last executing test programs: 13.41644803s ago: executing program 2 (id=2278): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0xff, 0x3, 0x600}, 0x21) 13.39202713s ago: executing program 2 (id=2280): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1, 0x0, 0x400000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000880)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) set_mempolicy_home_node(&(0x7f0000416000/0x1000)=nil, 0x1000, 0x0, 0x0) 13.36303887s ago: executing program 2 (id=2282): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, r0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x40200, 0x42) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) dup2(r1, r0) 12.508459342s ago: executing program 0 (id=2321): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) 12.484343913s ago: executing program 2 (id=2325): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) move_mount(r0, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000380)='./file0\x00') 12.457502713s ago: executing program 0 (id=2327): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000100)=[0x7], 0x0, 0xe, 0x1}}, 0x40) 12.438413843s ago: executing program 2 (id=2328): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0) recvmmsg(r1, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000018c0)=""/178, 0xb2}], 0x1}}], 0x2, 0x40010042, 0x0) 12.304867425s ago: executing program 0 (id=2335): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000080000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f28bd421850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xdd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 12.231537296s ago: executing program 0 (id=2339): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) move_mount(r0, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000380)='./file0\x00') 12.194101327s ago: executing program 0 (id=2340): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 12.120115428s ago: executing program 2 (id=2343): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000780)={'vcan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x0, r2}, 0xc) setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0) 12.119753588s ago: executing program 32 (id=2343): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000780)={'vcan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x0, r2}, 0xc) setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0) 12.037928619s ago: executing program 4 (id=2346): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000100)=[0x7], 0x0, 0xe, 0x1}}, 0x40) 11.93553343s ago: executing program 0 (id=2348): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') 11.93533951s ago: executing program 33 (id=2348): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') 11.878603811s ago: executing program 4 (id=2351): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="600000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="1546010000000000380012800e000100697036677265746170000000240002800400120014000700ff0200000000000000000000000000010800150015e5040008000a00", @ANYRES32], 0x60}}, 0x0) 11.433468428s ago: executing program 4 (id=2353): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0) 11.411288718s ago: executing program 4 (id=2354): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) move_mount(r0, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000380)='./file0\x00') 11.387793168s ago: executing program 4 (id=2355): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0) recvmmsg(r1, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000018c0)=""/178, 0xb2}], 0x1}}], 0x2, 0x40010042, 0x0) 10.919804075s ago: executing program 4 (id=2358): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b165"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x29c) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1300, 0x1d) 10.919572265s ago: executing program 34 (id=2358): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b165"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x29c) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1300, 0x1d) 2.497396485s ago: executing program 7 (id=2591): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r0, 0x0, 0x5d) read(r0, 0x0, 0x0) write$ppp(r0, &(0x7f0000000200)="bc72", 0x2) 1.591914508s ago: executing program 7 (id=2603): iopl(0x3) r0 = gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.590529428s ago: executing program 5 (id=2605): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x8100, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x7) 1.540835498s ago: executing program 5 (id=2608): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1.40057364s ago: executing program 5 (id=2616): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) r1 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x1a00001a}]) 1.327097352s ago: executing program 3 (id=2617): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000002000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r2 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r2, @ANYRESDEC, @ANYRESHEX=r2], 0x1, 0x522, &(0x7f0000000a80)="$eJzs1b1u01AYBuCvaSiBqTNiOBILU1XYmAhCqVRhCQmUASYiNSwxQooXJ1MvgQvgwhi4CJSpW1BlF2jFWP+oeZ4ln/LaPuc9g/3p8ZfF2dfi849v32M03ovBOB4MLvbiMAZx5TwAgLvkYruNX9tK13sBANrh+w8Au+f9h49vXmXZ5F1Ko4jNeTktp9VvlZ+cZpPjdOngn7s2ZTnd/5M/S5Xr+b14WOfP/5sfxNMnVX6ZvX6b3cjvx1nj7QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYLcdpTSMiJRSOvz776Ysp/tVfpSu3Mir6eQ0mxzXF1zPh/Fo2FoNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4BYUq/Vilufz5R0bIn5Gy4uO6iNtuem4XrYvJ9/k8LKJJ7+IiL4U7NHQ4UsJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVLFaL2Z5Pl8WXe8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiLYrVezPJ8vmxw6LojAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0I3fAQAA///PCC46") ioprio_get$uid(0x0, r2) 1.195395863s ago: executing program 3 (id=2622): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) 1.150773794s ago: executing program 3 (id=2625): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000040), &(0x7f0000000200)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0xad, &(0x7f0000000340)=ANY=[], 0x0) 1.078062275s ago: executing program 3 (id=2629): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0xbc8c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = memfd_secret(0x80000) fcntl$setlease(r2, 0x400, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 978.268917ms ago: executing program 3 (id=2632): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0) 811.625789ms ago: executing program 3 (id=2647): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYBLOB="0000000001"], 0x48}}, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) read(r0, &(0x7f0000001480)=""/4096, 0x38) 733.84308ms ago: executing program 7 (id=2641): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x0, 0x0, 0x8}], 0x10, 0x3, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) 701.984071ms ago: executing program 7 (id=2643): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0, 0x0, 0x9}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) 661.771432ms ago: executing program 6 (id=2644): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffe, 0x0, 0x0) 297.992037ms ago: executing program 5 (id=2645): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) 295.746206ms ago: executing program 6 (id=2656): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r2}]}]}, 0x28}}, 0x0) 267.337907ms ago: executing program 6 (id=2646): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000002000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r2 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r2, @ANYRESDEC, @ANYRESHEX=r2], 0x1, 0x522, &(0x7f0000000a80)="$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") ioprio_get$uid(0x0, r2) 206.550818ms ago: executing program 6 (id=2649): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x4d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) 190.213118ms ago: executing program 1 (id=2650): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='kfree\x00', r0}, 0x18) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000180)={0x80, 0x2a, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000040)={0x80, 0x18, 0x2, 0xfffffff7, 0x0, 0x9}) 189.608838ms ago: executing program 5 (id=2651): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) ioperm(0x0, 0x82, 0x1f) 164.292298ms ago: executing program 5 (id=2652): iopl(0x3) r0 = gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 144.226589ms ago: executing program 1 (id=2653): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x7, &(0x7f00000019c0)={0x0, 0x3, 0x4}) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0xfffffffe]}, 0x8) read(r2, &(0x7f0000000740)=""/384, 0x200008ca) 143.542569ms ago: executing program 6 (id=2665): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x40010080, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) 123.209229ms ago: executing program 7 (id=2654): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000040), &(0x7f0000000200)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0xad, &(0x7f0000000340)=ANY=[], 0x0) 119.499949ms ago: executing program 1 (id=2655): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000300), 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='kmem_cache_free\x00', r1}, 0x18) recvfrom(r0, 0x0, 0xff3b, 0x100, 0x0, 0x0) 102.475279ms ago: executing program 7 (id=2658): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) r1 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x1a00001a}]) 99.161479ms ago: executing program 1 (id=2659): bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x1c, r2, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x80c8) 22.56086ms ago: executing program 1 (id=2660): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r2}]}]}, 0x28}}, 0x0) 20.36364ms ago: executing program 6 (id=2661): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1", 0x2f}], 0x1}, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 0s ago: executing program 1 (id=2662): r0 = syz_io_uring_setup(0x304, &(0x7f0000000300)={0x0, 0x8006d85, 0x400, 0x2, 0x200118}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x8, 0x0, r3, 0x0, 0x0, 0x0, 0x100}) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000006c0)={0xfffffffffffffff7, r3, 0x2, {0x27fffffffffffff, 0x4}, 0x54}, 0x1) kernel console output (not intermixed with test programs): id=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4382 comm="syz.3.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245d96e969 code=0x7ffc0000 [ 48.819207][ T29] audit: type=1326 audit(1748798573.160:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4382 comm="syz.3.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245d96e969 code=0x7ffc0000 [ 48.910189][ T4389] loop4: detected capacity change from 0 to 1024 [ 48.931396][ T4391] loop2: detected capacity change from 0 to 512 [ 48.946352][ T4393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.408'. [ 48.986007][ T4391] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 49.028391][ T4391] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002] [ 49.060286][ T4391] System zones: 1-12 [ 49.074558][ T4391] EXT4-fs (loop2): orphan cleanup on readonly fs [ 49.081129][ T4391] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.407: Inode bitmap for bg 0 marked uninitialized [ 49.095075][ T3007] udevd[3007]: worker [3312] terminated by signal 33 (Unknown signal 33) [ 49.099427][ T4391] EXT4-fs (loop2): Remounting filesystem read-only [ 49.110996][ T4391] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 49.133906][ T3007] udevd[3007]: worker [3312] failed while handling '/devices/virtual/block/loop4' [ 49.144469][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.166214][ T3007] udevd[3007]: worker [3310] terminated by signal 33 (Unknown signal 33) [ 49.177679][ T3007] udevd[3007]: worker [3310] failed while handling '/devices/virtual/block/loop3' [ 49.206226][ T4406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.413'. [ 49.370896][ T4422] netlink: 96 bytes leftover after parsing attributes in process `syz.4.419'. [ 49.381172][ T4424] loop2: detected capacity change from 0 to 1024 [ 49.400460][ T4422] netlink: 'syz.4.419': attribute type 5 has an invalid length. [ 49.408192][ T4422] netlink: 44 bytes leftover after parsing attributes in process `syz.4.419'. [ 49.411489][ T4424] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 49.428335][ T4424] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 49.468648][ T4424] JBD2: no valid journal superblock found [ 49.474555][ T4424] EXT4-fs (loop2): Could not load journal inode [ 49.533818][ T4424] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºueâÂ…W†¤ÃFct̹3 íL;-níýý’Û9çž;=çBŸ9gî=g&€ÂK”"öDÄå$b¤­¬YáXã¸;¿¿:Ý’¨Õ^ý-‰$Û×<>ɇ³'ÿ=ñý7Iì.¯¬wnáêùéjuöJ–Ÿ˜¿pybnáês¦ÏΞ½.) failed with errno=-22 [ 49.639443][ T3383] Process accounting resumed [ 50.203148][ T4432] Process accounting resumed [ 50.212406][ T4474] loop1: detected capacity change from 0 to 128 [ 50.280319][ T4474] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 50.298974][ T4474] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.451280][ T3318] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.759059][ T4519] loop3: detected capacity change from 0 to 128 [ 50.790637][ T4519] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 50.806645][ T4519] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.949172][ T3329] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.985130][ T4541] loop4: detected capacity change from 0 to 256 [ 51.056410][ T4541] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 51.064367][ T4541] FAT-fs (loop4): Filesystem has been set read-only [ 51.076792][ T4541] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 51.090766][ T4541] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 51.107326][ T4541] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 51.125028][ T4555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.476'. [ 51.255065][ T4565] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 51.267732][ T4567] program syz.2.482 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.392977][ T4582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.488'. [ 51.401890][ T4582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.488'. [ 51.439200][ T4582] Zero length message leads to an empty skb [ 51.473428][ T4587] syzkaller1: entered promiscuous mode [ 51.478965][ T4587] syzkaller1: entered allmulticast mode [ 51.516443][ T4593] netlink: 16 bytes leftover after parsing attributes in process `syz.2.492'. [ 51.606448][ T4603] netlink: 'syz.1.496': attribute type 3 has an invalid length. [ 51.667297][ T4610] loop2: detected capacity change from 0 to 128 [ 51.674615][ T4611] mmap: syz.4.500 (4611) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 51.714688][ T4610] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 51.736386][ T4610] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.797859][ T3319] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.036247][ T4647] netlink: 28 bytes leftover after parsing attributes in process `syz.1.517'. [ 52.045209][ T4647] netlink: 108 bytes leftover after parsing attributes in process `syz.1.517'. [ 52.055883][ T4647] netlink: 28 bytes leftover after parsing attributes in process `syz.1.517'. [ 52.065324][ T4647] netlink: 108 bytes leftover after parsing attributes in process `syz.1.517'. [ 52.074371][ T4647] netlink: 84 bytes leftover after parsing attributes in process `syz.1.517'. [ 52.277970][ T4673] usb usb1: usbfs: process 4673 (syz.2.538) did not claim interface 63 before use [ 52.351455][ T4685] netlink: 28 bytes leftover after parsing attributes in process `syz.2.532'. [ 52.678294][ T4709] usb usb1: usbfs: process 4709 (syz.0.545) did not claim interface 63 before use [ 52.787763][ T4717] batadv1: entered allmulticast mode [ 52.802363][ T4720] program syz.3.549 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.989141][ T4735] netlink: 'syz.0.566': attribute type 3 has an invalid length. [ 53.080156][ T4744] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 53.128950][ T4750] veth0: entered promiscuous mode [ 53.309424][ T29] kauditd_printk_skb: 245 callbacks suppressed [ 53.309457][ T29] audit: type=1400 audit(1748798577.740:730): avc: denied { setopt } for pid=4769 comm="syz.4.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.369445][ T29] audit: type=1400 audit(1748798577.800:731): avc: denied { cpu } for pid=4773 comm="syz.1.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 53.611885][ T4796] netlink: 'syz.4.585': attribute type 21 has an invalid length. [ 53.728268][ T29] audit: type=1400 audit(1748798578.160:732): avc: denied { read } for pid=4810 comm="syz.0.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 53.868512][ T29] audit: type=1400 audit(1748798578.300:733): avc: denied { relabelfrom } for pid=4825 comm="syz.2.599" name="" dev="pipefs" ino=2495 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 53.890827][ T29] audit: type=1400 audit(1748798578.300:734): avc: denied { mac_admin } for pid=4825 comm="syz.2.599" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 53.911803][ T29] audit: type=1400 audit(1748798578.300:735): avc: denied { relabelto } for pid=4825 comm="syz.2.599" name="" dev="pipefs" ino=2495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 53.948687][ T29] audit: type=1326 audit(1748798578.380:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4823 comm="syz.0.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ca08e969 code=0x7fc00000 [ 53.994969][ T29] audit: type=1400 audit(1748798578.430:737): avc: denied { read } for pid=4833 comm="syz.2.602" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 54.019173][ T29] audit: type=1400 audit(1748798578.430:738): avc: denied { open } for pid=4833 comm="syz.2.602" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 54.084967][ T29] audit: type=1400 audit(1748798578.490:739): avc: denied { ioctl } for pid=4833 comm="syz.2.602" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 54.138743][ T4840] IPv6: NLM_F_CREATE should be specified when creating new route [ 54.483312][ T4858] loop3: detected capacity change from 0 to 4096 [ 54.498629][ T4858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.513595][ T4858] EXT4-fs (loop3): shut down requested (1) [ 54.519930][ T4858] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 54.528917][ T4858] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 54.550965][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.573118][ T36] IPVS: starting estimator thread 0... [ 54.659587][ T4870] IPVS: using max 2304 ests per chain, 115200 per kthread [ 54.908559][ T4909] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4909 comm=syz.0.636 [ 55.311851][ T37] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 55.398897][ T4953] loop4: detected capacity change from 0 to 512 [ 55.405827][ T4953] journal_path: Non-blockdev passed as './file0' [ 55.412393][ T4953] EXT4-fs: error: could not find journal device path [ 55.766061][ T4987] SELinux: failed to load policy [ 56.204224][ T5036] __nla_validate_parse: 14 callbacks suppressed [ 56.204243][ T5036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.690'. [ 56.211684][ T5035] sd 0:0:1:0: device reset [ 56.308823][ T5042] sd 0:0:1:0: device reset [ 56.558840][ T5070] SELinux: failed to load policy [ 56.598848][ T5073] pim6reg: entered allmulticast mode [ 56.613515][ T5073] pim6reg: left allmulticast mode [ 56.648439][ T5082] netlink: 87 bytes leftover after parsing attributes in process `+}[@'. [ 56.676209][ T5085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.710'. [ 56.793054][ T1107] hid-generic FFFF:FFFFFFFC:20000001.0002: unknown main item tag 0x0 [ 56.801333][ T1107] hid-generic FFFF:FFFFFFFC:20000001.0002: unknown main item tag 0x0 [ 56.809494][ T1107] hid-generic FFFF:FFFFFFFC:20000001.0002: unknown main item tag 0x0 [ 56.817613][ T1107] hid-generic FFFF:FFFFFFFC:20000001.0002: unknown main item tag 0x0 [ 56.826140][ T1107] hid-generic FFFF:FFFFFFFC:20000001.0002: unknown main item tag 0x0 [ 56.834339][ T1107] hid-generic FFFF:FFFFFFFC:20000001.0002: unknown main item tag 0x0 [ 56.842638][ T1107] hid-generic FFFF:FFFFFFFC:20000001.0002: unknown main item tag 0x0 [ 56.850858][ T1107] hid-generic FFFF:FFFFFFFC:20000001.0002: unknown main item tag 0x0 [ 56.859095][ T1107] hid-generic FFFF:FFFFFFFC:20000001.0002: unknown main item tag 0x0 [ 56.867378][ T1107] hid-generic FFFF:FFFFFFFC:20000001.0002: unknown main item tag 0x0 [ 56.875602][ T1107] hid-generic FFFF:FFFFFFFC:20000001.0002: unknown main item tag 0x0 [ 56.883913][ T1107] hid-generic FFFF:FFFFFFFC:20000001.0002: unknown main item tag 0x0 [ 56.892195][ T1107] hid-generic FFFF:FFFFFFFC:20000001.0002: unknown main item tag 0x0 [ 56.900591][ T1107] hid-generic FFFF:FFFFFFFC:20000001.0002: unknown main item tag 0x0 [ 56.908828][ T1107] hid-generic FFFF:FFFFFFFC:20000001.0002: unknown main item tag 0x0 [ 56.917033][ T1107] hid-generic FFFF:FFFFFFFC:20000001.0002: unknown main item tag 0x0 [ 56.925362][ T1107] hid-generic FFFF:FFFFFFFC:20000001.0002: unknown main item tag 0x0 [ 56.933677][ T1107] hid-generic FFFF:FFFFFFFC:20000001.0002: unknown main item tag 0x0 [ 56.941827][ T1107] hid-generic FFFF:FFFFFFFC:20000001.0002: unknown main item tag 0x0 [ 56.949957][ T1107] hid-generic FFFF:FFFFFFFC:20000001.0002: unknown main item tag 0x0 [ 56.958178][ T1107] hid-generic FFFF:FFFFFFFC:20000001.0002: unknown main item tag 0x0 [ 56.966487][ T1107] hid-generic FFFF:FFFFFFFC:20000001.0002: unknown main item tag 0x0 [ 56.974628][ T1107] hid-generic FFFF:FFFFFFFC:20000001.0002: unknown main item tag 0x0 [ 56.982787][ T1107] hid-generic FFFF:FFFFFFFC:20000001.0002: unknown main item tag 0x0 [ 56.990982][ T1107] hid-generic FFFF:FFFFFFFC:20000001.0002: unknown main item tag 0x0 [ 56.999217][ T1107] hid-generic FFFF:FFFFFFFC:20000001.0002: unknown main item tag 0x0 [ 57.007656][ T1107] hid-generic FFFF:FFFFFFFC:20000001.0002: unknown main item tag 0x0 [ 57.015791][ T1107] hid-generic FFFF:FFFFFFFC:20000001.0002: unknown main item tag 0x0 [ 57.023935][ T1107] hid-generic FFFF:FFFFFFFC:20000001.0002: unknown main item tag 0x0 [ 57.032094][ T1107] hid-generic FFFF:FFFFFFFC:20000001.0002: unknown main item tag 0x0 [ 57.040406][ T1107] hid-generic FFFF:FFFFFFFC:20000001.0002: unknown main item tag 0x0 [ 57.048607][ T1107] hid-generic FFFF:FFFFFFFC:20000001.0002: unknown main item tag 0x0 [ 57.056886][ T1107] hid-generic FFFF:FFFFFFFC:20000001.0002: unknown main item tag 0x0 [ 57.065227][ T1107] hid-generic FFFF:FFFFFFFC:20000001.0002: unknown main item tag 0x0 [ 57.073484][ T1107] hid-generic FFFF:FFFFFFFC:20000001.0002: unknown main item tag 0x0 [ 57.082067][ T1107] hid-generic FFFF:FFFFFFFC:20000001.0002: unknown main item tag 0x0 [ 57.091155][ T1107] hid-generic FFFF:FFFFFFFC:20000001.0002: unknown main item tag 0x0 [ 57.097860][ T5113] loop3: detected capacity change from 0 to 512 [ 57.099442][ T1107] hid-generic FFFF:FFFFFFFC:20000001.0002: unknown main item tag 0x0 [ 57.099473][ T1107] hid-generic FFFF:FFFFFFFC:20000001.0002: unknown main item tag 0x0 [ 57.114072][ T5113] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 57.121986][ T1107] hid-generic FFFF:FFFFFFFC:20000001.0002: unknown main item tag 0x0 [ 57.138416][ T5113] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 57.138976][ T5113] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.727: corrupted in-inode xattr: e_value size too large [ 57.146558][ T1107] hid-generic FFFF:FFFFFFFC:20000001.0002: unknown main item tag 0x0 [ 57.146614][ T1107] hid-generic FFFF:FFFFFFFC:20000001.0002: unknown main item tag 0x0 [ 57.146637][ T1107] hid-generic FFFF:FFFFFFFC:20000001.0002: unknown main item tag 0x0 [ 57.161097][ T5113] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.727: couldn't read orphan inode 15 (err -117) [ 57.169687][ T1107] hid-generic FFFF:FFFFFFFC:20000001.0002: hidraw0: HID va0.69 Device [syz0] on syz1 [ 57.188681][ T5113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.327734][ T5123] loop2: detected capacity change from 0 to 1024 [ 57.344407][ T5123] EXT4-fs: Ignoring removed oldalloc option [ 57.361323][ T5128] loop4: detected capacity change from 0 to 128 [ 57.388498][ T5126] ALSA: seq fatal error: cannot create timer (-19) [ 57.396068][ T5123] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.420417][ T5128] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 57.440052][ T5128] ext4 filesystem being mounted at /125/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 57.478134][ T5128] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 4294967295 (only 1 groups) [ 57.527519][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.549910][ T3323] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 57.623195][ T5136] syzkaller0: entered promiscuous mode [ 57.640874][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.666986][ T5144] tipc: Started in network mode [ 57.671983][ T5144] tipc: Node identity ac14140f, cluster identity 4711 [ 57.684046][ T5144] tipc: New replicast peer: 255.255.255.255 [ 57.690399][ T5144] tipc: Enabled bearer , priority 10 [ 57.854093][ T5159] netlink: 14 bytes leftover after parsing attributes in process `syz.1.744'. [ 58.030103][ T5175] loop2: detected capacity change from 0 to 2048 [ 58.099199][ T5175] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.141532][ T5187] netlink: 24 bytes leftover after parsing attributes in process `syz.0.757'. [ 58.150918][ T5187] netlink: 'syz.0.757': attribute type 1 has an invalid length. [ 58.278959][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.314984][ T29] kauditd_printk_skb: 249 callbacks suppressed [ 58.315000][ T29] audit: type=1326 audit(1748798582.750:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5200 comm="syz.0.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fe3ca08e969 code=0x7ffc0000 [ 58.365556][ T29] audit: type=1326 audit(1748798582.790:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5200 comm="syz.0.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 58.389540][ T29] audit: type=1326 audit(1748798582.790:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5200 comm="syz.0.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ca08e969 code=0x7ffc0000 [ 58.412803][ T29] audit: type=1326 audit(1748798582.790:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5200 comm="syz.0.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ca08e969 code=0x7ffc0000 [ 58.466534][ T5213] loop4: detected capacity change from 0 to 164 [ 58.477876][ T5213] bio_check_eod: 101 callbacks suppressed [ 58.477896][ T5213] syz.4.771: attempt to access beyond end of device [ 58.477896][ T5213] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 58.498908][ T5213] syz.4.771: attempt to access beyond end of device [ 58.498908][ T5213] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 58.512765][ T29] audit: type=1326 audit(1748798582.880:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5205 comm="syz.4.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47af25e969 code=0x7ffc0000 [ 58.536237][ T29] audit: type=1326 audit(1748798582.880:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5205 comm="syz.4.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47af25e969 code=0x7ffc0000 [ 58.559567][ T29] audit: type=1326 audit(1748798582.880:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5205 comm="syz.4.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47af25e969 code=0x7ffc0000 [ 58.582847][ T29] audit: type=1326 audit(1748798582.880:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5205 comm="syz.4.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47af25e969 code=0x7ffc0000 [ 58.606238][ T29] audit: type=1326 audit(1748798582.880:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5205 comm="syz.4.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47af25e969 code=0x7ffc0000 [ 58.629889][ T29] audit: type=1326 audit(1748798582.880:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5205 comm="syz.4.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47af25e969 code=0x7ffc0000 [ 58.699421][ T36] tipc: Node number set to 2886997007 [ 59.168092][ T5270] loop4: detected capacity change from 0 to 512 [ 59.182039][ T5270] EXT4-fs: Ignoring removed nobh option [ 59.206185][ T5270] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 59.230590][ T5270] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.797: attempt to clear invalid blocks 2 len 1 [ 59.248529][ T5270] EXT4-fs (loop4): Remounting filesystem read-only [ 59.256793][ T5270] EXT4-fs (loop4): 1 truncate cleaned up [ 59.262819][ T5270] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.292724][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.362348][ T5288] syz_tun: entered allmulticast mode [ 59.374563][ T5287] syz_tun: left allmulticast mode [ 59.630819][ T5322] syz_tun: entered allmulticast mode [ 59.647268][ T5321] syz_tun: left allmulticast mode [ 59.774854][ T5339] loop2: detected capacity change from 0 to 128 [ 59.791942][ T5339] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 59.843271][ T5339] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.935678][ T3319] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 59.998205][ T5361] loop2: detected capacity change from 0 to 512 [ 60.047400][ T5361] EXT4-fs (loop2): 1 orphan inode deleted [ 60.071518][ T265] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 60.129923][ T5361] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.164674][ T5361] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.217316][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.253497][ T5378] netlink: 'syz.1.844': attribute type 29 has an invalid length. [ 60.279562][ T5378] netlink: 'syz.1.844': attribute type 29 has an invalid length. [ 60.292090][ T5378] netlink: 500 bytes leftover after parsing attributes in process `syz.1.844'. [ 60.457128][ T5407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.857'. [ 60.563990][ T5417] netlink: 'syz.3.862': attribute type 29 has an invalid length. [ 60.583212][ T5417] netlink: 'syz.3.862': attribute type 29 has an invalid length. [ 60.593325][ T5417] netlink: 500 bytes leftover after parsing attributes in process `syz.3.862'. [ 60.802971][ T5450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.874'. [ 60.900139][ T5455] netlink: 'syz.0.876': attribute type 29 has an invalid length. [ 60.912847][ T5455] netlink: 'syz.0.876': attribute type 29 has an invalid length. [ 60.938309][ T5455] netlink: 500 bytes leftover after parsing attributes in process `syz.0.876'. [ 61.676301][ T5574] loop2: detected capacity change from 0 to 512 [ 61.733456][ T5574] EXT4-fs (loop2): 1 orphan inode deleted [ 61.739670][ T5574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.752577][ T1452] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 61.765497][ T5574] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.822284][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.967990][ T5611] hub 9-0:1.0: USB hub found [ 61.977973][ T5611] hub 9-0:1.0: 8 ports detected [ 62.081435][ T5620] __nla_validate_parse: 1 callbacks suppressed [ 62.081518][ T5620] netlink: 20 bytes leftover after parsing attributes in process `syz.3.949'. [ 62.129720][ T5623] loop4: detected capacity change from 0 to 512 [ 62.142632][ T5623] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.950: Parent and EA inode have the same ino 15 [ 62.162074][ T5623] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.950: Parent and EA inode have the same ino 15 [ 62.180193][ T5623] EXT4-fs (loop4): 1 orphan inode deleted [ 62.187523][ T5623] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.230969][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.290767][ T5637] netlink: 96 bytes leftover after parsing attributes in process `syz.2.966'. [ 62.304889][ T5637] netlink: 'syz.2.966': attribute type 5 has an invalid length. [ 62.312773][ T5637] netlink: 44 bytes leftover after parsing attributes in process `syz.2.966'. [ 62.420360][ T5647] hub 9-0:1.0: USB hub found [ 62.429444][ T5647] hub 9-0:1.0: 8 ports detected [ 62.511608][ T5656] netlink: 20 bytes leftover after parsing attributes in process `syz.1.963'. [ 62.624899][ T5670] loop3: detected capacity change from 0 to 512 [ 62.664885][ T5670] EXT4-fs (loop3): 1 orphan inode deleted [ 62.681101][ T51] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 62.711743][ T5670] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.732981][ T5681] loop4: detected capacity change from 0 to 1024 [ 62.747655][ T5681] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 62.758911][ T5681] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 62.769987][ T5670] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.770046][ T5681] JBD2: no valid journal superblock found [ 62.786263][ T5681] EXT4-fs (loop4): Could not load journal inode [ 62.835837][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.836265][ T5681] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºueâÂ…W†¤ÃFct̹3 íL;-níýý’Û9çž;=çBŸ9gî=g&€ÂK”"öDÄå$b¤­¬YáXã¸;¿¿:Ý’¨Õ^ý-‰$Û×<>ɇ³'ÿ=ñý7Iì.¯¬wnáêùéjuöJ–Ÿ˜¿pybnáês¦ÏΞ½.) failed with errno=-22 [ 63.096818][ T5713] SELinux: failed to load policy [ 63.244406][ T5723] loop3: detected capacity change from 0 to 1024 [ 63.274660][ T5723] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 63.286177][ T5723] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 63.300969][ T10] Process accounting resumed [ 63.301351][ T5723] JBD2: no valid journal superblock found [ 63.311920][ T5723] EXT4-fs (loop3): Could not load journal inode [ 63.330910][ T5723] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºueâÂ…W†¤ÃFct̹3 íL;-níýý’Û9çž;=çBŸ9gî=g&€ÂK”"öDÄå$b¤­¬YáXã¸;¿¿:Ý’¨Õ^ý-‰$Û×<>ɇ³'ÿ=ñý7Iì.¯¬wnáêùéjuöJ–Ÿ˜¿pybnáês¦ÏΞ½.) failed with errno=-22 [ 63.525943][ T29] kauditd_printk_skb: 279 callbacks suppressed [ 63.525961][ T29] audit: type=1400 audit(1748798587.960:1275): avc: denied { audit_write } for pid=5739 comm="syz.0.1000" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 63.575531][ T5724] Process accounting resumed [ 63.583781][ T29] audit: type=1107 audit(1748798587.960:1276): pid=5739 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 63.590849][ T5741] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1001'. [ 63.638046][ T5744] SELinux: failed to load policy [ 63.659413][ T29] audit: type=1400 audit(1748798588.080:1277): avc: denied { ioctl } for pid=5749 comm="syz.3.1006" path="socket:[11442]" dev="sockfs" ino=11442 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.675259][ T5752] loop3: detected capacity change from 0 to 1024 [ 63.711384][ T5752] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.739572][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.742140][ T5759] loop4: detected capacity change from 0 to 128 [ 63.863420][ T5772] SELinux: syz.0.1016 (5772) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 63.877490][ T5774] loop3: detected capacity change from 0 to 512 [ 63.898892][ T5774] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.1017: Parent and EA inode have the same ino 15 [ 63.918610][ T5777] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1018'. [ 63.952741][ T265] kworker/u8:5: attempt to access beyond end of device [ 63.952741][ T265] loop4: rw=1, sector=145, nr_sectors = 16 limit=128 [ 63.953046][ T5774] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.1017: Parent and EA inode have the same ino 15 [ 63.978770][ T265] kworker/u8:5: attempt to access beyond end of device [ 63.978770][ T265] loop4: rw=1, sector=169, nr_sectors = 8 limit=128 [ 63.992435][ T5774] EXT4-fs (loop3): 1 orphan inode deleted [ 63.998845][ T5774] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.012468][ T265] kworker/u8:5: attempt to access beyond end of device [ 64.012468][ T265] loop4: rw=1, sector=185, nr_sectors = 8 limit=128 [ 64.026459][ T265] kworker/u8:5: attempt to access beyond end of device [ 64.026459][ T265] loop4: rw=1, sector=201, nr_sectors = 8 limit=128 [ 64.042484][ T265] kworker/u8:5: attempt to access beyond end of device [ 64.042484][ T265] loop4: rw=1, sector=217, nr_sectors = 8 limit=128 [ 64.056327][ T265] kworker/u8:5: attempt to access beyond end of device [ 64.056327][ T265] loop4: rw=1, sector=233, nr_sectors = 8 limit=128 [ 64.072350][ T265] kworker/u8:5: attempt to access beyond end of device [ 64.072350][ T265] loop4: rw=1, sector=249, nr_sectors = 8 limit=128 [ 64.100100][ T265] kworker/u8:5: attempt to access beyond end of device [ 64.100100][ T265] loop4: rw=1, sector=265, nr_sectors = 8 limit=128 [ 64.113757][ T265] kworker/u8:5: attempt to access beyond end of device [ 64.113757][ T265] loop4: rw=1, sector=281, nr_sectors = 8 limit=128 [ 64.128126][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.136489][ T265] kworker/u8:5: attempt to access beyond end of device [ 64.136489][ T265] loop4: rw=1, sector=297, nr_sectors = 8 limit=128 [ 64.445860][ T5817] loop3: detected capacity change from 0 to 512 [ 64.475589][ T5817] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.521128][ T5817] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.547621][ T29] audit: type=1400 audit(1748798588.980:1278): avc: denied { create } for pid=5827 comm="syz.2.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 64.567369][ T29] audit: type=1400 audit(1748798588.980:1279): avc: denied { bind } for pid=5827 comm="syz.2.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 64.588732][ T5817] ext4 filesystem being mounted at /204/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.616528][ T29] audit: type=1400 audit(1748798589.050:1280): avc: denied { map } for pid=5816 comm="syz.3.1035" path="/204/bus/cpu.stat" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 64.640005][ T29] audit: type=1400 audit(1748798589.050:1281): avc: denied { remove_name } for pid=5816 comm="syz.3.1035" name=08 dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.662373][ T29] audit: type=1400 audit(1748798589.050:1282): avc: denied { unlink } for pid=5816 comm="syz.3.1035" name=08 dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 64.688137][ T5842] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 64.702351][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.738713][ T5849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1047'. [ 64.775023][ T5849] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.787072][ T5860] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1049'. [ 64.810786][ T5849] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.818043][ T5849] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 64.832192][ T5849] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 64.865823][ T5844] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1049'. [ 64.910457][ T29] audit: type=1400 audit(1748798589.340:1283): avc: denied { append } for pid=5863 comm="syz.0.1065" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 64.968098][ T5868] loop2: detected capacity change from 0 to 512 [ 65.068983][ T5879] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 65.263524][ T5902] loop3: detected capacity change from 0 to 512 [ 65.530611][ T5924] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 65.530611][ T5924] program syz.3.1083 not setting count and/or reply_len properly [ 65.687297][ T5945] bond2: entered promiscuous mode [ 65.692503][ T5945] bond2: entered allmulticast mode [ 65.698021][ T29] audit: type=1400 audit(1748798590.120:1284): avc: denied { accept } for pid=5925 comm="syz.0.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 65.709232][ T5945] 8021q: adding VLAN 0 to HW filter on device bond2 [ 65.730267][ T5945] bond2 (unregistering): Released all slaves [ 65.741821][ T5943] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1095'. [ 65.772736][ T5951] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 65.772736][ T5951] program syz.2.1098 not setting count and/or reply_len properly [ 65.953153][ T5962] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.980621][ T5962] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.998014][ T5962] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 66.010927][ T5962] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 66.107184][ T5982] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 66.107184][ T5982] program syz.4.1109 not setting count and/or reply_len properly [ 66.115935][ T5980] bridge_slave_1: left allmulticast mode [ 66.129955][ T5980] bridge_slave_1: left promiscuous mode [ 66.135735][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.161422][ T5980] bridge_slave_0: left allmulticast mode [ 66.162354][ T5986] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 66.162354][ T5986] program syz.1.1123 not setting count and/or reply_len properly [ 66.167108][ T5980] bridge_slave_0: left promiscuous mode [ 66.167283][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.419629][ T6007] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 66.479747][ T6018] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 66.479747][ T6018] program syz.0.1129 not setting count and/or reply_len properly [ 66.570266][ T6031] bridge_slave_1: left allmulticast mode [ 66.576127][ T6031] bridge_slave_1: left promiscuous mode [ 66.581966][ T6031] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.611143][ T6031] bridge_slave_0: left allmulticast mode [ 66.616856][ T6031] bridge_slave_0: left promiscuous mode [ 66.622589][ T6031] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.728182][ T6044] serio: Serial port ptm0 [ 66.753804][ T6049] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 66.753804][ T6049] program syz.4.1143 not setting count and/or reply_len properly [ 66.976254][ T6073] bridge_slave_1: left allmulticast mode [ 66.982168][ T6073] bridge_slave_1: left promiscuous mode [ 66.987891][ T6073] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.999733][ T6073] bridge_slave_0: left allmulticast mode [ 67.005528][ T6073] bridge_slave_0: left promiscuous mode [ 67.011544][ T6073] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.087715][ T6083] openvswitch: netlink: Message has 6 unknown bytes. [ 67.126687][ T6088] serio: Serial port ptm0 [ 67.153370][ T6093] __nla_validate_parse: 6 callbacks suppressed [ 67.153390][ T6093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1160'. [ 67.197496][ T6093] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.216800][ T6093] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.224222][ T6093] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 67.235896][ T6093] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 67.340615][ T6117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1181'. [ 67.363414][ T6117] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.379349][ T6117] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.387539][ T6117] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 67.399508][ T6117] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 67.465709][ T6126] loop4: detected capacity change from 0 to 1024 [ 67.485007][ T6126] EXT4-fs (loop4): can't mount with both data=journal and delalloc [ 68.186488][ T6133] serio: Serial port ptm0 [ 68.209597][ T6136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1173'. [ 68.231039][ T6136] bridge_slave_1: left allmulticast mode [ 68.236835][ T6136] bridge_slave_1: left promiscuous mode [ 68.242842][ T6136] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.263072][ T6136] bridge_slave_0: left allmulticast mode [ 68.268870][ T6136] bridge_slave_0: left promiscuous mode [ 68.274895][ T6136] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.493637][ T6174] serio: Serial port ptm0 [ 68.631143][ T6184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1210'. [ 68.759048][ T6205] veth1_to_bond: entered allmulticast mode [ 68.766262][ T6205] veth1_to_bond: left allmulticast mode [ 68.801719][ T6207] loop3: detected capacity change from 0 to 1024 [ 68.821701][ T6207] __quota_error: 68 callbacks suppressed [ 68.821716][ T6207] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 68.836902][ T6207] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 68.846526][ T6207] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1208: Failed to acquire dquot type 0 [ 68.859081][ T6207] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 68.876100][ T6207] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #13: comm syz.3.1208: corrupted inode contents [ 68.888878][ T6207] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #13: comm syz.3.1208: mark_inode_dirty error [ 68.903109][ T6207] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #13: comm syz.3.1208: corrupted inode contents [ 68.939830][ T6207] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.1208: mark_inode_dirty error [ 68.956554][ T6207] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #13: comm syz.3.1208: corrupted inode contents [ 68.969054][ T6207] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 68.980866][ T6207] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #13: comm syz.3.1208: corrupted inode contents [ 68.993669][ T6207] EXT4-fs error (device loop3): ext4_truncate:4597: inode #13: comm syz.3.1208: mark_inode_dirty error [ 69.006334][ T6207] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 69.017421][ T6207] EXT4-fs (loop3): 1 truncate cleaned up [ 69.024133][ T6207] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.037079][ T29] audit: type=1400 audit(1748798593.470:1353): avc: denied { mount } for pid=6206 comm="syz.3.1208" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 69.062135][ T29] audit: type=1326 audit(1748798593.500:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6216 comm="syz.2.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b116e969 code=0x7fc00000 [ 69.088544][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.095221][ T29] audit: type=1400 audit(1748798593.500:1355): avc: denied { unmount } for pid=3329 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 69.118705][ T29] audit: type=1400 audit(1748798593.540:1356): avc: denied { create } for pid=6223 comm="syz.0.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.138921][ T29] audit: type=1400 audit(1748798593.540:1357): avc: denied { bind } for pid=6223 comm="syz.0.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.200478][ T29] audit: type=1400 audit(1748798593.620:1358): avc: denied { read } for pid=6223 comm="syz.0.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.251388][ T29] audit: type=1400 audit(1748798593.690:1359): avc: denied { read } for pid=6229 comm="syz.4.1218" name="mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 69.293461][ T29] audit: type=1400 audit(1748798593.690:1360): avc: denied { open } for pid=6229 comm="syz.4.1218" path="/dev/mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 69.926668][ T6262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1229'. [ 70.055336][ T6272] loop3: detected capacity change from 0 to 128 [ 70.165769][ T6257] bio_check_eod: 101 callbacks suppressed [ 70.165852][ T6257] syz.3.1228: attempt to access beyond end of device [ 70.165852][ T6257] loop3: rw=2049, sector=129, nr_sectors = 1 limit=128 [ 70.185142][ T6257] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 70.206503][ T6257] syz.3.1228: attempt to access beyond end of device [ 70.206503][ T6257] loop3: rw=2049, sector=130, nr_sectors = 1 limit=128 [ 70.220197][ T6257] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 70.230324][ T6257] syz.3.1228: attempt to access beyond end of device [ 70.230324][ T6257] loop3: rw=2049, sector=131, nr_sectors = 1 limit=128 [ 70.243962][ T6257] Buffer I/O error on dev loop3, logical block 131, lost async page write [ 70.274182][ T6257] syz.3.1228: attempt to access beyond end of device [ 70.274182][ T6257] loop3: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 70.287754][ T6257] Buffer I/O error on dev loop3, logical block 132, lost async page write [ 70.302932][ T6257] syz.3.1228: attempt to access beyond end of device [ 70.302932][ T6257] loop3: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 70.316513][ T6257] Buffer I/O error on dev loop3, logical block 133, lost async page write [ 70.378712][ T6291] loop2: detected capacity change from 0 to 1024 [ 70.406394][ T6291] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.514371][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.625571][ T6310] vhci_hcd: invalid port number 96 [ 70.630822][ T6310] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 70.655919][ T6314] loop4: detected capacity change from 0 to 512 [ 70.700783][ T6314] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.713879][ T6314] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.727779][ T6314] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 70.752240][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.825878][ T6333] loop3: detected capacity change from 0 to 1024 [ 70.857290][ T6333] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.943886][ T6348] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1276'. [ 71.052335][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.102022][ T6353] vhci_hcd: invalid port number 96 [ 71.107246][ T6353] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 71.344724][ T6385] loop4: detected capacity change from 0 to 1024 [ 71.373937][ T6385] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.391400][ T6391] loop2: detected capacity change from 0 to 512 [ 71.398450][ T6391] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 71.415390][ T6391] EXT4-fs: error: could not find journal device path [ 71.445185][ T6389] vhci_hcd: invalid port number 96 [ 71.450493][ T6389] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 71.465675][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.660742][ T6408] loop2: detected capacity change from 0 to 1024 [ 71.678227][ T6408] EXT4-fs: Ignoring removed mblk_io_submit option [ 71.688094][ T6408] EXT4-fs: Ignoring removed nobh option [ 71.693865][ T6408] EXT4-fs: Ignoring removed bh option [ 71.711098][ T6408] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.749972][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.797747][ T6426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1295'. [ 71.806816][ T6426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1295'. [ 71.893448][ T6432] vhci_hcd: invalid port number 96 [ 71.898709][ T6432] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 71.999854][ T6450] loop4: detected capacity change from 0 to 164 [ 72.032677][ T6450] syz.4.1310: attempt to access beyond end of device [ 72.032677][ T6450] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 72.055411][ T6450] syz.4.1310: attempt to access beyond end of device [ 72.055411][ T6450] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 72.300691][ T6487] loop3: detected capacity change from 0 to 1024 [ 72.307716][ T6487] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.316281][ T6487] EXT4-fs: Ignoring removed nobh option [ 72.321982][ T6487] EXT4-fs: Ignoring removed bh option [ 72.341123][ T6487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.377257][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.412026][ T6503] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1335'. [ 73.363275][ T6545] loop3: detected capacity change from 0 to 164 [ 73.372263][ T6547] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1350'. [ 73.372805][ T6545] syz.3.1349: attempt to access beyond end of device [ 73.372805][ T6545] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 73.397335][ T6545] syz.3.1349: attempt to access beyond end of device [ 73.397335][ T6545] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 73.761822][ T6566] netlink: 'syz.1.1361': attribute type 3 has an invalid length. [ 74.302928][ T6582] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1366'. [ 74.357114][ T6586] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 74.371024][ T6586] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 74.547444][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 74.547463][ T29] audit: type=1400 audit(1748798598.980:1457): avc: denied { ioctl } for pid=6597 comm="syz.0.1375" path="socket:[14728]" dev="sockfs" ino=14728 ioctlcmd=0x48e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.627414][ T29] audit: type=1400 audit(1748798599.050:1458): avc: denied { name_connect } for pid=6602 comm="syz.0.1379" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 75.395067][ T6625] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1386'. [ 75.433571][ T6635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1390'. [ 75.443983][ T6635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1390'. [ 75.476089][ T6637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1391'. [ 75.486056][ T6637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1391'. [ 75.506085][ T6635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1390'. [ 75.517176][ T6635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1390'. [ 75.672877][ T29] audit: type=1400 audit(1748798600.110:1459): avc: denied { mount } for pid=6657 comm="syz.4.1402" name="/" dev="configfs" ino=1964 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 75.720081][ T29] audit: type=1400 audit(1748798600.140:1460): avc: denied { search } for pid=6657 comm="syz.4.1402" name="/" dev="configfs" ino=1964 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 75.742865][ T29] audit: type=1400 audit(1748798600.140:1461): avc: denied { search } for pid=6657 comm="syz.4.1402" name="/" dev="configfs" ino=1964 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 75.765780][ T29] audit: type=1400 audit(1748798600.140:1462): avc: denied { read open } for pid=6657 comm="syz.4.1402" path="/" dev="configfs" ino=1964 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 75.788431][ T29] audit: type=1400 audit(1748798600.140:1463): avc: denied { create } for pid=6659 comm="syz.2.1404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 75.808237][ T29] audit: type=1400 audit(1748798600.140:1464): avc: denied { connect } for pid=6659 comm="syz.2.1404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 76.118562][ T29] audit: type=1326 audit(1748798600.510:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6686 comm="syz.3.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245d96e969 code=0x7ffc0000 [ 76.142657][ T29] audit: type=1326 audit(1748798600.510:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6686 comm="syz.3.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245d96e969 code=0x7ffc0000 [ 76.388090][ T6707] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 76.956110][ T6750] lo speed is unknown, defaulting to 1000 [ 76.991428][ T6750] lo speed is unknown, defaulting to 1000 [ 77.012180][ T6750] lo speed is unknown, defaulting to 1000 [ 77.024173][ T6750] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 77.033861][ T6750] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 77.094384][ T6750] lo speed is unknown, defaulting to 1000 [ 77.114153][ T6750] lo speed is unknown, defaulting to 1000 [ 77.139720][ T6750] lo speed is unknown, defaulting to 1000 [ 77.146458][ T6750] lo speed is unknown, defaulting to 1000 [ 77.188572][ T6750] lo speed is unknown, defaulting to 1000 [ 77.726260][ T6802] siw: device registration error -23 [ 78.006016][ T6828] __nla_validate_parse: 11 callbacks suppressed [ 78.006033][ T6828] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1479'. [ 78.265613][ T6861] hub 9-0:1.0: USB hub found [ 78.279529][ T6861] hub 9-0:1.0: 8 ports detected [ 78.323463][ T6865] siw: device registration error -23 [ 78.592682][ T6885] vlan0: entered allmulticast mode [ 78.597984][ T6885] bridge_slave_0: entered allmulticast mode [ 78.773097][ T6909] loop3: detected capacity change from 0 to 256 [ 78.822491][ T6909] syz.3.1516: attempt to access beyond end of device [ 78.822491][ T6909] loop3: rw=2049, sector=288, nr_sectors = 4 limit=256 [ 79.028753][ T6935] vlan0: entered allmulticast mode [ 79.033974][ T6935] bridge_slave_0: entered allmulticast mode [ 79.199752][ T6933] loop3: detected capacity change from 0 to 8192 [ 79.259509][ T6951] veth1_to_bond: entered promiscuous mode [ 79.278958][ T6949] veth1_to_bond: left promiscuous mode [ 79.503926][ T6977] loop3: detected capacity change from 0 to 512 [ 79.562927][ T6977] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.578724][ T6984] veth1_to_bond: entered promiscuous mode [ 79.585575][ T6983] veth1_to_bond: left promiscuous mode [ 79.592020][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 79.592033][ T6977] ext4 filesystem being mounted at /303/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.592087][ T29] audit: type=1400 audit(1748798604.030:1635): avc: denied { mount } for pid=6976 comm="syz.3.1549" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 79.654889][ T29] audit: type=1400 audit(1748798604.080:1636): avc: denied { add_name } for pid=6976 comm="syz.3.1549" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.675928][ T29] audit: type=1400 audit(1748798604.080:1637): avc: denied { create } for pid=6976 comm="syz.3.1549" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 79.696520][ T29] audit: type=1400 audit(1748798604.080:1638): avc: denied { read write } for pid=6976 comm="syz.3.1549" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.719491][ T29] audit: type=1400 audit(1748798604.080:1639): avc: denied { open } for pid=6976 comm="syz.3.1549" path="/303/bus/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.766416][ T29] audit: type=1400 audit(1748798604.110:1640): avc: denied { append } for pid=6976 comm="syz.3.1549" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.789040][ T29] audit: type=1400 audit(1748798604.200:1641): avc: denied { unmount } for pid=3329 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 79.813392][ T6993] loop2: detected capacity change from 0 to 256 [ 79.829796][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.865270][ T6993] syz.2.1554: attempt to access beyond end of device [ 79.865270][ T6993] loop2: rw=2049, sector=288, nr_sectors = 4 limit=256 [ 79.938133][ T29] audit: type=1400 audit(1748798604.370:1642): avc: denied { read } for pid=7005 comm="syz.2.1559" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 79.961569][ T29] audit: type=1400 audit(1748798604.370:1643): avc: denied { open } for pid=7005 comm="syz.2.1559" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 80.283254][ T29] audit: type=1326 audit(1748798604.720:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7012 comm="syz.4.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47af25e969 code=0x7ffc0000 [ 80.355815][ T7019] veth1_to_bond: entered promiscuous mode [ 80.364904][ T7017] veth1_to_bond: left promiscuous mode [ 80.796951][ T7051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1581'. [ 80.909720][ T7057] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1587'. [ 81.006363][ T7081] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1595'. [ 81.196050][ T7103] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1606'. [ 81.211336][ T7100] block device autoloading is deprecated and will be removed. [ 81.226131][ T7106] loop2: detected capacity change from 0 to 1024 [ 81.233257][ T7106] EXT4-fs: Ignoring removed nobh option [ 81.238916][ T7106] EXT4-fs: Ignoring removed bh option [ 81.244357][ T7106] EXT4-fs: Ignoring removed bh option [ 81.281924][ T7106] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.328658][ T7106] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.1607: Allocating blocks 497-513 which overlap fs metadata [ 81.376957][ T7106] EXT4-fs (loop2): pa ffff888100662540: logic 256, phys. 385, len 8 [ 81.385141][ T7106] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 81.421653][ T7105] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 81.454078][ T7123] loop0: detected capacity change from 0 to 512 [ 81.462714][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.473027][ T7123] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 81.490451][ T7123] EXT4-fs (loop0): 1 truncate cleaned up [ 81.496728][ T7123] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.584812][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.605100][ T7131] smc: net device bond0 applied user defined pnetid SYZ2 [ 81.614252][ T7131] smc: net device bond0 erased user defined pnetid SYZ2 [ 81.670018][ T7140] loop2: detected capacity change from 0 to 512 [ 81.677399][ T7141] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1618'. [ 81.687880][ T7140] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 81.705206][ T7140] EXT4-fs (loop2): 1 truncate cleaned up [ 81.719671][ T7140] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.919462][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.131044][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1626'. [ 82.170180][ T7159] loop0: detected capacity change from 0 to 8192 [ 82.760717][ T7187] loop3: detected capacity change from 0 to 512 [ 82.767828][ T7187] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 82.779402][ T7187] EXT4-fs (loop3): 1 truncate cleaned up [ 82.785470][ T7187] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.856817][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.005670][ T7203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1639'. [ 83.257582][ T7219] loop3: detected capacity change from 0 to 512 [ 83.287692][ T7219] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.302880][ T7219] ext4 filesystem being mounted at /323/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.329776][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.372194][ T7235] vlan0: entered allmulticast mode [ 83.377388][ T7235] bridge_slave_0: entered allmulticast mode [ 84.202484][ T7289] syz.4.1665 (7289) used greatest stack depth: 9384 bytes left [ 84.467185][ T7327] vlan0: entered allmulticast mode [ 84.473016][ T7327] bridge_slave_0: entered allmulticast mode [ 84.787573][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 84.787591][ T29] audit: type=1400 audit(1748798609.220:1725): avc: denied { create } for pid=7397 comm="syz.4.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.839616][ T29] audit: type=1400 audit(1748798609.260:1726): avc: denied { write } for pid=7397 comm="syz.4.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.859103][ T29] audit: type=1400 audit(1748798609.260:1727): avc: denied { read } for pid=7397 comm="syz.4.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.935148][ T7419] vlan0: entered allmulticast mode [ 84.940470][ T7419] bridge_slave_0: entered allmulticast mode [ 85.038277][ T29] audit: type=1400 audit(1748798609.470:1728): avc: denied { tracepoint } for pid=7430 comm="syz.3.1706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 85.060605][ T7433] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 85.068382][ T29] audit: type=1400 audit(1748798609.500:1729): avc: denied { create } for pid=7430 comm="syz.3.1706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 85.087969][ T29] audit: type=1400 audit(1748798609.500:1730): avc: denied { setopt } for pid=7430 comm="syz.3.1706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 85.107662][ T29] audit: type=1400 audit(1748798609.500:1731): avc: denied { connect } for pid=7430 comm="syz.3.1706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 85.183908][ T7441] lo speed is unknown, defaulting to 1000 [ 85.331496][ T29] audit: type=1326 audit(1748798609.770:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7492 comm="syz.4.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47af25e969 code=0x7ffc0000 [ 85.396640][ T29] audit: type=1326 audit(1748798609.790:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7492 comm="syz.4.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f47af25e969 code=0x7ffc0000 [ 85.421309][ T29] audit: type=1326 audit(1748798609.790:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7492 comm="syz.4.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47af25e969 code=0x7ffc0000 [ 85.726057][ T7563] lo speed is unknown, defaulting to 1000 [ 85.905580][ T7629] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1751'. [ 86.138965][ T7650] lo speed is unknown, defaulting to 1000 [ 86.238993][ T7691] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 86.315012][ T7696] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1764'. [ 86.834626][ T7754] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1787'. [ 87.650196][ T7785] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1801'. [ 87.683388][ T7796] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1803'. [ 87.938186][ T7831] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1820'. [ 88.006690][ T7842] pimreg: entered allmulticast mode [ 88.013193][ T7842] pimreg: left allmulticast mode [ 88.242927][ T7872] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 88.357999][ T7891] netem: change failed [ 88.493059][ T7916] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 88.498951][ T7916] syzkaller1: Linktype set failed because interface is up [ 88.651820][ T7933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 88.949773][ T3395] IPVS: starting estimator thread 0... [ 88.955599][ T7959] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 89.039447][ T7967] IPVS: using max 1968 ests per chain, 98400 per kthread [ 89.235587][ T7994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1888'. [ 89.361831][ T8001] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 89.368836][ T36] IPVS: starting estimator thread 0... [ 89.457052][ T8013] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 89.463098][ T8013] syzkaller1: Linktype set failed because interface is up [ 89.470503][ T8005] IPVS: using max 2256 ests per chain, 112800 per kthread [ 89.521949][ T8022] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 89.571303][ T8026] netem: change failed [ 89.743661][ T3395] IPVS: starting estimator thread 0... [ 89.749603][ T8041] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 89.827286][ T29] kauditd_printk_skb: 193 callbacks suppressed [ 89.827322][ T29] audit: type=1400 audit(1748798614.260:1928): avc: denied { compute_member } for pid=8047 comm="syz.3.1910" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 89.862023][ T8043] IPVS: using max 2256 ests per chain, 112800 per kthread [ 89.890559][ T8050] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 89.896444][ T8050] syzkaller1: Linktype set failed because interface is up [ 89.917093][ T1107] syzkaller1: tun_net_xmit 90 [ 90.068709][ T8078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1922'. [ 90.078709][ T29] audit: type=1400 audit(1748798614.510:1929): avc: denied { relabelfrom } for pid=8076 comm="syz.3.1921" name="" dev="pipefs" ino=18660 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 90.089732][ T8078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1922'. [ 90.320047][ T29] audit: type=1326 audit(1748798614.750:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8096 comm="syz.1.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7bafe969 code=0x7ffc0000 [ 90.343679][ T29] audit: type=1326 audit(1748798614.750:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8096 comm="syz.1.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fee7bafe969 code=0x7ffc0000 [ 90.367654][ T29] audit: type=1326 audit(1748798614.750:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8096 comm="syz.1.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7bafe969 code=0x7ffc0000 [ 90.421000][ T8105] pimreg: entered allmulticast mode [ 90.428770][ T8105] pimreg: left allmulticast mode [ 90.465785][ T29] audit: type=1326 audit(1748798614.900:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8112 comm="syz.2.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b116e969 code=0x7ffc0000 [ 90.489581][ T29] audit: type=1326 audit(1748798614.900:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8112 comm="syz.2.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b116e969 code=0x7ffc0000 [ 90.572883][ T29] audit: type=1326 audit(1748798614.900:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8112 comm="syz.2.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41b116e969 code=0x7ffc0000 [ 90.596700][ T29] audit: type=1326 audit(1748798614.900:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8112 comm="syz.2.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b116e969 code=0x7ffc0000 [ 90.620358][ T29] audit: type=1326 audit(1748798614.900:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8112 comm="syz.2.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b116e969 code=0x7ffc0000 [ 90.860085][ T8135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1946'. [ 91.189306][ T8156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1955'. [ 91.216087][ T8156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1955'. [ 91.790806][ T8205] loop4: detected capacity change from 0 to 512 [ 91.831603][ T8205] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.851233][ T8205] ext4 filesystem being mounted at /364/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.929869][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.214441][ T8227] netlink: 'syz.3.1982': attribute type 10 has an invalid length. [ 92.222375][ T8227] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1982'. [ 92.271221][ T8227] team0: Port device geneve1 added [ 92.713100][ T8254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1990'. [ 92.728529][ T8254] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.737455][ T8254] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.746322][ T8254] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.755109][ T8254] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.782758][ T8254] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.791877][ T8254] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.801046][ T8254] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.810071][ T8254] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.100490][ T8291] loop3: detected capacity change from 0 to 128 [ 93.420200][ T8325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2010'. [ 93.454318][ T8325] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.463263][ T8325] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.472235][ T8325] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.481077][ T8325] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.543341][ T8325] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.552409][ T8325] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.561331][ T8325] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.570292][ T8325] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.774411][ T8398] loop3: detected capacity change from 0 to 512 [ 93.811585][ T8398] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.831994][ T8398] ext4 filesystem being mounted at /410/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.925791][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.296460][ T8415] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2031'. [ 94.736406][ T8436] loop4: detected capacity change from 0 to 164 [ 94.792500][ T8436] syz.4.2030: attempt to access beyond end of device [ 94.792500][ T8436] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 94.816585][ T8436] syz.4.2030: attempt to access beyond end of device [ 94.816585][ T8436] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 94.859921][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 94.859939][ T29] audit: type=1326 audit(1748798619.300:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8440 comm="syz.3.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245d96e969 code=0x7ffc0000 [ 94.889549][ T29] audit: type=1326 audit(1748798619.300:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8440 comm="syz.3.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245d96e969 code=0x7ffc0000 [ 94.913356][ T29] audit: type=1326 audit(1748798619.300:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8440 comm="syz.3.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f245d96e969 code=0x7ffc0000 [ 94.936865][ T29] audit: type=1326 audit(1748798619.300:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8440 comm="syz.3.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245d96e969 code=0x7ffc0000 [ 94.960733][ T29] audit: type=1326 audit(1748798619.300:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8440 comm="syz.3.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245d96e969 code=0x7ffc0000 [ 94.996004][ T29] audit: type=1400 audit(1748798619.300:1984): avc: denied { unmount } for pid=3323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 95.072586][ T8449] netlink: 'syz.2.2036': attribute type 3 has an invalid length. [ 95.082912][ T8455] loop4: detected capacity change from 0 to 128 [ 95.299624][ T29] audit: type=1326 audit(1748798619.720:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8468 comm="syz.2.2043" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f41b116e969 code=0x0 [ 95.323404][ T8473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2042'. [ 95.352382][ T8473] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.361199][ T8473] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.370054][ T8473] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.378795][ T8473] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.402677][ T29] audit: type=1326 audit(1748798619.840:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8480 comm="syz.1.2045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7bafe969 code=0x7ffc0000 [ 95.426493][ T29] audit: type=1326 audit(1748798619.840:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8480 comm="syz.1.2045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7bafe969 code=0x7ffc0000 [ 95.450564][ T8473] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.459746][ T8473] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.468716][ T8473] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.477647][ T8473] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.546341][ T29] audit: type=1326 audit(1748798619.920:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8480 comm="syz.1.2045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee7bafe969 code=0x7ffc0000 [ 95.713438][ T8492] loop0: detected capacity change from 0 to 1024 [ 95.738534][ T8492] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.753338][ T8492] ext4 filesystem being mounted at /382/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.794468][ T8492] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #15: block 1: comm syz.0.2050: lblock 1 mapped to illegal pblock 1 (length 3) [ 95.810438][ T8492] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 95.823043][ T8492] EXT4-fs (loop0): This should not happen!! Data will be lost [ 95.823043][ T8492] [ 95.871837][ T8348] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #15: block 4: comm kworker/u8:19: lblock 4 mapped to illegal pblock 4 (length 5) [ 95.887070][ T8348] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 5 with error 117 [ 95.899616][ T8348] EXT4-fs (loop0): This should not happen!! Data will be lost [ 95.899616][ T8348] [ 95.912613][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.062113][ T8524] netlink: 'syz.0.2059': attribute type 5 has an invalid length. [ 96.121789][ T8528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2060'. [ 96.133335][ T8529] loop0: detected capacity change from 0 to 512 [ 96.133563][ T8530] netlink: 'syz.3.2061': attribute type 3 has an invalid length. [ 96.152356][ T8528] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.162262][ T8528] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.171439][ T8528] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.180989][ T8528] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.195805][ T8529] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.210597][ T8529] ext4 filesystem being mounted at /386/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.211043][ T8528] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.230305][ T8528] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.239286][ T8528] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.248398][ T8528] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.279130][ T3320] EXT4-fs error (device loop0): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /386/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 96.301551][ T3320] EXT4-fs (loop0): Remounting filesystem read-only [ 96.331129][ T8540] wg2: entered promiscuous mode [ 96.336072][ T8540] wg2: entered allmulticast mode [ 96.390654][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.416089][ T8550] loop2: detected capacity change from 0 to 128 [ 96.566987][ T8581] netlink: 'syz.1.2074': attribute type 3 has an invalid length. [ 96.908186][ T8604] loop3: detected capacity change from 0 to 512 [ 96.949118][ T8596] wg2: entered promiscuous mode [ 96.954066][ T8596] wg2: entered allmulticast mode [ 97.080713][ T8604] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.105701][ T8604] ext4 filesystem being mounted at /428/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.120726][ T8604] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.2085: corrupted inode contents [ 97.134259][ T8604] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.2085: mark_inode_dirty error [ 97.148145][ T8604] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.2085: corrupted inode contents [ 97.162347][ T8604] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.2085: mark_inode_dirty error [ 97.180995][ T8604] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 97.208072][ T8604] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.2085: corrupted inode contents [ 97.230707][ T8604] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.2085: mark_inode_dirty error [ 97.249066][ T8604] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.2085: corrupted inode contents [ 97.318363][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.413301][ T8638] loop4: detected capacity change from 0 to 1024 [ 97.448091][ T8638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.478883][ T8638] ext4 filesystem being mounted at /387/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.509040][ T8638] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 1: comm syz.4.2097: lblock 1 mapped to illegal pblock 1 (length 3) [ 97.556920][ T8638] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 97.569526][ T8638] EXT4-fs (loop4): This should not happen!! Data will be lost [ 97.569526][ T8638] [ 97.673375][ T8342] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 4: comm kworker/u8:13: lblock 4 mapped to illegal pblock 4 (length 5) [ 97.719657][ T8342] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 5 with error 117 [ 97.732385][ T8342] EXT4-fs (loop4): This should not happen!! Data will be lost [ 97.732385][ T8342] [ 97.768181][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.945202][ T8671] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2108'. [ 98.052054][ T8685] loop0: detected capacity change from 0 to 764 [ 98.059646][ T8685] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 98.193256][ T8711] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2123'. [ 98.241737][ T8724] loop4: detected capacity change from 0 to 512 [ 98.261699][ T8724] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.274946][ T8731] siw: device registration error -23 [ 98.285439][ T8724] ext4 filesystem being mounted at /395/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.324519][ T3323] EXT4-fs error (device loop4): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /395/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 98.378637][ T3323] EXT4-fs (loop4): Remounting filesystem read-only [ 98.390238][ T8737] loop3: detected capacity change from 0 to 164 [ 98.480083][ T8737] ISOFS: unable to read i-node block [ 98.490236][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.583245][ T8757] loop3: detected capacity change from 0 to 1024 [ 98.624341][ T8757] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 98.652094][ T8771] loop4: detected capacity change from 0 to 512 [ 98.677735][ T8757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.698672][ T8757] EXT4-fs error (device loop3): ext4_check_all_de:659: inode #12: block 7: comm syz.3.2134: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 98.749009][ T8771] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.859983][ T8771] ext4 filesystem being mounted at /399/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.888966][ T8782] siw: device registration error -23 [ 98.907505][ T8771] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.2140: corrupted inode contents [ 98.923172][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.949675][ T8771] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.2140: mark_inode_dirty error [ 99.004289][ T8771] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.2140: corrupted inode contents [ 99.019123][ T8771] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.2140: mark_inode_dirty error [ 99.037166][ T8771] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.2140: corrupted inode contents [ 99.102089][ T8771] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.2140: mark_inode_dirty error [ 99.127332][ T8771] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.2140: corrupted inode contents [ 99.152791][ T8802] 9pnet_fd: Insufficient options for proto=fd [ 99.212044][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.248426][ T8814] loop3: detected capacity change from 0 to 512 [ 99.267589][ T8814] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 99.284581][ T8814] EXT4-fs: error: could not find journal device path [ 99.313026][ T8819] loop4: detected capacity change from 0 to 764 [ 99.326761][ T8819] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 99.513420][ T8845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2165'. [ 99.666386][ T8871] 9pnet_fd: Insufficient options for proto=fd [ 99.694169][ T8875] loop3: detected capacity change from 0 to 512 [ 99.757926][ T8875] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.825466][ T8875] ext4 filesystem being mounted at /449/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.890537][ T8888] loop0: detected capacity change from 0 to 1024 [ 99.899956][ T8888] EXT4-fs: Ignoring removed i_version option [ 99.906205][ T8888] EXT4-fs: Ignoring removed nobh option [ 99.912368][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 99.912385][ T29] audit: type=1400 audit(1748798624.340:2132): avc: denied { map } for pid=8874 comm="syz.3.2179" path="/449/file1/hugetlb.1GB.usage_in_bytes" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 99.988559][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.012927][ T8888] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.048464][ T29] audit: type=1400 audit(1748798624.420:2133): avc: denied { create } for pid=8896 comm="syz.1.2196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.067991][ T29] audit: type=1400 audit(1748798624.480:2134): avc: denied { create } for pid=8887 comm="syz.0.2183" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 100.068747][ T8888] EXT4-fs warning (device loop0): ext4_rename_delete:3726: inode #12: comm syz.0.2183: Deleting old file: nlink 2, error=-2 [ 100.273070][ T8923] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2195'. [ 100.282136][ T8923] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2195'. [ 100.308515][ T8923] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2195'. [ 100.320507][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.339533][ T29] audit: type=1400 audit(1748798624.770:2135): avc: denied { setcheckreqprot } for pid=8929 comm="syz.2.2202" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 100.369641][ T8923] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2195'. [ 100.379072][ T8923] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2195'. [ 100.510162][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2210'. [ 100.519333][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2210'. [ 100.529088][ T8936] Falling back ldisc for ttyS3. [ 100.623556][ T8964] loop2: detected capacity change from 0 to 1024 [ 100.635155][ T8964] EXT4-fs: Ignoring removed i_version option [ 100.698622][ T8964] EXT4-fs: Ignoring removed nobh option [ 100.733018][ T8964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.779955][ T8986] serio: Serial port ptm0 [ 100.838317][ T8964] EXT4-fs warning (device loop2): ext4_rename_delete:3726: inode #12: comm syz.2.2213: Deleting old file: nlink 2, error=-2 [ 100.866999][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.967793][ T29] audit: type=1326 audit(1748798625.400:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9009 comm="syz.2.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b116e969 code=0x7ffc0000 [ 100.991678][ T29] audit: type=1326 audit(1748798625.400:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9009 comm="syz.2.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b116e969 code=0x7ffc0000 [ 101.015445][ T29] audit: type=1326 audit(1748798625.400:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9009 comm="syz.2.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41b116e969 code=0x7ffc0000 [ 101.038975][ T29] audit: type=1326 audit(1748798625.400:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9009 comm="syz.2.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b116e969 code=0x7ffc0000 [ 101.062579][ T29] audit: type=1326 audit(1748798625.400:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9009 comm="syz.2.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b116e969 code=0x7ffc0000 [ 101.086132][ T29] audit: type=1326 audit(1748798625.400:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9009 comm="syz.2.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41b116e969 code=0x7ffc0000 [ 101.321857][ T9039] serio: Serial port ptm1 [ 101.332210][ T9045] loop2: detected capacity change from 0 to 512 [ 101.341103][ T9045] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 101.352416][ T9045] EXT4-fs (loop2): 1 truncate cleaned up [ 101.358609][ T9045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.401236][ T9050] SELinux: failed to load policy [ 101.448073][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.965302][ T9154] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9154 comm=syz.0.2299 [ 101.977921][ T9154] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9154 comm=syz.0.2299 [ 102.016655][ T9160] loop4: detected capacity change from 0 to 1024 [ 102.041831][ T9160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.064537][ T9160] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 102.079621][ T9160] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 102.092101][ T9160] EXT4-fs (loop4): This should not happen!! Data will be lost [ 102.092101][ T9160] [ 102.102187][ T9160] EXT4-fs (loop4): Total free blocks count 0 [ 102.108487][ T9160] EXT4-fs (loop4): Free/Dirty block details [ 102.114424][ T9160] EXT4-fs (loop4): free_blocks=68451041280 [ 102.120261][ T9160] EXT4-fs (loop4): dirty_blocks=64 [ 102.125417][ T9160] EXT4-fs (loop4): Block reservation details [ 102.131505][ T9160] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 102.137925][ T9166] Direct I/O collision with buffered writes! File: /file1 Comm: syz.4.2302 [ 102.156987][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.182427][ T9170] serio: Serial port ptm0 [ 102.370648][ T9186] loop3: detected capacity change from 0 to 512 [ 102.380607][ T9186] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 102.391172][ T9188] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 102.401969][ T9186] EXT4-fs (loop3): 1 truncate cleaned up [ 102.408165][ T9186] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.489773][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.533557][ T9206] vcan0: entered allmulticast mode [ 102.539000][ T9206] vcan0: left allmulticast mode [ 102.664054][ T9225] loop0: detected capacity change from 0 to 512 [ 102.680430][ T9225] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 102.696576][ T9225] EXT4-fs (loop0): 1 truncate cleaned up [ 102.702189][ T9228] vcan0: entered allmulticast mode [ 102.727847][ T9225] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.751693][ T9228] vcan0: left allmulticast mode [ 102.792006][ T9239] hub 9-0:1.0: USB hub found [ 102.796811][ T9239] hub 9-0:1.0: 8 ports detected [ 102.808584][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.959314][ T9264] SELinux: ebitmap start bit (6619172) is not a multiple of the map unit size (64) [ 102.974021][ T9264] SELinux: failed to load policy [ 103.082878][ T9287] loop4: detected capacity change from 0 to 512 [ 103.091560][ T9287] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 103.103486][ T9287] EXT4-fs (loop4): 1 truncate cleaned up [ 103.109752][ T9287] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.114523][ T9270] lo speed is unknown, defaulting to 1000 [ 103.135679][ T8365] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.182475][ T8365] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.233989][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.246738][ T8365] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.264705][ T9270] chnl_net:caif_netlink_parms(): no params data found [ 103.277098][ T9397] ip6gretap1: entered allmulticast mode [ 103.307509][ T8365] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.344663][ T9270] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.351925][ T9270] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.359370][ T9270] bridge_slave_0: entered allmulticast mode [ 103.365921][ T9270] bridge_slave_0: entered promiscuous mode [ 103.372936][ T9270] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.380577][ T9270] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.388000][ T9270] bridge_slave_1: entered allmulticast mode [ 103.395025][ T9270] bridge_slave_1: entered promiscuous mode [ 103.419501][ T9270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.432303][ T9270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.452681][ T9356] lo speed is unknown, defaulting to 1000 [ 103.461489][ T9270] team0: Port device team_slave_0 added [ 103.473515][ T9270] team0: Port device team_slave_1 added [ 103.497431][ T9270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.504469][ T9270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.530931][ T9270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.549208][ T9270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.556304][ T9270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.582399][ T9270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.629101][ T8365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.639141][ T8365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.648838][ T8365] bond0 (unregistering): Released all slaves [ 103.658445][ T8365] bond1 (unregistering): Released all slaves [ 103.732050][ T8365] hsr_slave_0: left promiscuous mode [ 103.738038][ T8365] hsr_slave_1: left promiscuous mode [ 103.744689][ T8365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.752229][ T8365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.761943][ T8365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.769603][ T8365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.781552][ T8365] veth1_macvtap: left promiscuous mode [ 103.787126][ T8365] veth0_macvtap: left promiscuous mode [ 103.832947][ T8365] team0 (unregistering): Port device team_slave_1 removed [ 103.843896][ T8365] team0 (unregistering): Port device team_slave_0 removed [ 103.876667][ T9270] hsr_slave_0: entered promiscuous mode [ 103.883114][ T9270] hsr_slave_1: entered promiscuous mode [ 103.889293][ T9270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.896926][ T9270] Cannot create hsr debugfs directory [ 103.944389][ T9356] chnl_net:caif_netlink_parms(): no params data found [ 104.027918][ T9356] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.035196][ T9356] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.044742][ T9356] bridge_slave_0: entered allmulticast mode [ 104.051603][ T9356] bridge_slave_0: entered promiscuous mode [ 104.058651][ T9356] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.065829][ T9356] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.075995][ T9356] bridge_slave_1: entered allmulticast mode [ 104.082848][ T9356] bridge_slave_1: entered promiscuous mode [ 104.131420][ T9356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.143182][ T9356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.185052][ T9356] team0: Port device team_slave_0 added [ 104.208050][ T9356] team0: Port device team_slave_1 added [ 104.216777][ T9270] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 104.240414][ T8365] IPVS: stop unused estimator thread 0... [ 104.248130][ T9270] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 104.257250][ T9270] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 104.267580][ T9356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.274681][ T9356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.300952][ T9356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.311865][ T9270] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 104.321468][ T9356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.328498][ T9356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.355154][ T9356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.395327][ T9356] hsr_slave_0: entered promiscuous mode [ 104.402764][ T9356] hsr_slave_1: entered promiscuous mode [ 104.408948][ T9356] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.416884][ T9356] Cannot create hsr debugfs directory [ 104.477289][ T9857] lo speed is unknown, defaulting to 1000 [ 104.524797][ T9356] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 104.539621][ T9356] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 104.548491][ T9356] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 104.561537][ T9270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.568861][ T9356] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 104.595845][ T9270] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.626239][ T8349] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.633372][ T8349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.646200][ T8356] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.653441][ T8356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.670601][ T9857] chnl_net:caif_netlink_parms(): no params data found [ 104.739871][ T9857] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.746968][ T9857] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.756493][ T9857] bridge_slave_0: entered allmulticast mode [ 104.763344][ T9857] bridge_slave_0: entered promiscuous mode [ 104.782260][ T9857] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.789487][ T9857] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.808725][ T9857] bridge_slave_1: entered allmulticast mode [ 104.815770][ T9857] bridge_slave_1: entered promiscuous mode [ 104.859073][ T9857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.870950][ T9356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.880877][ T9857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.930051][ T9356] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.942177][ T9857] team0: Port device team_slave_0 added [ 104.950873][ T9857] team0: Port device team_slave_1 added [ 104.957455][ T8347] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.964577][ T8347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.002591][ T8347] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.009760][ T8347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.018541][ T9857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.025822][ T9857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.027746][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 105.027764][ T29] audit: type=1400 audit(1748798629.450:2187): avc: denied { read } for pid=10201 comm="syz.1.2370" lport=47249 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 105.051887][ T9857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.055841][ T9857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.096357][ T9857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.122324][ T9857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.155980][ T9270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.166243][ T9857] hsr_slave_0: entered promiscuous mode [ 105.173343][ T9857] hsr_slave_1: entered promiscuous mode [ 105.180893][ T9857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.188525][ T9857] Cannot create hsr debugfs directory [ 105.313470][ T9857] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 105.324361][ T9857] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 105.336918][ T9857] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 105.351668][ T9356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.359485][ T9857] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 105.385863][ T9270] veth0_vlan: entered promiscuous mode [ 105.410837][ T9270] veth1_vlan: entered promiscuous mode [ 105.434519][ T9270] veth0_macvtap: entered promiscuous mode [ 105.445025][ T9270] veth1_macvtap: entered promiscuous mode [ 105.453233][ T9857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.474838][ T9857] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.485940][ T9270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.498187][ T9270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.508796][ T8347] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.515923][ T8347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.527625][ T8342] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.534865][ T8342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.543802][ T9270] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.552695][ T9270] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.561468][ T9270] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.570325][ T9270] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.609570][ T29] audit: type=1400 audit(1748798630.040:2188): avc: denied { mounton } for pid=9270 comm="syz-executor" path="/root/syzkaller.qBTuxU/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 105.638530][ T29] audit: type=1400 audit(1748798630.070:2189): avc: denied { mount } for pid=9270 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 105.654257][ T9356] veth0_vlan: entered promiscuous mode [ 105.660855][ T29] audit: type=1400 audit(1748798630.070:2190): avc: denied { mount } for pid=9270 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 105.660882][ T29] audit: type=1400 audit(1748798630.070:2191): avc: denied { mounton } for pid=9270 comm="syz-executor" path="/root/syzkaller.qBTuxU/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 105.684518][ T9356] veth1_vlan: entered promiscuous mode [ 105.688307][ T29] audit: type=1400 audit(1748798630.070:2192): avc: denied { mounton } for pid=9270 comm="syz-executor" path="/root/syzkaller.qBTuxU/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=22322 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 105.747844][ T9857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.766417][ T29] audit: type=1400 audit(1748798630.180:2193): avc: denied { mounton } for pid=9270 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 105.777985][ T9356] veth0_macvtap: entered promiscuous mode [ 105.789686][ T29] audit: type=1400 audit(1748798630.180:2194): avc: denied { mount } for pid=9270 comm="syz-executor" name="/" dev="gadgetfs" ino=3495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 105.798146][ T9356] veth1_macvtap: entered promiscuous mode [ 105.837737][ T29] audit: type=1400 audit(1748798630.270:2195): avc: denied { write } for pid=10357 comm="syz.1.2372" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 105.862738][T10358] loop5: detected capacity change from 0 to 1024 [ 105.876214][ T9356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.896014][ T9356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.906755][ T9356] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.915553][ T9356] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.922240][T10358] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.924377][ T9356] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.945251][ T9356] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.965858][T10358] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 105.982976][T10358] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 105.995511][T10358] EXT4-fs (loop5): This should not happen!! Data will be lost [ 105.995511][T10358] [ 106.005303][T10358] EXT4-fs (loop5): Total free blocks count 0 [ 106.011370][T10358] EXT4-fs (loop5): Free/Dirty block details [ 106.017275][T10358] EXT4-fs (loop5): free_blocks=68451041280 [ 106.023322][T10358] EXT4-fs (loop5): dirty_blocks=64 [ 106.028441][T10358] EXT4-fs (loop5): Block reservation details [ 106.034484][T10358] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 106.043241][T10368] Direct I/O collision with buffered writes! File: /file1 Comm: syz.5.2344 [ 106.087870][ T9270] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.216859][ T9857] veth0_vlan: entered promiscuous mode [ 106.236141][T10397] __nla_validate_parse: 13 callbacks suppressed [ 106.236157][T10397] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2373'. [ 106.241149][ T9857] veth1_vlan: entered promiscuous mode [ 106.260807][ T29] audit: type=1400 audit(1748798630.690:2196): avc: denied { bind } for pid=10399 comm="syz.6.2375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 106.289102][ T9857] veth0_macvtap: entered promiscuous mode [ 106.297584][ T9857] veth1_macvtap: entered promiscuous mode [ 106.309806][ T9857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.327187][ T9857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.338281][ T9857] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.347279][ T9857] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.356052][ T9857] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.364847][ T9857] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.391827][T10402] 9pnet: Could not find request transport: f [ 106.432641][T10413] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 106.439219][T10413] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 106.446690][T10413] vhci_hcd vhci_hcd.0: Device attached [ 106.462281][T10413] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 106.468902][T10413] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 106.476564][T10413] vhci_hcd vhci_hcd.0: Device attached [ 106.514458][T10426] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(8) [ 106.521094][T10426] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 106.528729][T10426] vhci_hcd vhci_hcd.0: Device attached [ 106.540145][T10425] netlink: 209836 bytes leftover after parsing attributes in process `syz.7.2359'. [ 106.560815][T10427] vhci_hcd: connection closed [ 106.561002][T10416] vhci_hcd: connection closed [ 106.566004][ T8347] vhci_hcd: stop threads [ 106.566336][T10414] vhci_hcd: connection closed [ 106.570743][ T8347] vhci_hcd: release socket [ 106.584445][ T8347] vhci_hcd: disconnect device [ 106.622243][ T8347] vhci_hcd: stop threads [ 106.626599][ T8347] vhci_hcd: release socket [ 106.631168][ T8347] vhci_hcd: disconnect device [ 106.636704][ T8347] vhci_hcd: stop threads [ 106.641041][ T8347] vhci_hcd: release socket [ 106.645485][ T8347] vhci_hcd: disconnect device [ 106.650304][T10369] vhci_hcd: vhci_device speed not set [ 106.669297][T10438] loop6: detected capacity change from 0 to 2048 [ 106.741548][T10438] loop6: p1 < > p4 [ 106.748244][T10438] loop6: p4 size 8388608 extends beyond EOD, truncated [ 106.822233][T10451] 9pnet: Could not find request transport: f [ 107.245457][T10467] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2396'. [ 107.536954][T10480] loop3: detected capacity change from 0 to 1024 [ 107.595621][T10480] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.696241][T10480] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 107.722800][T10480] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 107.735251][T10480] EXT4-fs (loop3): This should not happen!! Data will be lost [ 107.735251][T10480] [ 107.745018][T10480] EXT4-fs (loop3): Total free blocks count 0 [ 107.751141][T10480] EXT4-fs (loop3): Free/Dirty block details [ 107.757205][T10480] EXT4-fs (loop3): free_blocks=68451041280 [ 107.763405][T10480] EXT4-fs (loop3): dirty_blocks=64 [ 107.768682][T10480] EXT4-fs (loop3): Block reservation details [ 107.774802][T10480] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 107.787218][T10497] Direct I/O collision with buffered writes! File: /file1 Comm: syz.3.2400 [ 107.827779][T10502] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2405'. [ 107.838294][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.984253][T10530] netlink: 4344 bytes leftover after parsing attributes in process `syz.7.2418'. [ 108.000763][T10530] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2418'. [ 108.057788][T10535] loop7: detected capacity change from 0 to 1024 [ 108.075506][T10535] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.144913][T10535] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 108.160048][T10542] batadv_slave_0: entered promiscuous mode [ 108.167366][T10541] batadv_slave_0: left promiscuous mode [ 108.173438][T10535] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 108.186333][T10535] EXT4-fs (loop7): This should not happen!! Data will be lost [ 108.186333][T10535] [ 108.196178][T10535] EXT4-fs (loop7): Total free blocks count 0 [ 108.202267][T10535] EXT4-fs (loop7): Free/Dirty block details [ 108.208339][T10535] EXT4-fs (loop7): free_blocks=68451041280 [ 108.214303][T10535] EXT4-fs (loop7): dirty_blocks=64 [ 108.219487][T10535] EXT4-fs (loop7): Block reservation details [ 108.225572][T10535] EXT4-fs (loop7): i_reserved_data_blocks=4 [ 108.232540][T10547] Direct I/O collision with buffered writes! File: /file1 Comm: syz.7.2419 [ 108.322048][T10559] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2427'. [ 108.332783][ T9857] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.353598][T10562] raw_sendmsg: syz.3.2430 forgot to set AF_INET. Fix it! [ 108.569190][T10598] batadv_slave_0: entered promiscuous mode [ 108.589939][T10597] batadv_slave_0: left promiscuous mode [ 108.653430][T10602] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2445'. [ 108.725308][T10622] 9pnet_fd: Insufficient options for proto=fd [ 108.761948][T10628] loop3: detected capacity change from 0 to 512 [ 108.781121][T10632] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 108.787811][T10632] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 108.795311][T10632] vhci_hcd vhci_hcd.0: Device attached [ 108.805810][T10636] batadv_slave_0: entered promiscuous mode [ 108.812594][T10628] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 108.813432][T10635] batadv_slave_0: left promiscuous mode [ 108.828904][T10632] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(5) [ 108.835480][T10632] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 108.843355][T10632] vhci_hcd vhci_hcd.0: Device attached [ 108.851842][T10628] EXT4-fs (loop3): 1 truncate cleaned up [ 108.857808][T10632] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(7) [ 108.858251][T10628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.864858][T10632] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 108.864938][T10632] vhci_hcd vhci_hcd.0: Device attached [ 108.906080][T10643] vhci_hcd: connection closed [ 108.906382][ T8377] vhci_hcd: stop threads [ 108.915409][ T8377] vhci_hcd: release socket [ 108.919915][ T8377] vhci_hcd: disconnect device [ 108.928290][T10638] vhci_hcd: connection closed [ 108.928580][ T8377] vhci_hcd: stop threads [ 108.928615][T10633] vhci_hcd: connection closed [ 108.933358][ T8377] vhci_hcd: release socket [ 108.938686][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.942336][ T8377] vhci_hcd: disconnect device [ 108.961167][ T8377] vhci_hcd: stop threads [ 108.965431][ T8377] vhci_hcd: release socket [ 108.969973][ T8377] vhci_hcd: disconnect device [ 108.979532][ T1107] vhci_hcd: vhci_device speed not set [ 109.458693][T10658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2463'. [ 109.487053][ T79] I/O error, dev loop3, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 109.490165][T10658] 8021q: adding VLAN 0 to HW filter on device bond2 [ 109.553143][T10658] 8021q: adding VLAN 0 to HW filter on device bond2 [ 109.560905][T10658] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 109.572746][T10658] bond2: (slave vcan1): Error -95 calling set_mac_address [ 109.776239][T10747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2482'. [ 109.797787][T10747] 8021q: adding VLAN 0 to HW filter on device bond2 [ 109.816267][T10747] 8021q: adding VLAN 0 to HW filter on device bond2 [ 109.827588][T10747] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 109.843040][T10747] bond2: (slave vcan1): Error -95 calling set_mac_address [ 109.857177][T10789] loop6: detected capacity change from 0 to 512 [ 109.864743][T10789] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 109.879742][T10789] EXT4-fs (loop6): 1 truncate cleaned up [ 109.886215][T10789] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.922883][ T9356] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.953739][T10797] SELinux: failed to load policy [ 109.960897][T10803] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.485456][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 110.485476][ T29] audit: type=1400 audit(1748798634.920:2219): avc: denied { read write } for pid=10828 comm="syz.6.2508" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 110.488564][T10832] loop5: detected capacity change from 0 to 512 [ 110.491694][ T29] audit: type=1400 audit(1748798634.920:2220): avc: denied { open } for pid=10828 comm="syz.6.2508" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 110.520096][T10832] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 110.524190][ T29] audit: type=1400 audit(1748798634.960:2221): avc: denied { ioctl } for pid=10828 comm="syz.6.2508" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 110.558058][T10830] 8021q: adding VLAN 0 to HW filter on device bond3 [ 110.593281][T10832] EXT4-fs (loop5): 1 truncate cleaned up [ 110.599797][T10832] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.613495][T10858] 8021q: adding VLAN 0 to HW filter on device bond3 [ 110.629857][T10858] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 110.644931][T10858] bond3: (slave vcan1): Error -95 calling set_mac_address [ 110.658003][ T9270] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.778338][T10893] SELinux: failed to load policy [ 110.843569][ T29] audit: type=1400 audit(1748798635.280:2222): avc: denied { create } for pid=10907 comm="syz.5.2512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 110.864283][ T29] audit: type=1400 audit(1748798635.300:2223): avc: denied { write } for pid=10907 comm="syz.5.2512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 110.922113][T10917] xt_hashlimit: max too large, truncated to 1048576 [ 111.053348][T10929] SELinux: failed to load policy [ 111.144604][T10947] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=10947 comm=syz.7.2531 [ 111.209005][T10954] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=10954 comm=syz.5.2544 [ 111.233096][ T29] audit: type=1326 audit(1748798635.670:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10959 comm="syz.7.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d375ae969 code=0x7ffc0000 [ 111.267749][ T29] audit: type=1326 audit(1748798635.690:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10959 comm="syz.7.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8d375ad2d0 code=0x7ffc0000 [ 111.291553][ T29] audit: type=1326 audit(1748798635.690:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10959 comm="syz.7.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f8d375b0197 code=0x7ffc0000 [ 111.315951][ T29] audit: type=1326 audit(1748798635.690:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10959 comm="syz.7.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8d375ae969 code=0x7ffc0000 [ 111.340125][ T29] audit: type=1326 audit(1748798635.690:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10959 comm="syz.7.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f8d375b0197 code=0x7ffc0000 [ 111.415186][T10970] SELinux: failed to load policy [ 111.511897][T10996] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=10996 comm=syz.1.2549 [ 111.757002][T11043] SELinux: failed to load policy [ 111.799568][T11051] __nla_validate_parse: 1 callbacks suppressed [ 111.799588][T11051] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2574'. [ 113.535337][T11144] netlink: 'syz.3.2606': attribute type 1 has an invalid length. [ 113.626821][T11155] lo speed is unknown, defaulting to 1000 [ 113.658927][T11184] netlink: 'syz.1.2612': attribute type 10 has an invalid length. [ 113.696940][T11184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.712078][T11184] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 113.731630][T11184] netlink: 'syz.1.2612': attribute type 10 has an invalid length. [ 113.739657][T11184] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2612'. [ 113.749414][T11184] batadv0: entered promiscuous mode [ 113.754759][T11184] batadv0: entered allmulticast mode [ 113.795789][T11184] bond0: (slave batadv0): Releasing backup interface [ 113.815067][T11184] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 113.815386][T11195] loop3: detected capacity change from 0 to 2048 [ 113.844264][T11192] loop5: detected capacity change from 0 to 8192 [ 113.904877][T11204] netlink: 'syz.1.2620': attribute type 1 has an invalid length. [ 114.164226][T11233] wireguard0: entered promiscuous mode [ 114.169856][T11233] wireguard0: entered allmulticast mode [ 114.206698][T11242] netlink: 'syz.6.2634': attribute type 1 has an invalid length. [ 114.870995][T11276] loop6: detected capacity change from 0 to 2048 [ 114.883206][T11278] netlink: 'syz.5.2645': attribute type 1 has an invalid length. [ 115.047485][T11301] loop7: detected capacity change from 0 to 8192 [ 115.150468][ T8377] ================================================================== [ 115.158592][ T8377] BUG: KCSAN: data-race in copy_page_from_iter_atomic / fat16_ent_put [ 115.166796][ T8377] [ 115.169124][ T8377] write to 0xffff88812ce45426 of 2 bytes by task 11312 on cpu 0: [ 115.176844][ T8377] fat16_ent_put+0x28/0x60 [ 115.181276][ T8377] fat_alloc_clusters+0x4ce/0xa80 [ 115.186318][ T8377] fat_get_block+0x258/0x5e0 [ 115.191011][ T8377] __block_write_begin_int+0x3fd/0xf90 [ 115.196566][ T8377] cont_write_begin+0x5fc/0x970 [ 115.201494][ T8377] fat_write_begin+0x4f/0xe0 [ 115.206140][ T8377] generic_perform_write+0x184/0x490 [ 115.211451][ T8377] __generic_file_write_iter+0x9e/0x120 [ 115.217099][ T8377] generic_file_write_iter+0x8d/0x2f0 [ 115.222488][ T8377] aio_write+0x2e5/0x410 [ 115.226798][ T8377] io_submit_one+0xacd/0x11d0 [ 115.231493][ T8377] __se_sys_io_submit+0xfb/0x280 [ 115.236449][ T8377] __x64_sys_io_submit+0x43/0x50 [ 115.241411][ T8377] x64_sys_call+0xfc4/0x2fb0 [ 115.246016][ T8377] do_syscall_64+0xd2/0x200 [ 115.250543][ T8377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.256449][ T8377] [ 115.258777][ T8377] read to 0xffff88812ce45400 of 512 bytes by task 8377 on cpu 1: [ 115.266512][ T8377] copy_page_from_iter_atomic+0x7af/0x1060 [ 115.272338][ T8377] generic_perform_write+0x2c2/0x490 [ 115.277657][ T8377] shmem_file_write_iter+0xc5/0xf0 [ 115.282786][ T8377] lo_rw_aio+0x5f7/0x7c0 [ 115.287044][ T8377] loop_process_work+0x52d/0xa60 [ 115.291994][ T8377] loop_workfn+0x31/0x40 [ 115.296249][ T8377] process_scheduled_works+0x4cb/0x9d0 [ 115.301736][ T8377] worker_thread+0x582/0x770 [ 115.306347][ T8377] kthread+0x486/0x510 [ 115.310434][ T8377] ret_from_fork+0xda/0x150 [ 115.314951][ T8377] ret_from_fork_asm+0x1a/0x30 [ 115.319755][ T8377] [ 115.322082][ T8377] Reported by Kernel Concurrency Sanitizer on: [ 115.328251][ T8377] CPU: 1 UID: 0 PID: 8377 Comm: kworker/u8:48 Not tainted 6.15.0-syzkaller-10815-gbb1556ec9464 #0 PREEMPT(voluntary) [ 115.340590][ T8377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 115.350662][ T8377] Workqueue: loop7 loop_workfn [ 115.355452][ T8377] ==================================================================