+S1fxpxLXrH745VbtU3ys3tnRtr9aXV6mp1vVK5vXj75su3XqqU8zHq8uFI9Ul/eeX6s6eVLav/hVPiz/es/+zRuZ/rs/4/+9db3/z0o+Tc8fhf+Gzv1/+5nvE7sjbx833GX7rwi1On787ir5xS/8e9/tf7jP/+n3ZW+jwUABiB5vbO/aVarbo50Eb2KXQY1zmxkRWxv4MPu4uDBf1jnEUtnnBj5qz+Vs98Y/qorzjcK38ju+KIq5MOvRYDbTwcVazxvScBo/Hoph93SQAAAAAAAAAAAAAAgNOM4r8ujbuOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CQAA//+zi8zo") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='f2fs_readdir\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000008f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) getpid() socket$inet(0x2, 0x2, 0xfffffffd) socket$netlink(0x10, 0x3, 0x0) read$FUSE(r0, &(0x7f0000000900)={0x2020}, 0x2020) 3.407904323s ago: executing program 2 (id=11303): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x1c, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x1c, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x32}, [@func, @call, @exit], {0x95, 0x0, 0x5a5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000010902240001000000000904000000ff0100000724", @ANYRES16=r7], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) 3.078431024s ago: executing program 0 (id=11306): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0xfffd, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2}}}}}}}, 0x0) 3.077735874s ago: executing program 0 (id=11307): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e") r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x0) sendfile(r6, r6, 0x0, 0x7a680000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000d00)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) 1.963837546s ago: executing program 5 (id=11308): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r5, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x7, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @local}) 1.959017436s ago: executing program 3 (id=11309): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x39) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000}]) 1.482172387s ago: executing program 0 (id=11310): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}, 0x0) 1.384869657s ago: executing program 0 (id=11313): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800004e9d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) 1.384466387s ago: executing program 0 (id=11314): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2720, 0x0, &(0x7f0000000000)) 1.366497957s ago: executing program 5 (id=11315): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) read(r0, 0x0, 0x0) 1.334304588s ago: executing program 5 (id=11316): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x6f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) time(0x0) 1.236597677s ago: executing program 0 (id=11317): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) ppoll(&(0x7f00000000c0)=[{r0, 0x1}, {0xffffffffffffffff, 0x40a4}], 0x2, 0x0, 0x0, 0x0) 1.236048968s ago: executing program 5 (id=11318): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_clone3(&(0x7f00000002c0)={0x2004000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0), {0x3}, 0x0, 0x0, &(0x7f00000001c0)=""/87, &(0x7f0000000240)}, 0x58) timer_create(0x4, &(0x7f0000000340)={0x0, 0x10, 0x2, @tid=r1}, &(0x7f0000000380)) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008"], 0x40}}, 0x0) 651.316039ms ago: executing program 3 (id=11319): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 513.833569ms ago: executing program 6 (id=11320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x11c}}, 0x0) 499.357299ms ago: executing program 6 (id=11321): recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}}], 0x1, 0x140, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 174.55359ms ago: executing program 5 (id=11322): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYRES16=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') sendfile(r3, r3, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) getpid() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) write(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r6, 0x407, 0x2000000) inotify_rm_watch(r0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, 0x0, 0x1, 0x4e22, 0x3, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private2, 0x0, 0x32}, @in6=@remote, {0x0, 0x0, 0x8, 0x0, 0x438}, {0x0, 0x80000000000000}, {0x8}, 0x70bd2b, 0x0, 0xa, 0x0, 0x0, 0x3}, [@algo_aead={0x50, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x20, 0x80, "e55b28dc"}}]}, 0x140}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 140.6726ms ago: executing program 6 (id=11323): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) 140.01923ms ago: executing program 5 (id=11324): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000002c0)={[{@mb_optimize_scan}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@auto_da_alloc}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") rmdir(&(0x7f0000000a40)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) creat(&(0x7f0000000140)='./file2\x00', 0x1ad) unlink(&(0x7f0000000180)='./file1\x00') 84.73053ms ago: executing program 6 (id=11325): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800004e9d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) 60.46963ms ago: executing program 6 (id=11326): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) nanosleep(&(0x7f0000000200), 0x0) 0s ago: executing program 6 (id=11327): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) kernel console output (not intermixed with test programs): nted filesystem without journal. Quota mode: writeback. [ 1512.856334][T30522] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1513.487857][T26413] EXT4-fs (loop3): unmounting filesystem. [ 1514.422196][T27655] EXT4-fs (loop6): unmounting filesystem. [ 1514.432702][ T28] audit: type=1400 audit(2000000670.925:4983): avc: denied { mounton } for pid=30553 comm="syz.3.10212" path="/230/file0" dev="tmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1514.503553][T30560] loop6: detected capacity change from 0 to 512 [ 1514.551665][T30560] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1514.562452][T30560] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1514.569107][T30560] Quota error (device loop6): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 1514.579681][T30560] EXT4-fs warning (device loop6): ext4_enable_quotas:7023: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1514.594392][T30560] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 1514.683931][ T28] audit: type=1326 audit(2000000671.155:4984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30557 comm="syz.3.10214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1514.709708][T30560] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #16: comm syz.6.10215: iget: immutable or append flags not allowed on symlinks [ 1514.728647][T30560] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.10215: couldn't read orphan inode 16 (err -117) [ 1514.740985][ T28] audit: type=1326 audit(2000000671.155:4985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30557 comm="syz.3.10214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1514.765819][T30560] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1514.818220][T30560] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1514.826068][ T28] audit: type=1326 audit(2000000671.155:4986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30557 comm="syz.3.10214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1514.849559][ T28] audit: type=1326 audit(2000000671.155:4987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30557 comm="syz.3.10214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1515.380050][T30571] xt_hashlimit: size too large, truncated to 1048576 [ 1515.711605][T27655] EXT4-fs (loop6): unmounting filesystem. [ 1516.145379][T30603] overlayfs: missing 'lowerdir' [ 1516.280608][T30605] xt_hashlimit: size too large, truncated to 1048576 [ 1517.748219][T30637] xt_hashlimit: size too large, truncated to 1048576 [ 1518.173787][T30649] loop6: detected capacity change from 0 to 16 [ 1518.181029][T30649] erofs: (device loop6): mounted with root inode @ nid 36. [ 1518.541683][ T46] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 1518.552632][T30653] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1518.997307][T30667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30667 comm=syz.2.10249 [ 1519.302660][T30670] overlayfs: missing 'lowerdir' [ 1519.426885][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 1519.426903][ T28] audit: type=1326 audit(2000000675.915:5016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30673 comm="syz.5.10248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe801785d19 code=0x7ffc0000 [ 1519.516017][ T28] audit: type=1326 audit(2000000675.955:5017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30673 comm="syz.5.10248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe801785d19 code=0x7ffc0000 [ 1519.558981][ T28] audit: type=1326 audit(2000000675.955:5018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30673 comm="syz.5.10248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7fe801785d19 code=0x7ffc0000 [ 1519.606949][ T28] audit: type=1326 audit(2000000675.955:5019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30673 comm="syz.5.10248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe801785d19 code=0x7ffc0000 [ 1519.704434][T30681] loop2: detected capacity change from 0 to 512 [ 1519.711955][ T28] audit: type=1326 audit(2000000675.955:5020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30673 comm="syz.5.10248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe801785d19 code=0x7ffc0000 [ 1519.924867][T30681] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1519.948816][T30681] ext4 filesystem being mounted at /291/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1520.195415][T26055] EXT4-fs (loop2): unmounting filesystem. [ 1520.406526][T30704] overlayfs: missing 'lowerdir' [ 1520.457308][T30705] loop2: detected capacity change from 0 to 2048 [ 1520.473814][T30705] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1520.485074][ T28] audit: type=1326 audit(2000000676.985:5021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30707 comm="syz.5.10262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe801785d19 code=0x7ffc0000 [ 1520.534029][ T28] audit: type=1326 audit(2000000676.985:5022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30707 comm="syz.5.10262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe801785d19 code=0x7ffc0000 [ 1520.657748][ T28] audit: type=1326 audit(2000000677.015:5023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30707 comm="syz.5.10262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fe801785d19 code=0x7ffc0000 [ 1520.709965][ T28] audit: type=1326 audit(2000000677.015:5024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30707 comm="syz.5.10262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe801785d19 code=0x7ffc0000 [ 1520.734382][ T28] audit: type=1326 audit(2000000677.015:5025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30707 comm="syz.5.10262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe801785d19 code=0x7ffc0000 [ 1520.824329][T30721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30721 comm=syz.6.10265 [ 1520.881471][T30722] loop5: detected capacity change from 0 to 16 [ 1520.888448][T30722] erofs: (device loop5): mounted with root inode @ nid 36. [ 1521.228910][ T47] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 1521.240375][T30728] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1521.585198][ T553] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1521.598300][T30719] loop0: detected capacity change from 0 to 2048 [ 1521.618825][T30719] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1521.979855][T26701] EXT4-fs (loop0): unmounting filesystem. [ 1521.997286][ T553] usb 4-1: Using ep0 maxpacket: 8 [ 1522.003701][ T553] usb 4-1: config 32 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1522.017167][ T553] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1522.026232][ T553] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1522.362153][ T553] usb 4-1: string descriptor 0 read error: -71 [ 1522.368642][ T553] hub 4-1:32.0: bad descriptor, ignoring hub [ 1522.374494][ T553] hub: probe of 4-1:32.0 failed with error -5 [ 1522.419996][T30746] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1522.437878][ T553] usb 4-1: USB disconnect, device number 46 [ 1522.441488][T30746] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1523.005273][T30754] loop0: detected capacity change from 0 to 1024 [ 1523.013418][T30754] ext4: Unknown parameter 'noacl' [ 1523.098486][T26055] EXT4-fs (loop2): unmounting filesystem. [ 1523.131402][T30743] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1523.209785][T30763] xt_hashlimit: size too large, truncated to 1048576 [ 1523.826194][T30754] loop0: detected capacity change from 0 to 256 [ 1523.852064][T30743] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1523.907444][T30743] Buffer I/O error on dev loop0, logical block 0, async page read [ 1523.920947][T30754] FAT-fs (loop0): Directory bread(block 64) failed [ 1523.952242][T30754] FAT-fs (loop0): Directory bread(block 65) failed [ 1523.969750][T30771] loop6: detected capacity change from 0 to 16 [ 1523.987437][T30754] FAT-fs (loop0): Directory bread(block 66) failed [ 1523.993870][T30754] FAT-fs (loop0): Directory bread(block 67) failed [ 1524.001149][T30754] FAT-fs (loop0): Directory bread(block 68) failed [ 1524.008266][T30754] FAT-fs (loop0): Directory bread(block 69) failed [ 1524.015047][T30754] FAT-fs (loop0): Directory bread(block 70) failed [ 1524.021948][T30754] FAT-fs (loop0): Directory bread(block 71) failed [ 1524.028627][T30754] FAT-fs (loop0): Directory bread(block 72) failed [ 1524.035001][T30754] FAT-fs (loop0): Directory bread(block 73) failed [ 1524.055515][T30771] erofs: (device loop6): mounted with root inode @ nid 36. [ 1524.358104][ T47] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 1525.259741][T30780] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1525.316211][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 1525.316232][ T28] audit: type=1326 audit(2000000680.925:5027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30777 comm="syz.3.10286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1525.410694][ T28] audit: type=1326 audit(2000000680.925:5028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30777 comm="syz.3.10286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1525.457239][ T28] audit: type=1326 audit(2000000680.935:5029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30777 comm="syz.3.10286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1525.481815][ T28] audit: type=1326 audit(2000000680.935:5030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30777 comm="syz.3.10286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1525.515352][ T28] audit: type=1326 audit(2000000680.945:5031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30777 comm="syz.3.10286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1525.558977][ T28] audit: type=1326 audit(2000000680.945:5032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30777 comm="syz.3.10286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1525.597274][ T28] audit: type=1326 audit(2000000680.955:5033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30777 comm="syz.3.10286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1525.627389][ T311] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1525.639413][ T28] audit: type=1326 audit(2000000680.955:5034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30777 comm="syz.3.10286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1525.671966][ T28] audit: type=1326 audit(2000000680.955:5035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30777 comm="syz.3.10286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1525.698515][ T28] audit: type=1326 audit(2000000680.955:5036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30777 comm="syz.3.10286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1526.092864][ T311] usb 4-1: Using ep0 maxpacket: 8 [ 1526.099123][ T311] usb 4-1: config 32 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1526.117593][ T311] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1526.127260][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1526.275187][T30809] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10295'. [ 1526.393941][T30812] loop5: detected capacity change from 0 to 2048 [ 1526.891339][T30812] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1526.918402][T30812] 9pnet_fd: Insufficient options for proto=fd [ 1528.269611][ T311] usb 4-1: string descriptor 0 read error: -71 [ 1528.275800][ T311] hub 4-1:32.0: bad descriptor, ignoring hub [ 1528.300693][T30827] loop0: detected capacity change from 0 to 1024 [ 1528.307017][ T311] hub: probe of 4-1:32.0 failed with error -5 [ 1528.328280][T30827] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1528.367519][T22396] EXT4-fs (loop5): unmounting filesystem. [ 1528.404194][T30831] loop2: detected capacity change from 0 to 1024 [ 1528.410948][T30831] EXT4-fs: Ignoring removed i_version option [ 1528.417125][T30831] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1528.433713][T30827] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1528.447898][ T311] usb 4-1: USB disconnect, device number 47 [ 1528.475538][T30831] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1528.485541][T30831] EXT4-fs (loop2): unmounting filesystem. [ 1528.556208][T30827] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1530.369485][T26701] EXT4-fs (loop0): unmounting filesystem. [ 1530.407306][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 1530.407340][ T28] audit: type=1400 audit(2000000686.875:5100): avc: denied { write } for pid=30834 comm="syz.6.10303" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1530.975439][T30871] loop0: detected capacity change from 0 to 16 [ 1530.993113][T30871] erofs: (device loop0): mounted with root inode @ nid 36. [ 1531.344300][T30876] loop5: detected capacity change from 0 to 2048 [ 1533.128188][T30878] netlink: 'syz.0.10311': attribute type 4 has an invalid length. [ 1533.782446][ T46] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 1533.816476][T30876] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1533.838102][T30875] 9pnet_fd: Insufficient options for proto=fd [ 1533.897357][T30887] loop0: detected capacity change from 0 to 512 [ 1533.922588][T30887] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 1533.930985][T30887] System zones: 0-2, 18-18, 34-34 [ 1533.937103][T30887] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.10314: bg 0: block 248: padding at end of block bitmap is not set [ 1533.967571][T30887] Quota error (device loop0): write_blk: dquota write failed [ 1533.985028][T30887] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1533.996260][T22396] EXT4-fs (loop5): unmounting filesystem. [ 1534.051088][T30887] EXT4-fs error (device loop0): ext4_acquire_dquot:6788: comm syz.0.10314: Failed to acquire dquot type 1 [ 1534.077883][T30887] EXT4-fs (loop0): 1 truncate cleaned up [ 1534.090002][T30899] loop6: detected capacity change from 0 to 512 [ 1534.096326][T30887] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1534.133944][T30899] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1534.147482][T30887] ext4 filesystem being mounted at /267/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1534.168153][T30899] EXT4-fs error (device loop6): ext4_orphan_get:1426: comm syz.6.10319: bad orphan inode 131083 [ 1534.501035][ T28] audit: type=1326 audit(2000000690.735:5101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30894 comm="syz.3.10318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1534.557964][T30899] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1534.786108][T30899] EXT4-fs error (device loop6): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.6.10319: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1534.811710][T26701] EXT4-fs (loop0): unmounting filesystem. [ 1534.817349][ T28] audit: type=1326 audit(2000000690.735:5102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30894 comm="syz.3.10318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1534.841023][ T28] audit: type=1326 audit(2000000690.735:5103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30894 comm="syz.3.10318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1534.841464][T30899] EXT4-fs error (device loop6) in ext4_delete_entry:2800: Corrupt filesystem [ 1534.872217][ T28] audit: type=1326 audit(2000000690.735:5104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30894 comm="syz.3.10318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1534.933160][ T28] audit: type=1326 audit(2000000690.735:5105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30894 comm="syz.3.10318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1534.959995][ T28] audit: type=1326 audit(2000000690.745:5106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30894 comm="syz.3.10318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1535.005277][T30899] EXT4-fs warning (device loop6): ext4_rename_delete:3778: inode #2: comm syz.6.10319: Deleting old file: nlink 4, error=-117 [ 1535.018689][ T28] audit: type=1326 audit(2000000690.745:5107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30894 comm="syz.3.10318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1535.143066][T27655] EXT4-fs (loop6): unmounting filesystem. [ 1535.615653][T30924] loop3: detected capacity change from 0 to 512 [ 1537.124915][T30924] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1537.134109][T30924] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1537.658773][T30937] loop5: detected capacity change from 0 to 256 [ 1538.094789][T26413] EXT4-fs (loop3): unmounting filesystem. [ 1538.133599][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 1538.133774][ T28] audit: type=1400 audit(2000000694.625:5135): avc: denied { remount } for pid=30930 comm="syz.5.10327" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 1538.211330][T30942] loop0: detected capacity change from 0 to 2048 [ 1538.414504][T30942] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1538.454076][T30942] 9pnet_fd: Insufficient options for proto=fd [ 1538.796705][T30948] loop5: detected capacity change from 0 to 16 [ 1539.001126][T30948] erofs: (device loop5): z_erofs_parse_cfgs: unidentified algorithms fffc, please upgrade kernel [ 1539.262046][T26701] EXT4-fs (loop0): unmounting filesystem. [ 1539.404600][T30743] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1539.756202][ T28] audit: type=1326 audit(2000000695.965:5136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30958 comm="syz.3.10334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1539.827663][ T28] audit: type=1326 audit(2000000695.965:5137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30958 comm="syz.3.10334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1539.838203][T30965] loop5: detected capacity change from 0 to 4096 [ 1539.852493][ T28] audit: type=1326 audit(2000000695.965:5138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30958 comm="syz.3.10334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1539.882763][ T28] audit: type=1326 audit(2000000695.965:5139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30958 comm="syz.3.10334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1539.906414][ T28] audit: type=1326 audit(2000000695.965:5140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30958 comm="syz.3.10334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1539.931739][ T28] audit: type=1326 audit(2000000695.975:5141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30958 comm="syz.3.10334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1539.955784][T30965] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1539.997961][ T28] audit: type=1326 audit(2000000695.975:5142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30958 comm="syz.3.10334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1540.044132][T30972] loop2: detected capacity change from 0 to 1024 [ 1540.048420][T30965] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1540.059501][ T28] audit: type=1326 audit(2000000695.975:5143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30958 comm="syz.3.10334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1540.095617][T30972] EXT4-fs: Ignoring removed i_version option [ 1540.101567][ T28] audit: type=1326 audit(2000000695.975:5144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30958 comm="syz.3.10334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1540.137523][T30972] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1540.199089][T30972] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1540.243775][T30972] EXT4-fs (loop2): unmounting filesystem. [ 1540.250088][T22396] EXT4-fs (loop5): unmounting filesystem. [ 1540.993709][T30998] loop2: detected capacity change from 0 to 2048 [ 1541.743271][T30998] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1541.768339][T30998] 9pnet_fd: Insufficient options for proto=fd [ 1542.034870][T31007] loop3: detected capacity change from 0 to 512 [ 1542.179719][T26055] EXT4-fs (loop2): unmounting filesystem. [ 1542.185552][T31007] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1542.202602][T31007] ext4 filesystem being mounted at /267/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1542.748762][T26413] EXT4-fs (loop3): unmounting filesystem. [ 1544.219112][T31055] loop6: detected capacity change from 0 to 2048 [ 1544.855603][T31055] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1544.886698][T31055] 9pnet_fd: Insufficient options for proto=fd [ 1546.201226][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 1546.201249][ T28] audit: type=1326 audit(2000000702.295:5202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31064 comm="syz.3.10367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1546.231601][ T28] audit: type=1326 audit(2000000702.295:5203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31064 comm="syz.3.10367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1546.257157][ T28] audit: type=1326 audit(2000000702.395:5204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31064 comm="syz.3.10367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1546.289669][T27655] EXT4-fs (loop6): unmounting filesystem. [ 1546.434007][ T28] audit: type=1326 audit(2000000702.395:5205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31064 comm="syz.3.10367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1546.510020][ T28] audit: type=1326 audit(2000000702.395:5206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31064 comm="syz.3.10367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1546.550891][ T28] audit: type=1326 audit(2000000702.495:5207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31064 comm="syz.3.10367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1546.585683][ T28] audit: type=1326 audit(2000000702.495:5208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31064 comm="syz.3.10367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1546.617274][ T28] audit: type=1326 audit(2000000702.495:5209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31064 comm="syz.3.10367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1546.643257][ T28] audit: type=1326 audit(2000000702.595:5210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31064 comm="syz.3.10367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1546.668727][ T28] audit: type=1326 audit(2000000702.595:5211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31064 comm="syz.3.10367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1547.449557][T31107] loop6: detected capacity change from 0 to 128 [ 1548.491940][T31121] loop5: detected capacity change from 0 to 8192 [ 1549.879102][T31151] 9pnet_fd: Insufficient options for proto=fd [ 1550.578086][T31159] loop5: detected capacity change from 0 to 512 [ 1550.628323][T31159] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.10399: inode #1: comm syz.5.10399: iget: illegal inode # [ 1550.667829][T31159] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.10399: error while reading EA inode 1 err=-117 [ 1550.708071][T31159] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.10399: inode #1: comm syz.5.10399: iget: illegal inode # [ 1550.733591][T31159] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.10399: error while reading EA inode 1 err=-117 [ 1550.756508][T31159] EXT4-fs (loop5): 1 orphan inode deleted [ 1550.777300][T31159] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1551.406730][T22396] EXT4-fs (loop5): unmounting filesystem. [ 1551.828672][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 1551.828740][ T28] audit: type=1326 audit(2000000708.315:5231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31215 comm="syz.5.10424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe801785d19 code=0x7ffc0000 [ 1551.999710][ T28] audit: type=1326 audit(2000000708.315:5232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31215 comm="syz.5.10424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe801785d19 code=0x7ffc0000 [ 1552.099988][ T28] audit: type=1326 audit(2000000708.315:5233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31215 comm="syz.5.10424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fe801785d19 code=0x7ffc0000 [ 1552.127494][ T28] audit: type=1326 audit(2000000708.315:5234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31215 comm="syz.5.10424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe801785d19 code=0x7ffc0000 [ 1552.191586][ T28] audit: type=1326 audit(2000000708.315:5235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31215 comm="syz.5.10424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe801785d19 code=0x7ffc0000 [ 1552.193501][T31232] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 1552.234655][ T28] audit: type=1326 audit(2000000708.315:5236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31215 comm="syz.5.10424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe801785d19 code=0x7ffc0000 [ 1552.278129][ T28] audit: type=1326 audit(2000000708.315:5237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31215 comm="syz.5.10424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe801785d19 code=0x7ffc0000 [ 1552.309198][ T28] audit: type=1326 audit(2000000708.315:5238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31215 comm="syz.5.10424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe801785d19 code=0x7ffc0000 [ 1552.332941][ T28] audit: type=1326 audit(2000000708.315:5239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31215 comm="syz.5.10424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe801785d19 code=0x7ffc0000 [ 1552.394806][ T28] audit: type=1326 audit(2000000708.315:5240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31215 comm="syz.5.10424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe801785d19 code=0x7ffc0000 [ 1553.927220][T31267] loop6: detected capacity change from 0 to 512 [ 1553.949015][T31267] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1553.968297][T31267] EXT4-fs error (device loop6): ext4_orphan_get:1426: comm syz.6.10444: bad orphan inode 131083 [ 1553.978916][T31267] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1554.058334][T27655] EXT4-fs (loop6): unmounting filesystem. [ 1554.142798][T31280] loop0: detected capacity change from 0 to 16 [ 1554.153065][T31280] erofs: (device loop0): mounted with root inode @ nid 36. [ 1554.394434][T31294] loop2: detected capacity change from 0 to 512 [ 1554.899692][ T46] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 1554.910786][T31293] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1555.049722][T31294] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1555.058666][T31294] ext4 filesystem being mounted at /328/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1555.165853][T26055] EXT4-fs (loop2): unmounting filesystem. [ 1555.697723][T31328] serio: Serial port ptm0 [ 1555.726951][T31331] loop0: detected capacity change from 0 to 4096 [ 1555.737946][T31331] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1555.843967][T31333] loop3: detected capacity change from 0 to 512 [ 1555.944221][T31331] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1555.957311][T31333] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1555.966363][T31333] ext4 filesystem being mounted at /288/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1556.546021][T26701] EXT4-fs (loop0): unmounting filesystem. [ 1556.815504][T26413] EXT4-fs (loop3): unmounting filesystem. [ 1556.879279][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 1556.887544][ T28] audit: type=1400 audit(2000000713.375:5310): avc: denied { read } for pid=31351 comm="syz.6.10474" name="loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1556.980476][ T28] audit: type=1400 audit(2000000713.375:5311): avc: denied { open } for pid=31351 comm="syz.6.10474" path="/dev/loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1556.992353][T31361] loop3: detected capacity change from 0 to 1024 [ 1557.066741][T31361] EXT4-fs: Ignoring removed i_version option [ 1557.073904][ T28] audit: type=1400 audit(2000000713.375:5312): avc: denied { ioctl } for pid=31351 comm="syz.6.10474" path="/dev/loop-control" dev="devtmpfs" ino=113 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1557.074061][T31361] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1557.120027][ T28] audit: type=1400 audit(2000000713.555:5313): avc: denied { mounton } for pid=31359 comm="syz.3.10476" path="/289/file0" dev="tmpfs" ino=1617 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1557.151426][T31361] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1557.162231][T31361] EXT4-fs (loop3): unmounting filesystem. [ 1557.695699][T31382] netlink: 'syz.3.10484': attribute type 3 has an invalid length. [ 1557.734196][T31384] tipc: Started in network mode [ 1557.744127][T31384] tipc: Node identity 2, cluster identity 4711 [ 1557.750866][T31384] tipc: Node number set to 2 [ 1557.996091][ T28] audit: type=1400 audit(2000000714.485:5314): avc: denied { name_bind } for pid=31395 comm="syz.5.10489" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1558.018550][ T28] audit: type=1400 audit(2000000714.485:5315): avc: denied { node_bind } for pid=31395 comm="syz.5.10489" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1558.053534][ T28] audit: type=1400 audit(2000000714.545:5316): avc: denied { ioctl } for pid=31397 comm="syz.5.10490" path="socket:[128314]" dev="sockfs" ino=128314 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1558.079347][ T28] audit: type=1400 audit(2000000714.565:5317): avc: denied { bind } for pid=31397 comm="syz.5.10490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1558.114707][T31400] loop5: detected capacity change from 0 to 1024 [ 1558.121376][T31400] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1558.128602][T31400] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1558.158654][T31400] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1558.393184][ T28] audit: type=1400 audit(2000000714.885:5318): avc: denied { connect } for pid=31399 comm="syz.5.10491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1559.893757][T22396] EXT4-fs (loop5): unmounting filesystem. [ 1559.916646][ T28] audit: type=1326 audit(2000000716.405:5319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31420 comm="syz.3.10497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1560.232370][T31445] 9pnet_fd: Insufficient options for proto=fd [ 1561.124662][T31446] loop6: detected capacity change from 0 to 512 [ 1563.424242][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 1563.424260][ T28] audit: type=1400 audit(2000000719.915:5340): avc: denied { read } for pid=31459 comm="syz.5.10511" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1564.115705][ T28] audit: type=1400 audit(2000000720.395:5341): avc: denied { read } for pid=31453 comm="syz.3.10510" name="usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1564.142316][T31460] loop5: detected capacity change from 0 to 512 [ 1564.148521][ T28] audit: type=1400 audit(2000000720.395:5342): avc: denied { open } for pid=31453 comm="syz.3.10510" path="/dev/usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1564.150570][T31446] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1564.174866][ T28] audit: type=1400 audit(2000000720.475:5343): avc: denied { open } for pid=31459 comm="syz.5.10511" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1564.181005][T31446] ext4 filesystem being mounted at /252/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1564.208475][ T28] audit: type=1400 audit(2000000720.475:5344): avc: denied { ioctl } for pid=31459 comm="syz.5.10511" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1564.257932][ T28] audit: type=1400 audit(2000000720.555:5345): avc: denied { read } for pid=31459 comm="syz.5.10511" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1564.281802][ T28] audit: type=1400 audit(2000000720.555:5346): avc: denied { open } for pid=31459 comm="syz.5.10511" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1564.328443][T31460] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1564.339459][T31460] ext4 filesystem being mounted at /596/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1564.833850][T31460] EXT4-fs error (device loop5): ext4_do_update_inode:5226: inode #2: comm syz.5.10511: corrupted inode contents [ 1564.845919][T27655] EXT4-fs (loop6): unmounting filesystem. [ 1564.851972][T31484] 9pnet_fd: Insufficient options for proto=fd [ 1564.858139][ T28] audit: type=1400 audit(2000000721.115:5347): avc: denied { relabelfrom } for pid=31480 comm="syz.3.10518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1564.911638][T31460] EXT4-fs error (device loop5): ext4_dirty_inode:6091: inode #2: comm syz.5.10511: mark_inode_dirty error [ 1564.996156][ T28] audit: type=1400 audit(2000000721.115:5348): avc: denied { relabelto } for pid=31480 comm="syz.3.10518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1565.017577][T31460] EXT4-fs error (device loop5): ext4_do_update_inode:5226: inode #2: comm syz.5.10511: corrupted inode contents [ 1565.037140][ T28] audit: type=1400 audit(2000000721.285:5349): avc: denied { create } for pid=31459 comm="syz.5.10511" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1565.057945][T31460] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #2: comm syz.5.10511: mark_inode_dirty error [ 1565.488666][T22396] EXT4-fs (loop5): unmounting filesystem. [ 1565.535841][T31518] loop6: detected capacity change from 0 to 512 [ 1565.559203][T31518] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1565.570710][T31518] EXT4-fs error (device loop6): ext4_orphan_get:1426: comm syz.6.10531: bad orphan inode 131083 [ 1565.589594][T31518] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1565.806521][T27655] EXT4-fs (loop6): unmounting filesystem. [ 1566.393092][T31524] 9pnet_fd: Insufficient options for proto=fd [ 1566.530070][T31537] 9pnet_fd: Insufficient options for proto=fd [ 1567.392485][T31546] loop6: detected capacity change from 0 to 512 [ 1567.415361][T31546] EXT4-fs: Ignoring removed oldalloc option [ 1567.421596][T31546] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1567.593357][T31555] xt_hashlimit: size too large, truncated to 1048576 [ 1568.083786][T31552] loop3: detected capacity change from 0 to 1024 [ 1568.100508][T31546] EXT4-fs (loop6): 1 truncate cleaned up [ 1568.198262][T31546] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1568.251324][T27655] EXT4-fs (loop6): unmounting filesystem. [ 1568.265788][T31552] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1568.338236][T31563] netlink: 'syz.0.10546': attribute type 4 has an invalid length. [ 1568.346251][T26413] EXT4-fs (loop3): unmounting filesystem. [ 1568.486465][T31562] loop6: detected capacity change from 0 to 2048 [ 1568.500956][T31562] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1568.545395][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 1568.545412][ T28] audit: type=1400 audit(2000000725.035:5368): avc: denied { mounton } for pid=31561 comm="syz.6.10547" path="/258/file1/file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1568.610848][T27655] EXT4-fs (loop6): unmounting filesystem. [ 1568.855229][T31588] loop6: detected capacity change from 0 to 2048 [ 1568.877099][ T28] audit: type=1400 audit(2000000725.365:5369): avc: denied { bind } for pid=31573 comm="syz.2.10552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1569.219520][T31588] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1571.275084][T31470] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1571.451224][T27655] EXT4-fs (loop6): unmounting filesystem. [ 1571.674273][T31605] loop6: detected capacity change from 0 to 2048 [ 1571.720118][T31605] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1571.797424][ T28] audit: type=1400 audit(2000000728.255:5370): avc: denied { mounton } for pid=31613 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1571.840532][T31613] bridge0: port 1(bridge_slave_0) entered blocking state [ 1571.847507][T31613] bridge0: port 1(bridge_slave_0) entered disabled state [ 1571.854983][T31613] device bridge_slave_0 entered promiscuous mode [ 1571.862127][T31613] bridge0: port 2(bridge_slave_1) entered blocking state [ 1571.869153][T31613] bridge0: port 2(bridge_slave_1) entered disabled state [ 1571.876588][T27655] EXT4-fs (loop6): unmounting filesystem. [ 1571.876817][T31613] device bridge_slave_1 entered promiscuous mode [ 1572.018455][ T28] audit: type=1400 audit(2000000728.515:5371): avc: denied { read write } for pid=31628 comm="syz.2.10569" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1572.506527][T31632] fuse: Bad value for 'fd' [ 1572.514914][ T28] audit: type=1400 audit(2000000728.545:5372): avc: denied { open } for pid=31628 comm="syz.2.10569" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1572.657236][ T28] audit: type=1400 audit(2000000729.145:5373): avc: denied { create } for pid=31636 comm="syz.2.10570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1572.684820][ T28] audit: type=1400 audit(2000000729.145:5374): avc: denied { write } for pid=31636 comm="syz.2.10570" path="socket:[128640]" dev="sockfs" ino=128640 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1572.713759][ T28] audit: type=1326 audit(2000000729.215:5375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31638 comm="syz.2.10572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b6385d19 code=0x7ffc0000 [ 1572.737701][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1572.745538][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1572.753384][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1572.766614][ T28] audit: type=1326 audit(2000000729.215:5376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31638 comm="syz.2.10572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b6385d19 code=0x7ffc0000 [ 1572.790966][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1572.799189][T13513] bridge0: port 1(bridge_slave_0) entered blocking state [ 1572.806058][T13513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1572.823090][ T28] audit: type=1326 audit(2000000729.215:5377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31638 comm="syz.2.10572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fa6b6385d19 code=0x7ffc0000 [ 1572.825152][T31642] 9pnet_fd: Insufficient options for proto=fd [ 1572.882195][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1572.895274][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1572.903448][T13513] bridge0: port 2(bridge_slave_1) entered blocking state [ 1572.910316][T13513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1572.928306][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1572.935957][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1572.953902][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1572.982334][T31646] loop6: detected capacity change from 0 to 2048 [ 1572.993579][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1573.015248][T31646] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1573.017530][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1573.071406][T20076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1573.078293][T27655] EXT4-fs (loop6): unmounting filesystem. [ 1573.118409][T20076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1573.138335][T20076] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1573.147719][T20076] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1573.159837][T31613] device veth0_vlan entered promiscuous mode [ 1573.171788][T31667] loop6: detected capacity change from 0 to 1024 [ 1573.174472][T31613] device veth1_macvtap entered promiscuous mode [ 1573.184851][T31667] EXT4-fs: Ignoring removed bh option [ 1573.258574][T20076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1573.270171][T20076] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1573.278781][T20076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1573.278902][T31667] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1573.286994][T20076] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1573.315315][T20076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1574.133805][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 1574.133828][ T28] audit: type=1400 audit(2000000730.415:5398): avc: denied { write } for pid=31668 comm="syz.3.10584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1574.172248][ T28] audit: type=1326 audit(2000000730.515:5399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31668 comm="syz.3.10584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1574.197811][T27655] EXT4-fs (loop6): unmounting filesystem. [ 1574.220443][ T28] audit: type=1326 audit(2000000730.515:5400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31668 comm="syz.3.10584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1574.222543][T31680] 9pnet_fd: Insufficient options for proto=fd [ 1574.294529][ T28] audit: type=1326 audit(2000000730.615:5401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31668 comm="syz.3.10584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1574.318800][ T28] audit: type=1326 audit(2000000730.615:5402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31668 comm="syz.3.10584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1574.352509][ T28] audit: type=1326 audit(2000000730.615:5403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31668 comm="syz.3.10584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1574.381429][T31685] netlink: 72 bytes leftover after parsing attributes in process `syz.3.10588'. [ 1574.582046][ T28] audit: type=1326 audit(2000000730.615:5404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31668 comm="syz.3.10584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1574.798463][ T28] audit: type=1326 audit(2000000730.615:5405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31668 comm="syz.3.10584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1574.825473][ T28] audit: type=1326 audit(2000000730.615:5406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31668 comm="syz.3.10584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1574.858743][T31694] loop5: detected capacity change from 0 to 2048 [ 1574.869812][ T28] audit: type=1400 audit(2000000730.935:5407): avc: denied { create } for pid=31688 comm="syz.5.10590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1575.011992][T31694] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1575.079963][T31613] EXT4-fs (loop5): unmounting filesystem. [ 1575.472184][T31708] loop5: detected capacity change from 0 to 4096 [ 1575.476388][T31710] loop6: detected capacity change from 0 to 1024 [ 1575.492812][T31708] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1575.504132][T31710] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1575.525840][T31710] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1575.533523][T31708] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1575.542839][T31710] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 1575.577239][T31710] EXT4-fs (loop6): Remounting filesystem read-only [ 1575.583620][T31710] EXT4-fs error (device loop6): ext4_dirty_inode:6091: inode #3: comm syz.6.10596: mark_inode_dirty error [ 1575.596141][T31613] EXT4-fs (loop5): unmounting filesystem. [ 1575.647788][T31710] EXT4-fs (loop6): Remounting filesystem read-only [ 1575.654182][T31710] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:477: comm syz.6.10596: Invalid block bitmap block 3 in block_group 0 [ 1575.687430][T31710] EXT4-fs (loop6): Remounting filesystem read-only [ 1575.694085][T31710] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 1575.706463][T31710] EXT4-fs (loop6): Remounting filesystem read-only [ 1575.713110][T31710] EXT4-fs error (device loop6): ext4_dirty_inode:6091: inode #3: comm syz.6.10596: mark_inode_dirty error [ 1575.724891][T31710] EXT4-fs (loop6): Remounting filesystem read-only [ 1575.725829][T31721] 9pnet_fd: Insufficient options for proto=fd [ 1575.731501][T31710] EXT4-fs error (device loop6): ext4_map_blocks:634: inode #3: block 1: comm syz.6.10596: lblock 6 mapped to illegal pblock 1 (length 1) [ 1575.753096][T31710] EXT4-fs (loop6): Remounting filesystem read-only [ 1575.760899][T31710] EXT4-fs error (device loop6): ext4_map_blocks:634: inode #3: block 48: comm syz.6.10596: lblock 0 mapped to illegal pblock 48 (length 1) [ 1575.776228][T31710] EXT4-fs (loop6): Remounting filesystem read-only [ 1575.784037][T31710] EXT4-fs error (device loop6): ext4_acquire_dquot:6788: comm syz.6.10596: Failed to acquire dquot type 0 [ 1575.802215][T31710] EXT4-fs (loop6): Remounting filesystem read-only [ 1575.832096][T31710] EXT4-fs error (device loop6): ext4_map_blocks:634: inode #3: block 49: comm syz.6.10596: lblock 1 mapped to illegal pblock 49 (length 1) [ 1576.067523][T31710] EXT4-fs (loop6): Remounting filesystem read-only [ 1576.073986][T31710] EXT4-fs error (device loop6): ext4_acquire_dquot:6788: comm syz.6.10596: Failed to acquire dquot type 0 [ 1576.088571][T31710] EXT4-fs (loop6): Remounting filesystem read-only [ 1576.105856][T31725] netlink: 'syz.0.10601': attribute type 4 has an invalid length. [ 1576.112525][T31710] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 1576.152849][T31710] EXT4-fs (loop6): Remounting filesystem read-only [ 1576.183023][T31710] EXT4-fs error (device loop6): ext4_evict_inode:279: inode #15: comm syz.6.10596: mark_inode_dirty error [ 1576.204624][T31710] EXT4-fs (loop6): Remounting filesystem read-only [ 1576.220385][T31710] EXT4-fs warning (device loop6): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 1576.239880][T31710] EXT4-fs (loop6): 1 orphan inode deleted [ 1576.253830][T31710] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1576.294965][T27655] EXT4-fs (loop6): unmounting filesystem. [ 1576.331056][T31734] loop5: detected capacity change from 0 to 2048 [ 1576.349249][T31734] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1577.305963][T31750] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31750 comm=syz.6.10609 [ 1577.330928][T31613] EXT4-fs (loop5): unmounting filesystem. [ 1577.331666][T31750] netlink: 'syz.6.10609': attribute type 7 has an invalid length. [ 1577.350388][T31750] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10609'. [ 1577.465116][T31763] loop3: detected capacity change from 0 to 1024 [ 1577.490320][T31763] EXT4-fs: Ignoring removed i_version option [ 1577.496687][T31763] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1577.510291][T31763] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1577.522801][T31763] EXT4-fs (loop3): unmounting filesystem. [ 1577.528839][T31769] loop6: detected capacity change from 0 to 16 [ 1577.537690][T31769] erofs: (device loop6): mounted with root inode @ nid 36. [ 1577.552828][T31769] netlink: 'syz.6.10616': attribute type 4 has an invalid length. [ 1577.563330][ T46] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 1577.574176][T31769] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1577.631577][T31772] 9pnet_fd: Insufficient options for proto=fd [ 1577.670448][T31775] loop3: detected capacity change from 0 to 512 [ 1577.705715][T31775] EXT4-fs (loop3): too many log groups per flexible block group [ 1577.718055][T31775] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 1577.731903][T31775] EXT4-fs (loop3): mount failed [ 1577.873296][T31781] loop6: detected capacity change from 0 to 2048 [ 1577.892116][T31781] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1577.958030][T27655] EXT4-fs (loop6): unmounting filesystem. [ 1579.239139][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 1579.239162][ T28] audit: type=1326 audit(2000000734.815:5460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31785 comm="syz.3.10622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1579.334742][ T28] audit: type=1326 audit(2000000734.815:5461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31785 comm="syz.3.10622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1579.369664][ T28] audit: type=1326 audit(2000000734.825:5462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31785 comm="syz.3.10622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1579.393515][ T28] audit: type=1326 audit(2000000734.825:5463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31785 comm="syz.3.10622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1579.419626][ T28] audit: type=1326 audit(2000000734.825:5464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31785 comm="syz.3.10622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1579.447433][T31799] loop0: detected capacity change from 0 to 1024 [ 1579.449406][T31806] loop3: detected capacity change from 0 to 16 [ 1579.461071][T31806] erofs: (device loop3): z_erofs_parse_cfgs: unidentified algorithms fffc, please upgrade kernel [ 1579.478021][T31799] EXT4-fs: Ignoring removed nobh option [ 1579.483618][T31799] EXT4-fs: Ignoring removed orlov option [ 1579.489309][ T28] audit: type=1326 audit(2000000734.835:5465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31785 comm="syz.3.10622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1579.516001][ T28] audit: type=1326 audit(2000000734.835:5466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31785 comm="syz.3.10622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1579.541666][T31813] 9pnet_fd: Insufficient options for proto=fd [ 1579.543796][T31808] loop6: detected capacity change from 0 to 512 [ 1579.561331][ T28] audit: type=1326 audit(2000000734.835:5467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31785 comm="syz.3.10622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1579.564797][T31799] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1579.585572][ T28] audit: type=1326 audit(2000000734.845:5468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31785 comm="syz.3.10622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1579.614649][T31808] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1579.617079][ T28] audit: type=1326 audit(2000000734.845:5469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31785 comm="syz.3.10622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c6785d19 code=0x7ffc0000 [ 1579.625818][T31808] ext4 filesystem being mounted at /279/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1579.741496][T26701] EXT4-fs (loop0): unmounting filesystem. [ 1580.217799][T27655] EXT4-fs (loop6): unmounting filesystem. [ 1580.283183][T31845] 9pnet_fd: Insufficient options for proto=fd [ 1580.313916][T31843] loop6: detected capacity change from 0 to 8192 [ 1580.392320][T31847] loop0: detected capacity change from 0 to 2048 [ 1580.408885][T31847] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1580.450942][T26701] EXT4-fs (loop0): unmounting filesystem. [ 1580.857831][T31871] loop0: detected capacity change from 0 to 16 [ 1580.865634][T31871] erofs: (device loop0): z_erofs_parse_cfgs: unidentified algorithms fffc, please upgrade kernel [ 1580.907954][T30743] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1581.923486][T31884] loop5: detected capacity change from 0 to 2048 [ 1582.080639][T31884] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1582.438779][T31613] EXT4-fs (loop5): unmounting filesystem. [ 1582.498478][T28549] device veth0_vlan left promiscuous mode [ 1582.650076][T31906] Driver unsupported XDP return value 0 on prog (id 6017) dev N/A, expect packet loss! [ 1582.906123][T31913] loop5: detected capacity change from 0 to 1024 [ 1582.929289][T31913] ext4: Unknown parameter 'noacl' [ 1582.980953][T31917] loop6: detected capacity change from 0 to 8192 [ 1582.992635][T31913] loop5: detected capacity change from 0 to 256 [ 1583.048788][T31913] FAT-fs (loop5): Directory bread(block 64) failed [ 1583.061361][T31913] FAT-fs (loop5): Directory bread(block 65) failed [ 1583.069431][T31913] FAT-fs (loop5): Directory bread(block 66) failed [ 1583.075973][T31913] FAT-fs (loop5): Directory bread(block 67) failed [ 1583.082874][T31913] FAT-fs (loop5): Directory bread(block 68) failed [ 1583.089730][T31913] FAT-fs (loop5): Directory bread(block 69) failed [ 1583.096308][T31913] FAT-fs (loop5): Directory bread(block 70) failed [ 1583.103087][T31913] FAT-fs (loop5): Directory bread(block 71) failed [ 1583.110041][T31913] FAT-fs (loop5): Directory bread(block 72) failed [ 1583.116570][T31913] FAT-fs (loop5): Directory bread(block 73) failed [ 1583.736580][T31928] 9pnet_fd: Insufficient options for proto=fd [ 1583.932627][T31939] loop3: detected capacity change from 0 to 1024 [ 1583.951235][T31939] EXT4-fs: Ignoring removed i_version option [ 1584.369329][T31939] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1584.455165][ T28] kauditd_printk_skb: 135 callbacks suppressed [ 1584.455192][ T28] audit: type=1400 audit(2000000740.945:5605): avc: denied { unmount } for pid=31613 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1584.553746][T31939] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1584.589668][T31939] EXT4-fs (loop3): unmounting filesystem. [ 1584.600162][T31952] netlink: 100 bytes leftover after parsing attributes in process `syz.5.10678'. [ 1584.708279][T31956] 9pnet_fd: Insufficient options for proto=fd [ 1584.801504][T31959] 9pnet_fd: Insufficient options for proto=fd [ 1584.858307][ T28] audit: type=1400 audit(2000000741.355:5606): avc: denied { wake_alarm } for pid=31968 comm="syz.2.10686" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1584.891304][T31971] xt_CT: No such helper "syz0" [ 1584.916552][ T28] audit: type=1326 audit(2000000741.355:5607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31965 comm="syz.5.10684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7b185d19 code=0x7ffc0000 [ 1585.007592][ T28] audit: type=1326 audit(2000000741.385:5608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31965 comm="syz.5.10684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c7b185d19 code=0x7ffc0000 [ 1585.059561][T31983] loop6: detected capacity change from 0 to 1024 [ 1585.067946][T31983] EXT4-fs: Ignoring removed i_version option [ 1585.085785][T31983] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1585.105191][ T28] audit: type=1326 audit(2000000741.385:5609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31965 comm="syz.5.10684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7b185d19 code=0x7ffc0000 [ 1585.313876][T31983] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1585.376357][T31983] EXT4-fs (loop6): unmounting filesystem. [ 1585.395972][ T28] audit: type=1326 audit(2000000741.385:5610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31965 comm="syz.5.10684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c7b185d19 code=0x7ffc0000 [ 1585.456280][ T28] audit: type=1326 audit(2000000741.385:5611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31965 comm="syz.5.10684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7b185d19 code=0x7ffc0000 [ 1585.480151][ T28] audit: type=1326 audit(2000000741.385:5612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31965 comm="syz.5.10684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c7b185d19 code=0x7ffc0000 [ 1585.515000][ T28] audit: type=1326 audit(2000000741.385:5613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31965 comm="syz.5.10684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7b185d19 code=0x7ffc0000 [ 1585.549918][ T28] audit: type=1326 audit(2000000741.385:5614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31965 comm="syz.5.10684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f0c7b185d19 code=0x7ffc0000 [ 1585.658594][T31995] 9pnet_fd: Insufficient options for proto=fd [ 1585.881642][T32004] loop0: detected capacity change from 0 to 2048 [ 1586.246987][T26576] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1586.490124][T32004] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1586.501531][T32004] 9pnet_fd: Insufficient options for proto=fd [ 1586.518296][T26576] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1586.531538][T26576] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1586.811089][T26701] EXT4-fs (loop0): unmounting filesystem. [ 1586.826616][T32024] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10705'. [ 1586.899947][T32028] 9pnet_fd: Insufficient options for proto=fd [ 1587.093961][T26576] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.102615][T26576] usb 4-1: config 0 descriptor?? [ 1587.108937][T26576] usb 4-1: Found UVC 0.00 device (046d:08c1) [ 1587.115815][T26576] usb 4-1: No valid video chain found. [ 1587.214719][T32040] loop0: detected capacity change from 0 to 1024 [ 1587.243452][T32040] EXT4-fs: Ignoring removed orlov option [ 1587.306856][T32040] EXT4-fs: Ignoring removed orlov option [ 1587.324185][T32040] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1587.368435][T26701] EXT4-fs (loop0): unmounting filesystem. [ 1587.439486][T32058] loop0: detected capacity change from 0 to 1024 [ 1587.474030][T32058] EXT4-fs: Ignoring removed bh option [ 1587.504616][T32055] loop6: detected capacity change from 0 to 2048 [ 1587.512869][T32058] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1587.527820][T32058] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #11: comm syz.0.10717: missing EA_INODE flag [ 1587.539791][T32058] EXT4-fs (loop0): Remounting filesystem read-only [ 1587.540402][T32055] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1587.546733][T32058] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.10717: error while reading EA inode 11 err=-117 [ 1587.569018][T32058] EXT4-fs (loop0): Remounting filesystem read-only [ 1587.610823][T27655] EXT4-fs (loop6): unmounting filesystem. [ 1587.633208][T26701] EXT4-fs (loop0): unmounting filesystem. [ 1587.668555][T32068] 9pnet_fd: Insufficient options for proto=fd [ 1588.002138][T32081] loop0: detected capacity change from 0 to 512 [ 1588.051614][T32081] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1588.060939][T32081] ext4 filesystem being mounted at /352/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1588.372411][T32093] xt_CT: No such helper "syz0" [ 1588.535744][T26570] usb 4-1: USB disconnect, device number 48 [ 1588.548191][T32096] syz.6.10729[32096] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1588.548279][T32096] syz.6.10729[32096] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1588.635340][T32101] 9pnet_fd: Insufficient options for proto=fd [ 1588.692041][T26701] EXT4-fs (loop0): unmounting filesystem. [ 1589.685544][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 1589.685564][ T28] audit: type=1400 audit(2000000746.175:5668): avc: denied { write } for pid=32123 comm="syz.0.10740" name="001" dev="devtmpfs" ino=184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1589.889561][T32133] loop3: detected capacity change from 0 to 8192 [ 1590.677232][ T28] audit: type=1400 audit(2000000747.155:5669): avc: denied { ioctl } for pid=32143 comm="syz.6.10746" path="socket:[129996]" dev="sockfs" ino=129996 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1590.918470][ T28] audit: type=1400 audit(2000000747.375:5670): avc: denied { create } for pid=32145 comm="syz.6.10747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1591.894239][T32183] loop5: detected capacity change from 0 to 2048 [ 1591.908859][T32183] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1591.959757][T31613] EXT4-fs (loop5): unmounting filesystem. [ 1591.991293][ T28] audit: type=1326 audit(2000000748.485:5671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32188 comm="syz.5.10763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7b185d19 code=0x7ffc0000 [ 1592.017555][ T28] audit: type=1326 audit(2000000748.485:5672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32188 comm="syz.5.10763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7b185d19 code=0x7ffc0000 [ 1592.085733][ T28] audit: type=1326 audit(2000000748.485:5673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32188 comm="syz.5.10763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0c7b185d19 code=0x7ffc0000 [ 1592.146995][ T28] audit: type=1326 audit(2000000748.485:5674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32188 comm="syz.5.10763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7b185d19 code=0x7ffc0000 [ 1592.220720][T32199] loop5: detected capacity change from 0 to 1024 [ 1592.227213][ T28] audit: type=1326 audit(2000000748.485:5675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32188 comm="syz.5.10763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7b185d19 code=0x7ffc0000 [ 1592.242285][T32199] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1592.268047][ T28] audit: type=1326 audit(2000000748.485:5676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32188 comm="syz.5.10763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=145 compat=0 ip=0x7f0c7b185d19 code=0x7ffc0000 [ 1592.303015][T32199] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1592.316004][ T28] audit: type=1326 audit(2000000748.485:5677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32188 comm="syz.5.10763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7b185d19 code=0x7ffc0000 [ 1592.371488][T32199] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1592.410965][T32217] 9pnet: Could not find request transport: fd0x0000000000000003 [ 1594.162111][T32248] loop3: detected capacity change from 0 to 512 [ 1594.224105][T32256] 9pnet: Could not find request transport: fd0x0000000000000003 [ 1594.237678][T32248] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1594.252558][T32248] ext4 filesystem being mounted at /354/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1594.300920][T32261] loop0: detected capacity change from 0 to 512 [ 1594.309395][T32248] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 1594.331069][T32261] EXT4-fs: Ignoring removed oldalloc option [ 1594.344207][T32261] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1594.355093][T26413] EXT4-fs (loop3): unmounting filesystem. [ 1594.388577][T32261] EXT4-fs (loop0): 1 truncate cleaned up [ 1594.395421][T32261] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1594.433151][T26701] EXT4-fs (loop0): unmounting filesystem. [ 1594.980141][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 1594.980159][ T28] audit: type=1400 audit(2000000751.475:5699): avc: denied { bind } for pid=32273 comm="syz.2.10795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1595.013689][ T28] audit: type=1400 audit(2000000751.505:5700): avc: denied { listen } for pid=32273 comm="syz.2.10795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1595.033498][ T28] audit: type=1400 audit(2000000751.505:5701): avc: denied { write } for pid=32273 comm="syz.2.10795" path="socket:[130721]" dev="sockfs" ino=130721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1595.060064][T32277] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1595.069751][T32277] SELinux: failed to load policy [ 1595.080179][ T28] audit: type=1400 audit(2000000751.505:5702): avc: denied { accept } for pid=32273 comm="syz.2.10795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1595.109273][ T28] audit: type=1400 audit(2000000751.505:5703): avc: denied { read } for pid=32273 comm="syz.2.10795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1595.130845][ T28] audit: type=1400 audit(2000000751.555:5704): avc: denied { load_policy } for pid=32275 comm="syz.2.10796" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1595.184843][T31613] EXT4-fs (loop5): unmounting filesystem. [ 1595.253759][T32286] 9pnet: Could not find request transport: fd0x0000000000000003 [ 1595.376930][T32289] loop5: detected capacity change from 0 to 16 [ 1595.383593][T32289] erofs: (device loop5): z_erofs_parse_cfgs: unidentified algorithms fffc, please upgrade kernel [ 1595.502796][T30743] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1595.538206][ T28] audit: type=1400 audit(2000000752.035:5705): avc: denied { create } for pid=32296 comm="syz.5.10806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1595.567241][T26570] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1595.572820][ T28] audit: type=1400 audit(2000000752.055:5706): avc: denied { write } for pid=32296 comm="syz.5.10806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1595.619887][ T28] audit: type=1400 audit(2000000752.115:5707): avc: denied { setopt } for pid=32299 comm="syz.5.10807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1595.640752][T32300] SELinux: Context system_u:object_r:mail_spool_t:s0 is not valid (left unmapped). [ 1595.657229][ T28] audit: type=1400 audit(2000000752.115:5708): avc: denied { bind } for pid=32299 comm="syz.5.10807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1595.727202][T26570] usb 3-1: device descriptor read/64, error -71 [ 1595.739292][T32307] loop5: detected capacity change from 0 to 512 [ 1595.745734][T32307] EXT4-fs: Ignoring removed oldalloc option [ 1595.777655][T32307] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1595.829352][T32307] EXT4-fs (loop5): 1 truncate cleaned up [ 1595.834887][T32307] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1595.837827][T32308] loop0: detected capacity change from 0 to 2048 [ 1595.871471][T32308] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1595.883352][T32308] 9pnet_fd: Insufficient options for proto=fd [ 1595.888365][T31613] EXT4-fs (loop5): unmounting filesystem. [ 1595.927379][T26701] EXT4-fs (loop0): unmounting filesystem. [ 1596.042681][T26570] usb 3-1: device descriptor read/64, error -71 [ 1596.110034][T32330] loop5: detected capacity change from 0 to 16 [ 1596.116725][T32330] erofs: (device loop5): z_erofs_parse_cfgs: unidentified algorithms fffc, please upgrade kernel [ 1596.654711][T30743] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1596.799984][T26570] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1596.813979][T32345] loop5: detected capacity change from 0 to 2048 [ 1596.867612][T32345] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1596.880403][T32345] 9pnet_fd: Insufficient options for proto=fd [ 1596.924095][T31613] EXT4-fs (loop5): unmounting filesystem. [ 1597.005206][T26570] usb 3-1: device descriptor read/64, error -71 [ 1597.048727][T32358] loop6: detected capacity change from 0 to 512 [ 1597.134001][T32359] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32359 comm=syz.5.10826 [ 1597.245155][T32358] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.10828: inode #1: comm syz.6.10828: iget: illegal inode # [ 1597.259525][T32358] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.10828: error while reading EA inode 1 err=-117 [ 1597.274108][T32358] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.10828: inode #1: comm syz.6.10828: iget: illegal inode # [ 1597.297934][T32358] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.10828: error while reading EA inode 1 err=-117 [ 1597.307205][T26570] usb 3-1: device descriptor read/64, error -71 [ 1597.310657][T32358] EXT4-fs (loop6): 1 orphan inode deleted [ 1597.321974][T32358] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1597.348011][T32358] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.6.10828: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 1597.420834][T27655] EXT4-fs (loop6): unmounting filesystem. [ 1597.427439][T26570] usb usb3-port1: attempt power cycle [ 1597.491237][T32364] loop6: detected capacity change from 0 to 4096 [ 1597.527656][T32367] loop3: detected capacity change from 0 to 16 [ 1597.534319][T32367] erofs: (device loop3): z_erofs_parse_cfgs: unidentified algorithms fffc, please upgrade kernel [ 1597.610484][T32364] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1597.680308][T30743] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1597.732650][T27655] EXT4-fs (loop6): unmounting filesystem. [ 1597.967368][T26570] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1598.012366][T26570] usb 3-1: device descriptor read/8, error -71 [ 1598.065429][T32389] syz.0.10838[32389] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1598.065958][T32389] syz.0.10838[32389] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1598.227801][T26570] usb 3-1: device descriptor read/8, error -71 [ 1598.266674][T32396] loop0: detected capacity change from 0 to 16 [ 1598.273754][T32396] erofs: (device loop0): mounted with root inode @ nid 36. [ 1598.487424][ T47] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 1598.499078][T32400] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1598.936492][T32410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10847'. [ 1598.974173][T32412] loop3: detected capacity change from 0 to 512 [ 1598.990982][T32412] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1598.999940][T32412] EXT4-fs (loop3): invalid journal inode [ 1599.005509][T32412] EXT4-fs (loop3): can't get journal size [ 1599.022385][T32412] EXT4-fs (loop3): 1 truncate cleaned up [ 1599.037213][T32412] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1599.057385][T26413] EXT4-fs (loop3): unmounting filesystem. [ 1599.094696][T32420] loop3: detected capacity change from 0 to 1024 [ 1599.137599][T32420] EXT4-fs: Ignoring removed i_version option [ 1599.152559][T32420] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1599.165123][T32425] netlink: 296 bytes leftover after parsing attributes in process `syz.0.10853'. [ 1599.192236][T32420] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1599.202619][T32420] EXT4-fs (loop3): unmounting filesystem. [ 1599.493129][T32439] loop3: detected capacity change from 0 to 8192 [ 1599.822694][T32454] loop6: detected capacity change from 0 to 16 [ 1599.831444][T32454] erofs: (device loop6): mounted with root inode @ nid 36. [ 1599.890869][T32456] loop5: detected capacity change from 0 to 512 [ 1599.916870][T32456] EXT4-fs: Ignoring removed oldalloc option [ 1599.930323][T32456] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1600.353458][ T47] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 1600.366647][T32459] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1600.393773][T32456] EXT4-fs (loop5): 1 truncate cleaned up [ 1600.447360][T32456] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1600.499665][T31613] EXT4-fs (loop5): unmounting filesystem. [ 1600.639373][T32475] loop3: detected capacity change from 0 to 16 [ 1600.645937][T32475] erofs: (device loop3): mounted with root inode @ nid 36. [ 1600.864441][T32476] loop5: detected capacity change from 0 to 2048 [ 1601.841466][T32477] netlink: 'syz.3.10871': attribute type 4 has an invalid length. [ 1602.376116][ T46] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 1602.387003][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 1602.387023][ T28] audit: type=1326 audit(2000000758.865:5775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32483 comm="syz.6.10874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f1785d19 code=0x7ffc0000 [ 1602.435377][ T28] audit: type=1326 audit(2000000758.865:5776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32483 comm="syz.6.10874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f1785d19 code=0x7ffc0000 [ 1602.583626][T32500] loop3: detected capacity change from 0 to 2048 [ 1602.601718][T32502] loop5: detected capacity change from 0 to 512 [ 1602.612529][T32500] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1602.638653][T32502] EXT4-fs: Ignoring removed oldalloc option [ 1602.654544][T32502] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1602.682961][T32502] EXT4-fs (loop5): 1 truncate cleaned up [ 1602.697249][T32502] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1602.748510][T31613] EXT4-fs (loop5): unmounting filesystem. [ 1602.882375][ T28] audit: type=1326 audit(2000000759.375:5777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32509 comm="syz.2.10882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b6385d19 code=0x7ffc0000 [ 1602.939854][ T28] audit: type=1326 audit(2000000759.375:5778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32509 comm="syz.2.10882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b6385d19 code=0x7ffc0000 [ 1602.989089][ T28] audit: type=1326 audit(2000000759.405:5779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32509 comm="syz.2.10882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa6b6385d19 code=0x7ffc0000 [ 1603.036666][ T28] audit: type=1326 audit(2000000759.405:5780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32509 comm="syz.2.10882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b6385d19 code=0x7ffc0000 [ 1603.098638][ T28] audit: type=1326 audit(2000000759.405:5781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32509 comm="syz.2.10882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b6385d19 code=0x7ffc0000 [ 1603.170574][ T28] audit: type=1326 audit(2000000759.405:5782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32509 comm="syz.2.10882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7fa6b6385d19 code=0x7ffc0000 [ 1603.216299][ T28] audit: type=1326 audit(2000000759.405:5783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32509 comm="syz.2.10882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b6385d19 code=0x7ffc0000 [ 1603.220967][T32520] loop0: detected capacity change from 0 to 8192 [ 1603.262782][ T28] audit: type=1326 audit(2000000759.405:5784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32509 comm="syz.2.10882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b6385d19 code=0x7ffc0000 [ 1603.293240][T26413] EXT4-fs (loop3): unmounting filesystem. [ 1603.617358][ T19] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1603.797342][ T19] usb 4-1: device descriptor read/64, error -71 [ 1604.074504][T26576] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1604.082242][ T19] usb 4-1: device descriptor read/64, error -71 [ 1604.268825][T26576] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1604.295465][T26576] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1604.331973][T26576] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1604.357215][ T19] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1604.403899][T26576] usb 1-1: config 0 descriptor?? [ 1604.433883][T26576] usb 1-1: Found UVC 0.00 device (046d:08c1) [ 1604.456616][T26576] usb 1-1: No valid video chain found. [ 1604.517289][ T19] usb 4-1: device descriptor read/64, error -71 [ 1604.787229][ T19] usb 4-1: device descriptor read/64, error -71 [ 1604.881509][T32543] loop6: detected capacity change from 0 to 1024 [ 1604.916462][T32543] EXT4-fs: Ignoring removed orlov option [ 1604.917282][ T19] usb usb4-port1: attempt power cycle [ 1604.927368][T32543] EXT4-fs: Ignoring removed orlov option [ 1604.945624][T32543] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1604.974190][T27655] EXT4-fs (loop6): unmounting filesystem. [ 1605.347216][ T19] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1605.388347][ T19] usb 4-1: device descriptor read/8, error -71 [ 1605.548257][ T19] usb 4-1: device descriptor read/8, error -71 [ 1606.186118][T32563] loop6: detected capacity change from 0 to 8192 [ 1606.318463][ T19] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1606.359310][ T19] usb 4-1: device descriptor read/8, error -71 [ 1606.526133][ T1209] usb 1-1: USB disconnect, device number 45 [ 1606.533095][ T19] usb 4-1: device descriptor read/8, error -71 [ 1606.959543][ T19] usb usb4-port1: unable to enumerate USB device [ 1607.156383][T32589] 9pnet_fd: Insufficient options for proto=fd [ 1607.181393][T32591] loop5: detected capacity change from 0 to 1024 [ 1607.188128][T32591] ext4: Unknown parameter 'noacl' [ 1607.427087][T32598] serio: Serial port ptm0 [ 1607.452780][T32598] loop6: detected capacity change from 0 to 1024 [ 1607.475291][T32598] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1607.487283][T32598] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1607.498200][T32598] JBD2: no valid journal superblock found [ 1607.503809][T32598] EXT4-fs (loop6): error loading journal [ 1607.637305][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 1607.637347][ T28] audit: type=1326 audit(2000000764.055:5852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32594 comm="syz.5.10910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7b185d19 code=0x7ffc0000 [ 1607.862751][ T28] audit: type=1326 audit(2000000764.055:5853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32594 comm="syz.5.10910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7b185d19 code=0x7ffc0000 [ 1607.946163][ T28] audit: type=1326 audit(2000000764.055:5854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32594 comm="syz.5.10910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f0c7b185d19 code=0x7ffc0000 [ 1608.036190][ T28] audit: type=1326 audit(2000000764.055:5855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32594 comm="syz.5.10910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7b185d19 code=0x7ffc0000 [ 1608.117838][ T28] audit: type=1326 audit(2000000764.055:5856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32594 comm="syz.5.10910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7b185d19 code=0x7ffc0000 [ 1608.141857][ T28] audit: type=1326 audit(2000000764.055:5857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32594 comm="syz.5.10910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0c7b185d19 code=0x7ffc0000 [ 1608.179641][ T28] audit: type=1326 audit(2000000764.055:5858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32594 comm="syz.5.10910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7b185d19 code=0x7ffc0000 [ 1608.268799][ T28] audit: type=1326 audit(2000000764.055:5859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32594 comm="syz.5.10910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7b185d19 code=0x7ffc0000 [ 1608.293901][ T28] audit: type=1326 audit(2000000764.055:5860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32594 comm="syz.5.10910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c7b185d19 code=0x7ffc0000 [ 1608.328388][ T28] audit: type=1326 audit(2000000764.055:5861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32594 comm="syz.5.10910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7b185d19 code=0x7ffc0000 [ 1608.362151][T32644] 9pnet_fd: Insufficient options for proto=fd [ 1608.421447][T32650] loop5: detected capacity change from 0 to 8192 [ 1610.010616][T32689] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10949'. [ 1610.037403][T32690] IPv6: NLM_F_CREATE should be specified when creating new route [ 1610.549223][T32718] random: crng reseeded on system resumption [ 1610.650804][T32727] loop5: detected capacity change from 0 to 1024 [ 1610.657957][T32727] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1610.670491][T32727] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 1610.806653][T32727] EXT4-fs (loop5): invalid journal inode [ 1610.832720][T32727] EXT4-fs (loop5): can't get journal size [ 1610.996611][T32727] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1611.024469][T32737] syz.3.10968[32737] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1611.024548][T32737] syz.3.10968[32737] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1611.077418][T32733] loop6: detected capacity change from 0 to 2048 [ 1611.097632][T31613] EXT4-fs (loop5): unmounting filesystem. [ 1611.144797][T32733] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1611.189652][T27655] EXT4-fs (loop6): unmounting filesystem. [ 1611.982075][ T306] syz.3.10982[306] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1611.982159][ T306] syz.3.10982[306] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1612.099140][ T314] loop3: detected capacity change from 0 to 2048 [ 1612.424469][ T327] xt_CT: No such helper "syz0" [ 1612.718758][ T314] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1612.857851][T26413] EXT4-fs (loop3): unmounting filesystem. [ 1613.083781][ T343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=343 comm=syz.3.10991 [ 1613.311346][ T28] kauditd_printk_skb: 128 callbacks suppressed [ 1613.311365][ T28] audit: type=1400 audit(2000000769.805:5990): avc: denied { setattr } for pid=345 comm="syz.0.10995" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1613.383134][ T352] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1613.965769][ T28] audit: type=1400 audit(2000000770.225:5991): avc: denied { setopt } for pid=367 comm="syz.0.11005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1614.111547][ T28] audit: type=1400 audit(2000000770.605:5992): avc: denied { write } for pid=376 comm="syz.3.11008" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1614.494436][ T28] audit: type=1400 audit(2000000770.605:5993): avc: denied { add_name } for pid=376 comm="syz.3.11008" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1614.557521][ T28] audit: type=1400 audit(2000000770.605:5994): avc: denied { associate } for pid=376 comm="syz.3.11008" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1614.598734][ T28] audit: type=1326 audit(2000000770.685:5995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=371 comm="syz.2.11006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b6385d19 code=0x7ffc0000 [ 1614.625437][ T28] audit: type=1326 audit(2000000770.685:5996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=371 comm="syz.2.11006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b6385d19 code=0x7ffc0000 [ 1614.652021][ T28] audit: type=1326 audit(2000000770.685:5997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=371 comm="syz.2.11006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fa6b6385d19 code=0x7ffc0000 [ 1614.675506][ T28] audit: type=1326 audit(2000000770.685:5998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=371 comm="syz.2.11006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b6385d19 code=0x7ffc0000 [ 1614.724498][ T28] audit: type=1326 audit(2000000770.685:5999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=371 comm="syz.2.11006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b6385d19 code=0x7ffc0000 [ 1615.501889][ T417] loop3: detected capacity change from 0 to 2048 [ 1615.631321][ T417] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1615.664938][ T417] 9pnet_fd: Insufficient options for proto=fd [ 1616.215105][ T426] netlink: 92 bytes leftover after parsing attributes in process `syz.5.11027'. [ 1616.437995][T26413] EXT4-fs (loop3): unmounting filesystem. [ 1616.862610][ T2242] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1617.226479][ T446] loop3: detected capacity change from 0 to 2048 [ 1617.377158][ T2242] usb 3-1: Using ep0 maxpacket: 16 [ 1617.383275][ T2242] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 1617.412758][ T446] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1617.429029][ T2242] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1617.437033][ T2242] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1617.445255][ T2242] usb 3-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config [ 1617.455445][ T2242] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1617.464416][ T2242] usb 3-1: config 0 has no interface number 0 [ 1617.470681][ T2242] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1617.539685][ T2242] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1617.557169][ T2242] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1617.566830][ T2242] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1617.597169][ T2242] usb 3-1: config 0 interface 125 has no altsetting 0 [ 1618.263279][T26413] EXT4-fs (loop3): unmounting filesystem. [ 1618.263884][ T2242] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1618.307992][ T2242] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.315827][ T2242] usb 3-1: Product: syz [ 1618.329630][ T2242] usb 3-1: Manufacturer: syz [ 1618.337288][ T2242] usb 3-1: SerialNumber: syz [ 1618.347482][ T2242] usb 3-1: config 0 descriptor?? [ 1618.570145][T27331] usb 3-1: USB disconnect, device number 37 [ 1618.577730][ T19] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1619.625406][ T489] loop3: detected capacity change from 0 to 2048 [ 1619.660508][ T498] serio: Serial port ptm0 [ 1619.727182][ T19] usb 1-1: device descriptor read/64, error -71 [ 1619.737756][ T489] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1619.894057][T26413] EXT4-fs (loop3): unmounting filesystem. [ 1619.989130][ T519] loop6: detected capacity change from 0 to 128 [ 1620.007261][ T19] usb 1-1: device descriptor read/64, error -71 [ 1620.053301][ T519] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1620.062000][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 1620.062017][ T28] audit: type=1400 audit(2000000776.565:6035): avc: denied { write } for pid=520 comm="syz.3.11059" name="ip6_mr_vif" dev="proc" ino=4026532865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1620.093435][ T519] ext4 filesystem being mounted at /372/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1620.141708][ T524] syz.3.11060[524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1620.141778][ T524] syz.3.11060[524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1620.222368][ T519] EXT4-fs error (device loop6): ext4_validate_block_bitmap:420: comm syz.6.11058: bg 0: bad block bitmap checksum [ 1620.277305][ T19] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1620.335137][T27655] EXT4-fs (loop6): unmounting filesystem. [ 1620.370420][ T529] loop6: detected capacity change from 0 to 512 [ 1620.572887][T30743] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1620.662668][ T19] usb 1-1: device descriptor read/64, error -71 [ 1620.837662][ T28] audit: type=1400 audit(2000000777.335:6036): avc: denied { create } for pid=534 comm="syz.2.11064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1620.862216][ T28] audit: type=1400 audit(2000000777.355:6037): avc: denied { write } for pid=534 comm="syz.2.11064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1620.947210][ T19] usb 1-1: device descriptor read/64, error -71 [ 1621.103444][ T19] usb usb1-port1: attempt power cycle [ 1621.226427][ T28] audit: type=1400 audit(2000000777.715:6038): avc: denied { write } for pid=548 comm="syz.3.11070" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1621.291694][ T551] syz.3.11071[551] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1621.291779][ T551] syz.3.11071[551] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1621.337456][ T28] audit: type=1400 audit(2000000777.835:6039): avc: denied { read append } for pid=554 comm="syz.3.11072" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1621.690893][ T568] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=568 comm=syz.3.11076 [ 1621.993726][ T572] loop6: detected capacity change from 0 to 16 [ 1622.005232][ T572] erofs: (device loop6): z_erofs_parse_cfgs: unidentified algorithms fffc, please upgrade kernel [ 1622.065592][ T28] audit: type=1326 audit(2000000778.555:6040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=577 comm="syz.2.11081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b6385d19 code=0x7ffc0000 [ 1622.090344][ T28] audit: type=1326 audit(2000000778.595:6041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=577 comm="syz.2.11081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b6385d19 code=0x7ffc0000 [ 1622.126791][ T28] audit: type=1326 audit(2000000778.615:6042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=577 comm="syz.2.11081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa6b6385d19 code=0x7ffc0000 [ 1622.150755][ T28] audit: type=1326 audit(2000000778.615:6043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=577 comm="syz.2.11081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b6385d19 code=0x7ffc0000 [ 1622.236900][ T28] audit: type=1326 audit(2000000778.615:6044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=577 comm="syz.2.11081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b6385d19 code=0x7ffc0000 [ 1622.978312][ T601] syz.5.11089[601] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1622.978393][ T601] syz.5.11089[601] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1623.029127][ T601] bridge0: port 2(bridge_slave_1) entered disabled state [ 1623.047296][ T601] bridge0: port 1(bridge_slave_0) entered disabled state [ 1623.084604][ T601] device bridge_slave_1 left promiscuous mode [ 1623.094819][ T601] bridge0: port 2(bridge_slave_1) entered disabled state [ 1623.102599][ T601] device bridge_slave_0 left promiscuous mode [ 1623.108951][ T601] bridge0: port 1(bridge_slave_0) entered disabled state [ 1623.344264][ T620] loop6: detected capacity change from 0 to 1024 [ 1623.358034][ T620] EXT4-fs: Ignoring removed i_version option [ 1623.364290][ T620] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1623.373943][ T620] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1623.384703][ T620] EXT4-fs (loop6): unmounting filesystem. [ 1623.485501][ T635] loop6: detected capacity change from 0 to 512 [ 1623.539315][ T635] EXT4-fs (loop6): too many log groups per flexible block group [ 1623.553980][ T635] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 1623.561730][ T635] EXT4-fs (loop6): mount failed [ 1623.842603][ T646] syz.6.11107[646] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1623.843898][ T646] syz.6.11107[646] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1624.016783][ T658] loop5: detected capacity change from 0 to 128 [ 1624.034730][ T658] FAT-fs (loop5): bogus number of reserved sectors [ 1624.041297][ T656] loop6: detected capacity change from 0 to 4096 [ 1624.044785][ T658] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 1624.057287][ T658] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1624.081797][ T656] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1624.121075][ T658] 9pnet: Could not find request transport: rdma [ 1624.179641][T27655] EXT4-fs (loop6): unmounting filesystem. [ 1624.489927][ T688] loop5: detected capacity change from 0 to 2048 [ 1624.496539][ T688] EXT4-fs: Ignoring removed mblk_io_submit option [ 1624.555443][ T688] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1624.751713][ T700] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.11125: bg 0: block 234: padding at end of block bitmap is not set [ 1624.766420][ T700] EXT4-fs (loop5): Remounting filesystem read-only [ 1626.134966][ T724] loop6: detected capacity change from 0 to 2048 [ 1630.637314][ T725] 9pnet_fd: Insufficient options for proto=fd [ 1630.809261][ T724] EXT4-fs warning (device loop6): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop6. [ 1630.994169][T31613] EXT4-fs (loop5): unmounting filesystem. [ 1632.278232][ T758] loop6: detected capacity change from 0 to 1024 [ 1632.301381][ T758] ext4: Unknown parameter 'noacl' [ 1632.550394][ T763] xt_CT: No such helper "syz0" [ 1633.017771][ T765] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1633.037634][ T758] loop6: detected capacity change from 0 to 256 [ 1633.059552][ T758] FAT-fs (loop6): Directory bread(block 64) failed [ 1633.069600][ T758] FAT-fs (loop6): Directory bread(block 65) failed [ 1633.076420][ T758] FAT-fs (loop6): Directory bread(block 66) failed [ 1633.135650][ T758] FAT-fs (loop6): Directory bread(block 67) failed [ 1633.142245][ T758] FAT-fs (loop6): Directory bread(block 68) failed [ 1633.148707][ T758] FAT-fs (loop6): Directory bread(block 69) failed [ 1633.155151][ T758] FAT-fs (loop6): Directory bread(block 70) failed [ 1633.182239][ T772] loop0: detected capacity change from 0 to 1024 [ 1633.189851][ T758] FAT-fs (loop6): Directory bread(block 71) failed [ 1633.202482][ T774] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=774 comm=syz.2.11156 [ 1633.209008][ T758] FAT-fs (loop6): Directory bread(block 72) failed [ 1633.223823][ T774] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11156'. [ 1633.235797][ T772] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1633.257379][ T758] FAT-fs (loop6): Directory bread(block 73) failed [ 1633.365865][ T778] loop5: detected capacity change from 0 to 2048 [ 1633.590314][ T772] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1633.743214][ T778] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1633.774865][ T778] 9pnet_fd: Insufficient options for proto=fd [ 1634.028696][ T772] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1634.202275][T31613] EXT4-fs (loop5): unmounting filesystem. [ 1634.263401][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 1634.263420][ T28] audit: type=1400 audit(2000000790.755:6091): avc: denied { create } for pid=793 comm="syz.3.11161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1634.348374][ T28] audit: type=1400 audit(2000000790.795:6092): avc: denied { setopt } for pid=793 comm="syz.3.11161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1634.462567][ T28] audit: type=1400 audit(2000000790.795:6093): avc: denied { write } for pid=793 comm="syz.3.11161" path="socket:[134438]" dev="sockfs" ino=134438 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1634.516490][T26701] EXT4-fs (loop0): unmounting filesystem. [ 1635.049550][ T28] audit: type=1400 audit(2000000790.795:6094): avc: denied { nlmsg_read } for pid=793 comm="syz.3.11161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1635.286363][ T28] audit: type=1400 audit(2000000791.405:6095): avc: denied { block_suspend } for pid=806 comm="syz.0.11163" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1635.311687][ T817] loop6: detected capacity change from 0 to 1024 [ 1635.777943][ T822] 9pnet_fd: Insufficient options for proto=fd [ 1635.904916][ T817] ext4: Unknown parameter 'noacl' [ 1636.035080][ T826] loop0: detected capacity change from 0 to 1024 [ 1636.041717][ T826] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1636.049311][ T826] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1636.072062][ T817] loop6: detected capacity change from 0 to 256 [ 1636.215837][ T817] FAT-fs (loop6): Directory bread(block 64) failed [ 1636.223209][ T826] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1636.327366][ T817] FAT-fs (loop6): Directory bread(block 65) failed [ 1636.346388][ T28] audit: type=1400 audit(2000000792.805:6096): avc: denied { connect } for pid=833 comm="syz.5.11176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1636.535598][ T836] netlink: 'syz.2.11177': attribute type 4 has an invalid length. [ 1636.767237][ T817] FAT-fs (loop6): Directory bread(block 66) failed [ 1636.780480][ T817] FAT-fs (loop6): Directory bread(block 67) failed [ 1636.790609][ T817] FAT-fs (loop6): Directory bread(block 68) failed [ 1636.800513][ T817] FAT-fs (loop6): Directory bread(block 69) failed [ 1636.807032][ T817] FAT-fs (loop6): Directory bread(block 70) failed [ 1636.813820][ T817] FAT-fs (loop6): Directory bread(block 71) failed [ 1636.820644][ T817] FAT-fs (loop6): Directory bread(block 72) failed [ 1636.827449][ T817] FAT-fs (loop6): Directory bread(block 73) failed [ 1636.918048][ T844] xt_CT: No such helper "syz0" [ 1638.195131][T26701] EXT4-fs (loop0): unmounting filesystem. [ 1638.290776][ T852] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11182'. [ 1638.566496][ T870] loop0: detected capacity change from 0 to 2048 [ 1638.690827][ T869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11187'. [ 1638.838385][ T869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11187'. [ 1638.852413][ T870] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1638.888344][ T870] 9pnet_fd: Insufficient options for proto=fd [ 1639.603549][ T879] loop6: detected capacity change from 0 to 2048 [ 1639.662400][T26701] EXT4-fs (loop0): unmounting filesystem. [ 1639.804985][ T879] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1639.835520][ T879] 9pnet_fd: Insufficient options for proto=fd [ 1640.032917][ T886] loop0: detected capacity change from 0 to 512 [ 1640.049659][ T886] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1640.067351][ T886] ext4 filesystem being mounted at /439/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1640.157285][ T28] audit: type=1400 audit(2000000796.625:6097): avc: denied { ioctl } for pid=885 comm="syz.0.11191" path="/439/file1/cpuset.effective_cpus" dev="loop0" ino=18 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1640.191707][T26701] EXT4-fs (loop0): unmounting filesystem. [ 1640.525223][T27655] EXT4-fs (loop6): unmounting filesystem. [ 1641.033095][ T28] audit: type=1326 audit(2000000797.525:6098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=903 comm="syz.6.11197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f1785d19 code=0x7ffc0000 [ 1641.203718][ T28] audit: type=1326 audit(2000000797.525:6099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=903 comm="syz.6.11197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f1785d19 code=0x7ffc0000 [ 1641.232424][ T906] loop0: detected capacity change from 0 to 16 [ 1641.247101][ T906] erofs: (device loop0): mounted with root inode @ nid 36. [ 1641.630919][ T910] netlink: 'syz.0.11194': attribute type 4 has an invalid length. [ 1641.639990][ T47] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 1641.651312][ T910] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1641.779976][ T28] audit: type=1326 audit(2000000797.525:6100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=903 comm="syz.6.11197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f48f1785d19 code=0x7ffc0000 [ 1642.014971][ T28] audit: type=1326 audit(2000000797.525:6101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=903 comm="syz.6.11197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f1785d19 code=0x7ffc0000 [ 1642.047271][ T28] audit: type=1326 audit(2000000797.525:6102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=903 comm="syz.6.11197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f1785d19 code=0x7ffc0000 [ 1642.099840][ T923] loop6: detected capacity change from 0 to 1024 [ 1642.100749][ T28] audit: type=1326 audit(2000000797.985:6103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=907 comm="syz.6.11198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f1785d19 code=0x7ffc0000 [ 1642.130062][ T28] audit: type=1326 audit(2000000797.985:6104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=907 comm="syz.6.11198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f1785d19 code=0x7ffc0000 [ 1642.179087][ T28] audit: type=1326 audit(2000000797.985:6105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=907 comm="syz.6.11198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f48f1784680 code=0x7ffc0000 [ 1642.218517][ T926] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=926 comm=syz.2.11200 [ 1642.312511][ T923] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1642.428533][ T931] syz.0.11204[931] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1642.428618][ T931] syz.0.11204[931] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1642.450044][ T28] audit: type=1326 audit(2000000797.985:6106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=907 comm="syz.6.11198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f1785d19 code=0x7ffc0000 [ 1642.491994][ T923] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2739: inode #14: comm syz.6.11203: corrupted in-inode xattr [ 1642.504716][ T923] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #14: comm syz.6.11203: attempt to clear invalid blocks 1634560256 len 1 [ 1642.552346][T27655] EXT4-fs (loop6): unmounting filesystem. [ 1642.611158][ T931] loop0: detected capacity change from 0 to 512 [ 1642.691153][ T931] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1642.700180][ T931] ext4 filesystem being mounted at /442/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1642.730796][T26701] EXT4-fs (loop0): unmounting filesystem. [ 1642.981033][ T951] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1643.110344][ T954] loop5: detected capacity change from 0 to 16 [ 1643.117028][ T954] erofs: (device loop5): mounted with root inode @ nid 36. [ 1643.303933][ T956] netlink: 'syz.5.11212': attribute type 4 has an invalid length. [ 1643.346804][ T46] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 1643.361870][ T956] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1643.628556][ T960] loop6: detected capacity change from 0 to 16 [ 1643.636309][ T960] erofs: (device loop6): mounted with root inode @ nid 36. [ 1643.833597][ T47] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 1643.845018][ T967] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1644.146882][ T974] syz.0.11218[974] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1644.147014][ T974] syz.0.11218[974] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1644.225226][ T980] usb usb9: usbfs: process 980 (syz.0.11220) did not claim interface 0 before use [ 1644.324513][ T984] device pim6reg1 entered promiscuous mode [ 1645.236652][ T1009] syz.3.11231[1009] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1645.236919][ T1009] syz.3.11231[1009] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1645.320844][ T1016] loop5: detected capacity change from 0 to 1024 [ 1645.391597][ T1016] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1645.422931][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 1645.422950][ T28] audit: type=1400 audit(2000000801.915:6119): avc: denied { setattr } for pid=1015 comm="syz.5.11235" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1645.457308][ T553] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1645.780125][ T553] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1645.797953][T31613] EXT4-fs (loop5): unmounting filesystem. [ 1645.804074][ T1023] loop6: detected capacity change from 0 to 1024 [ 1645.817198][ T553] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1645.826078][ T553] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1645.852467][ T1023] ext4: Unknown parameter 'noacl' [ 1645.869088][ T553] usb 3-1: config 0 descriptor?? [ 1645.879905][ T553] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 1645.881463][ T1025] loop5: detected capacity change from 0 to 128 [ 1645.886607][ T553] usb 3-1: No valid video chain found. [ 1645.935035][ T1023] loop6: detected capacity change from 0 to 256 [ 1645.958972][ T1023] FAT-fs (loop6): Directory bread(block 64) failed [ 1645.974638][ T1023] FAT-fs (loop6): Directory bread(block 65) failed [ 1645.985807][ T1023] FAT-fs (loop6): Directory bread(block 66) failed [ 1645.998491][ T1023] FAT-fs (loop6): Directory bread(block 67) failed [ 1646.008017][ T1023] FAT-fs (loop6): Directory bread(block 68) failed [ 1646.024700][ T1023] FAT-fs (loop6): Directory bread(block 69) failed [ 1646.038400][ T1023] FAT-fs (loop6): Directory bread(block 70) failed [ 1646.052138][ T1023] FAT-fs (loop6): Directory bread(block 71) failed [ 1646.075396][ T1023] FAT-fs (loop6): Directory bread(block 72) failed [ 1646.086378][ T1023] FAT-fs (loop6): Directory bread(block 73) failed [ 1647.349132][ T1044] syz.3.11244[1044] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1647.349221][ T1044] syz.3.11244[1044] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1647.579115][ T28] audit: type=1326 audit(2000000804.075:6120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1054 comm="syz.3.11249" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc4c6785d19 code=0x0 [ 1647.981197][T26570] usb 3-1: USB disconnect, device number 38 [ 1647.996475][ T28] audit: type=1400 audit(2000000804.485:6121): avc: denied { read } for pid=1062 comm="syz.2.11251" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1648.035728][ T28] audit: type=1400 audit(2000000804.495:6122): avc: denied { open } for pid=1062 comm="syz.2.11251" path="/dev/rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1648.059453][ T28] audit: type=1400 audit(2000000804.515:6123): avc: denied { ioctl } for pid=1062 comm="syz.2.11251" path="/dev/rtc0" dev="devtmpfs" ino=259 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1648.261594][ T1075] syz.5.11257[1075] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1648.261656][ T1075] syz.5.11257[1075] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1648.289067][ T28] audit: type=1400 audit(2000000804.785:6124): avc: denied { ioctl } for pid=1076 comm="syz.2.11256" path="/dev/usbmon7" dev="devtmpfs" ino=176 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1649.399940][ T1101] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1650.028856][ T1117] syz.3.11270[1117] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1650.028947][ T1117] syz.3.11270[1117] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1650.063670][ T1115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11268'. [ 1650.083809][ T1115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11268'. [ 1650.143245][ T28] audit: type=1400 audit(2000000806.635:6125): avc: denied { create } for pid=1125 comm="syz.3.11274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1650.175080][ T28] audit: type=1400 audit(2000000806.665:6126): avc: denied { read } for pid=1125 comm="syz.3.11274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1650.570708][ T1140] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1650.660429][ T1142] x_tables: duplicate underflow at hook 4 [ 1650.719790][ T1146] syz.6.11282[1146] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1650.719921][ T1146] syz.6.11282[1146] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1650.810221][ T28] audit: type=1400 audit(2000000807.305:6127): avc: denied { mount } for pid=1151 comm="syz.0.11285" name="/" dev="ramfs" ino=134926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1650.915198][ T28] audit: type=1400 audit(2000000807.405:6128): avc: denied { unmount } for pid=26701 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1652.314543][ T1213] loop6: detected capacity change from 0 to 16 [ 1652.538282][ T1214] loop0: detected capacity change from 0 to 2048 [ 1653.231224][ T1213] erofs: (device loop6): z_erofs_parse_cfgs: unidentified algorithms fffc, please upgrade kernel [ 1653.392650][T27331] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1653.440051][ T1214] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1653.707452][ T1222] tipc: Started in network mode [ 1653.712167][ T1222] tipc: Node identity 4e2b5e6051ca, cluster identity 4711 [ 1653.748832][ T1222] tipc: Enabled bearer , priority 7 [ 1653.767404][T26701] EXT4-fs (loop0): unmounting filesystem. [ 1653.778153][ T1222] ªªªªªª: renamed from syzkaller0 [ 1653.815517][ T1222] tipc: Disabling bearer [ 1653.934477][ T28] audit: type=1326 audit(2000000810.425:6129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1239 comm="syz.5.11316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7b185d19 code=0x7ffc0000 [ 1653.959135][T27331] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1653.975146][T27331] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1654.008501][T27331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1654.027201][ T28] audit: type=1326 audit(2000000810.425:6130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1239 comm="syz.5.11316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f0c7b185d19 code=0x7ffc0000 [ 1654.051110][T27331] usb 3-1: config 0 descriptor?? [ 1654.067744][T27331] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 1654.089705][T27331] usb 3-1: No valid video chain found. [ 1654.151181][ T28] audit: type=1326 audit(2000000810.425:6131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1239 comm="syz.5.11316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7b185d19 code=0x7ffc0000 [ 1654.229384][ T28] audit: type=1326 audit(2000000810.495:6132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1239 comm="syz.5.11316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7b185d19 code=0x7ffc0000 [ 1655.126170][ T1266] loop5: detected capacity change from 0 to 512 [ 1655.148975][ T1266] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1655.167006][ T1266] EXT4-fs (loop5): 1 truncate cleaned up [ 1655.191094][ T1266] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1655.201057][ T28] audit: type=1326 audit(2000000811.705:6133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1271 comm="syz.6.11326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f1785d19 code=0x7ffc0000 [ 1655.259494][ T1274] xt_hashlimit: max too large, truncated to 1048576 [ 1655.273722][ T1266] ================================================================== [ 1655.281634][ T1266] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x909/0x1fa0 [ 1655.289177][ T1266] Read of size 18446744073709551572 at addr ffff888112f2d850 by task syz.5.11324/1266 [ 1655.298551][ T1266] [ 1655.300719][ T1266] CPU: 1 PID: 1266 Comm: syz.5.11324 Not tainted 6.1.115-syzkaller-00017-g22b7ded8b55b #0 [ 1655.310618][ T1266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1655.320519][ T1266] Call Trace: [ 1655.323640][ T1266] [ 1655.326419][ T1266] dump_stack_lvl+0x151/0x1b7 [ 1655.330928][ T1266] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1655.336217][ T1266] ? _printk+0xd1/0x111 [ 1655.340213][ T1266] ? __virt_addr_valid+0x242/0x2f0 [ 1655.345208][ T1266] print_report+0x158/0x4e0 [ 1655.349498][ T1266] ? __virt_addr_valid+0x242/0x2f0 [ 1655.354444][ T1266] ? kasan_complete_mode_report_info+0x57/0x1b0 [ 1655.360521][ T1266] ? ext4_xattr_set_entry+0x909/0x1fa0 [ 1655.365823][ T1266] kasan_report+0x13c/0x170 [ 1655.370165][ T1266] ? ext4_xattr_set_entry+0x909/0x1fa0 [ 1655.375452][ T1266] kasan_check_range+0x294/0x2a0 [ 1655.380223][ T1266] ? ext4_xattr_set_entry+0x909/0x1fa0 [ 1655.385517][ T1266] memmove+0x2d/0x70 [ 1655.389335][ T1266] ext4_xattr_set_entry+0x909/0x1fa0 [ 1655.394464][ T1266] ? ext4_xattr_inode_lookup_create+0x1a60/0x1a60 [ 1655.400705][ T1266] ? memcpy+0x56/0x70 [ 1655.404527][ T1266] ext4_xattr_block_set+0x99c/0x37f0 [ 1655.409737][ T1266] ? ext4_drop_inode+0x90/0x1a0 [ 1655.414419][ T1266] ? __getblk_gfp+0x3d/0x7d0 [ 1655.418848][ T1266] ? raw_irqentry_exit_cond_resched+0x2a/0x30 [ 1655.424746][ T1266] ? irqentry_exit+0x30/0x40 [ 1655.429173][ T1266] ? ext4_xattr_block_find+0x320/0x320 [ 1655.434475][ T1266] ? xattr_find_entry+0x23c/0x300 [ 1655.439331][ T1266] ? ext4_xattr_block_find+0x2ac/0x320 [ 1655.444622][ T1266] ext4_expand_extra_isize_ea+0x10eb/0x1c40 [ 1655.450360][ T1266] ? ext4_xattr_set+0x3d0/0x3d0 [ 1655.455039][ T1266] ? rwsem_write_trylock+0x153/0x340 [ 1655.460159][ T1266] ? dquot_initialize_needed+0x13d/0x370 [ 1655.465633][ T1266] __ext4_expand_extra_isize+0x31a/0x420 [ 1655.471100][ T1266] __ext4_mark_inode_dirty+0x4bb/0x7d0 [ 1655.476391][ T1266] ? sb_end_intwrite+0x130/0x130 [ 1655.481166][ T1266] ? current_time+0x1ba/0x300 [ 1655.485679][ T1266] ? atime_needs_update+0x810/0x810 [ 1655.490713][ T1266] ? __kasan_check_write+0x14/0x20 [ 1655.495659][ T1266] ? drop_nlink+0xa9/0x110 [ 1655.499913][ T1266] __ext4_unlink+0x6ed/0xba0 [ 1655.504338][ T1266] ? __ext4_read_dirblock+0x8e0/0x8e0 [ 1655.509666][ T1266] ? rwsem_mark_wake+0x770/0x770 [ 1655.514441][ T1266] ext4_unlink+0x142/0x3f0 [ 1655.518691][ T1266] vfs_unlink+0x38c/0x630 [ 1655.522872][ T1266] do_unlinkat+0x483/0x920 [ 1655.527121][ T1266] ? fsnotify_link_count+0x100/0x100 [ 1655.532233][ T1266] ? strncpy_from_user+0x169/0x2b0 [ 1655.537177][ T1266] ? getname_flags+0x1fd/0x520 [ 1655.541778][ T1266] __x64_sys_unlink+0x49/0x50 [ 1655.546291][ T1266] x64_sys_call+0x289/0x9a0 [ 1655.550630][ T1266] do_syscall_64+0x3b/0xb0 [ 1655.554894][ T1266] ? clear_bhb_loop+0x55/0xb0 [ 1655.559398][ T1266] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1655.565125][ T1266] RIP: 0033:0x7f0c7b185d19 [ 1655.569377][ T1266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1655.589004][ T1266] RSP: 002b:00007f0c7bfe6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 1655.597246][ T1266] RAX: ffffffffffffffda RBX: 00007f0c7b375fa0 RCX: 00007f0c7b185d19 [ 1655.605055][ T1266] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 1655.612871][ T1266] RBP: 00007f0c7b201a20 R08: 0000000000000000 R09: 0000000000000000 [ 1655.620678][ T1266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1655.628490][ T1266] R13: 0000000000000000 R14: 00007f0c7b375fa0 R15: 00007ffd52d65b68 [ 1655.636308][ T1266] [ 1655.639168][ T1266] [ 1655.641335][ T1266] Allocated by task 1266: [ 1655.645502][ T1266] kasan_set_track+0x4b/0x70 [ 1655.649929][ T1266] kasan_save_alloc_info+0x1f/0x30 [ 1655.654876][ T1266] __kasan_kmalloc+0x9c/0xb0 [ 1655.659301][ T1266] __kmalloc_node_track_caller+0xb3/0x1e0 [ 1655.664867][ T1266] kmemdup+0x29/0x60 [ 1655.668591][ T1266] ext4_xattr_block_set+0x80f/0x37f0 [ 1655.673713][ T1266] ext4_expand_extra_isize_ea+0x10eb/0x1c40 [ 1655.679441][ T1266] __ext4_expand_extra_isize+0x31a/0x420 [ 1655.684912][ T1266] __ext4_mark_inode_dirty+0x4bb/0x7d0 [ 1655.690199][ T1266] __ext4_unlink+0x6ed/0xba0 [ 1655.694627][ T1266] ext4_unlink+0x142/0x3f0 [ 1655.698894][ T1266] vfs_unlink+0x38c/0x630 [ 1655.703045][ T1266] do_unlinkat+0x483/0x920 [ 1655.707308][ T1266] __x64_sys_unlink+0x49/0x50 [ 1655.711813][ T1266] x64_sys_call+0x289/0x9a0 [ 1655.716151][ T1266] do_syscall_64+0x3b/0xb0 [ 1655.720405][ T1266] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1655.726132][ T1266] [ 1655.728303][ T1266] Last potentially related work creation: [ 1655.733978][ T1266] kasan_save_stack+0x3b/0x60 [ 1655.738458][ T1266] __kasan_record_aux_stack+0xb4/0xc0 [ 1655.743752][ T1266] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1655.749395][ T1266] insert_work+0x56/0x310 [ 1655.753561][ T1266] __queue_work+0x9b6/0xd70 [ 1655.757901][ T1266] queue_work_on+0x105/0x170 [ 1655.762326][ T1266] release_tty+0x5d9/0x810 [ 1655.766577][ T1266] tty_release_struct+0xc1/0xe0 [ 1655.771265][ T1266] tty_release+0xd14/0xf70 [ 1655.775636][ T1266] __fput+0x1e5/0x870 [ 1655.779445][ T1266] ____fput+0x15/0x20 [ 1655.783269][ T1266] task_work_run+0x24d/0x2e0 [ 1655.787691][ T1266] exit_to_user_mode_loop+0x94/0xa0 [ 1655.792723][ T1266] exit_to_user_mode_prepare+0x5a/0xa0 [ 1655.798024][ T1266] syscall_exit_to_user_mode+0x26/0x130 [ 1655.803402][ T1266] do_syscall_64+0x47/0xb0 [ 1655.807652][ T1266] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1655.813383][ T1266] [ 1655.815550][ T1266] Second to last potentially related work creation: [ 1655.821977][ T1266] kasan_save_stack+0x3b/0x60 [ 1655.826645][ T1266] __kasan_record_aux_stack+0xb4/0xc0 [ 1655.831845][ T1266] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1655.837496][ T1266] kvfree_call_rcu+0x9f/0x800 [ 1655.842016][ T1266] drop_sysctl_table+0x311/0x450 [ 1655.846775][ T1266] unregister_sysctl_table+0x76/0x120 [ 1655.851979][ T1266] unregister_net_sysctl_table+0x15/0x20 [ 1655.857446][ T1266] neigh_sysctl_unregister+0x78/0x90 [ 1655.862567][ T1266] inetdev_event+0x848/0x1110 [ 1655.867079][ T1266] raw_notifier_call_chain+0x8c/0xf0 [ 1655.872201][ T1266] unregister_netdevice_many+0xe25/0x1730 [ 1655.877755][ T1266] default_device_exit_batch+0x975/0xa00 [ 1655.883225][ T1266] cleanup_net+0x6c9/0xbf0 [ 1655.887477][ T1266] process_one_work+0x73d/0xcb0 [ 1655.892163][ T1266] worker_thread+0xa60/0x1260 [ 1655.896676][ T1266] kthread+0x26d/0x300 [ 1655.900584][ T1266] ret_from_fork+0x1f/0x30 [ 1655.904836][ T1266] [ 1655.907007][ T1266] The buggy address belongs to the object at ffff888112f2d800 [ 1655.907007][ T1266] which belongs to the cache kmalloc-1k of size 1024 [ 1655.920896][ T1266] The buggy address is located 80 bytes inside of [ 1655.920896][ T1266] 1024-byte region [ffff888112f2d800, ffff888112f2dc00) [ 1655.934000][ T1266] [ 1655.936183][ T1266] The buggy address belongs to the physical page: [ 1655.942421][ T1266] page:ffffea00044bca00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x112f28 [ 1655.952486][ T1266] head:ffffea00044bca00 order:3 compound_mapcount:0 compound_pincount:0 [ 1655.960645][ T1266] flags: 0x4000000000010200(slab|head|zone=1) [ 1655.966556][ T1266] raw: 4000000000010200 ffffea0004f55c00 dead000000000002 ffff888100043080 [ 1655.974974][ T1266] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 1655.983383][ T1266] page dumped because: kasan: bad access detected [ 1655.989644][ T1266] page_owner tracks the page as allocated [ 1655.995193][ T1266] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 17593, tgid 17593 (syz-executor), ts 844906848621, free_ts 805163790135 [ 1656.018119][ T1266] post_alloc_hook+0x213/0x220 [ 1656.022714][ T1266] prep_new_page+0x1b/0x110 [ 1656.027047][ T1266] get_page_from_freelist+0x2980/0x2a10 [ 1656.032428][ T1266] __alloc_pages+0x234/0x610 [ 1656.036852][ T1266] alloc_slab_page+0x6c/0xf0 [ 1656.041276][ T1266] new_slab+0x90/0x3e0 [ 1656.045201][ T1266] ___slab_alloc+0x6f9/0xb80 [ 1656.049607][ T1266] __slab_alloc+0x5d/0xa0 [ 1656.053776][ T1266] __kmem_cache_alloc_node+0x207/0x2a0 [ 1656.059072][ T1266] __kmalloc_node_track_caller+0xa2/0x1e0 [ 1656.064626][ T1266] __alloc_skb+0x125/0x2d0 [ 1656.068875][ T1266] alloc_uevent_skb+0x80/0x230 [ 1656.073485][ T1266] kobject_uevent_net_broadcast+0x188/0x590 [ 1656.079206][ T1266] kobject_uevent_env+0x53c/0x720 [ 1656.084065][ T1266] kobject_uevent+0x1f/0x30 [ 1656.088406][ T1266] net_rx_queue_update_kobjects+0x239/0x4a0 [ 1656.094134][ T1266] page last free stack trace: [ 1656.098649][ T1266] free_unref_page_prepare+0x83d/0x850 [ 1656.103943][ T1266] free_unref_page+0xb2/0x5c0 [ 1656.108453][ T1266] __free_pages+0x61/0xf0 [ 1656.112618][ T1266] __free_slab+0xce/0x1a0 [ 1656.116788][ T1266] __unfreeze_partials+0x165/0x1a0 [ 1656.121738][ T1266] put_cpu_partial+0xa9/0x100 [ 1656.126249][ T1266] __slab_free+0x1c8/0x280 [ 1656.130500][ T1266] ___cache_free+0xc6/0xd0 [ 1656.134760][ T1266] qlist_free_all+0xc5/0x140 [ 1656.139179][ T1266] kasan_quarantine_reduce+0x15a/0x180 [ 1656.144475][ T1266] __kasan_slab_alloc+0x24/0x80 [ 1656.149161][ T1266] slab_post_alloc_hook+0x53/0x2c0 [ 1656.154107][ T1266] kmem_cache_alloc+0x175/0x320 [ 1656.158798][ T1266] getname_flags+0xba/0x520 [ 1656.163134][ T1266] __x64_sys_unlink+0x3c/0x50 [ 1656.167646][ T1266] x64_sys_call+0x289/0x9a0 [ 1656.171989][ T1266] [ 1656.174156][ T1266] Memory state around the buggy address: [ 1656.179629][ T1266] ffff888112f2d700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1656.187526][ T1266] ffff888112f2d780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1656.195425][ T1266] >ffff888112f2d800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1656.203319][ T1266] ^ [ 1656.209832][ T1266] ffff888112f2d880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1656.217729][ T1266] ffff888112f2d900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1656.225627][ T1266] ================================================================== [ 1656.259630][T27331] usb 3-1: USB disconnect, device number 39 [ 1656.279278][ T1266] Disabling lock debugging due to kernel taint [ 1656.297634][ T28] audit: type=1326 audit(2000000811.705:6134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1271 comm="syz.6.11326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48f1785d19 code=0x7ffc0000 [ 1656.331547][ T28] audit: type=1326 audit(2000000811.705:6135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1271 comm="syz.6.11326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f1785d19 code=0x7ffc0000 [ 1656.359737][ T28] audit: type=1326 audit(2000000811.705:6136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1271 comm="syz.6.11326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48f1785d19 code=0x7ffc0000 [ 1656.360990][T31613] EXT4-fs (loop5): unmounting filesystem. [ 1656.383439][ T28] audit: type=1326 audit(2000000811.725:6137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1271 comm="syz.6.11326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f1785d19 code=0x7ffc0000 [ 1656.411995][ T28] audit: type=1326 audit(2000000811.725:6138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1271 comm="syz.6.11326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f1785d19 code=0x7ffc0000 [ 1656.435477][ T28] audit: type=1326 audit(2000000811.735:6139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1271 comm="syz.6.11326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f48f1785d19 code=0x7ffc0000 [ 1656.458814][ T28] audit: type=1326 audit(2000000811.735:6140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1271 comm="syz.6.11326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f1785d19 code=0x7ffc0000 [ 1656.482225][ T28] audit: type=1326 audit(2000000811.735:6141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1271 comm="syz.6.11326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f1785d19 code=0x7ffc0000 [ 1656.505581][ T28] audit: type=1400 audit(2000000811.735:6142): avc: denied { setattr } for pid=1265 comm="syz.5.11324" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1