last executing test programs: 11m19.299925449s ago: executing program 2 (id=376): chdir(&(0x7f0000000480)='./cgroup\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents(r0, &(0x7f0000000080)=""/43, 0x2b) 11m19.177208871s ago: executing program 2 (id=379): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x16ec0, 0x0, 0x9, 0x6, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r2, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x29, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x59, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r5, &(0x7f0000000380), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_freezer_state(r6, &(0x7f0000002b00), 0x2, 0x0) close(r7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$inet(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1, &(0x7f00000001c0)=[@ip_tos_int={{0x14}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_retopts={{0x28, 0x0, 0x7, {[@lsrr={0x83, 0x3}, @generic={0x0, 0x3, "96"}, @generic={0x0, 0xf, "206a77bdd1a004129054e7704a"}]}}}], 0x88}, 0x0) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) 11m18.105046469s ago: executing program 2 (id=399): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, 0x0) 11m17.978107711s ago: executing program 2 (id=402): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 11m17.812137494s ago: executing program 2 (id=406): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x83, &(0x7f0000000140)={r2}, 0x8) 11m17.43880455s ago: executing program 2 (id=416): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44004) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x3}, 0x1c) socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, 0x0, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}}, 0x0) 11m17.351114612s ago: executing program 32 (id=416): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44004) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x3}, 0x1c) socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, 0x0, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}}, 0x0) 10m10.931376377s ago: executing program 5 (id=940): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r2, r3, 0x6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES16=r0, @ANYBLOB="746ababaea5835f357e35cb75e75b35fc29bb521faae9d0e4a15ff6e5d61aa957f2bbc350f4224c7d398518f2651953bfbc8d0"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 10m10.798721439s ago: executing program 5 (id=942): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000680)=""/141}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000280)=""/239}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r6, 0x2007ffb) sendfile(r6, r6, 0x0, 0x739ec272) 10m9.675174738s ago: executing program 5 (id=943): write(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000080)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}]}, 0x1, 0x573, &(0x7f0000000ec0)="$eJzs3T1sG+UbAPDnzvG/X/mTIoEEqEMFSEWq6iT9gMLUrohKlTogsUDkuFEVJ47iBJooQ7pXiA4IUJeywcAIYmBALIysLCBmpIpGIDUdwMhfaZo4wSl1XHK/n3T2vfee/bzvnZ/XvtOdHEBmHa0/pBHPRsTFJGJoXd1AtCqPNtdbXVkq3ltZKiZRq136LYkkIu6uLBXb6yet50MRsRwRz0TEd/mI4+nmuNWFxcmxcrk02yoPz03NDFcXFk9cmRqbKE2Upk+98uqZs6fPjJ4cXf+ye7X1pfzO+nr95xvvX//h9Vs3Pv/iyHLxw7EkzsVgq259Px6l5jbJx7kNy0/3IlgfJf1uAA8l18rzeio9HUORa2V9J7WhXW0a0GO1fRE1IKMS+Q8Z1f4dUD/+bU+7+fvj9vnmAUg97mpratYMNM9NxP7GscnB35MHjkzqx5uHd7Oh7EnL1yJiZGBg8+c/aX3+Ht7Io2ggPfXt+eaO2rz/07XxJzqMP4Ptc6f/Unv8W900/t2Pn9ti/LvYZYw/3/rlky3jX4t4rmP8ZC1+0iF+GhHvdBn/5ptfn92qrvZpxLHoHL8t2f788PDlK+XSSPOxY4xvjh15bbv+H9wifvOc7f7G10yn7T/TZf+/+v7L55e3if/SC9vv/07b/0BEfNBl/CfvfvbGVnW3ryV36r8Cdrr/68tudRn/5XNHf+pyVQAAAAAAAAAAYAfSxrVsSVpYm0/TQqF5D+9TcTAtV6pzxy9X5qfHm9e8HY582r7SaqhZTurl0db1uO3yyQ3lU7lWwNyBRrlQrJTH+9x3AAAAAAAAAAAAAAAAAAAAeFwc2nD//x+5xv3/G/+uGtirtv7Lb2Cvk/+QXQ/mf9K3dgC7z/c/ZFZN/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv8AAAAAAAAAAAAAAAAAAAAAAAAAANATFy9cqE+1eytLxXp5fGBhfrLy7onxUnWyMDVfLBQrszOFiUplolwqFCtT//R+SaUyMxLT81eH50rVueHqwuLbU5X56fZ/ipbyPe8RAAAAAAAAAAAAAAAAAAAA/PcMNqYkLURE2phP00Ih4v8RcTjyyeUr5dJIRDwRET/m8vvq5dF+NxoAAAAAAAAAAAAAAAAAAAD2mOrC4uRYuVyazcjMwE5WjojlR9uM+jvu+FX51r56XLahmSzM9HlgAgAAAAAAAAAAAAAAAACADLp/02+3r/irtw0CAAAAAAAAAAAAAAAAAACATEp/TSKiPh0benFwY+3/ktVc4zki3rt56aOrY3Nzs6P15XfWls993Fp+sh/tB7rVztN2HgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3VRcWJ8fK5dJsD2f63UcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh/F3AAAA///pCdd8") dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x5, 0x4, 0x8, 0x7fe000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getrusage(0x0, &(0x7f00000004c0)) 10m8.179976143s ago: executing program 5 (id=952): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214040, 0x0) 10m7.178640689s ago: executing program 5 (id=954): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) setrlimit(0xa, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2b, @void, @value}, 0x94) msync(&(0x7f0000798000/0x1000)=nil, 0x1000, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") 10m6.855724214s ago: executing program 5 (id=959): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000680)=""/141}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000280)=""/239}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r6, 0x2007ffb) sendfile(r6, r6, 0x0, 0x739ec272) 10m6.854121305s ago: executing program 33 (id=959): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000680)=""/141}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000280)=""/239}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r6, 0x2007ffb) sendfile(r6, r6, 0x0, 0x739ec272) 8m24.85651573s ago: executing program 0 (id=1484): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x55f, &(0x7f0000000d00)="$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") r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000280)='kfree\x00', r5}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x20008000) 8m23.268538956s ago: executing program 0 (id=1488): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 8m23.163857328s ago: executing program 0 (id=1490): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x8) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) 8m22.092171256s ago: executing program 0 (id=1491): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") creat(&(0x7f0000000340)='./bus\x00', 0x11a) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x41800, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x84) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000003, 0x28011, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x75e, &(0x7f0000001280)="$eJzs3M1rHPUbAPBnJtmkL/n9NoLgy0GEFloonSTNpT01XrwVCgWvNSSTEDLJhuymdmPB1rNQm4uCIOrZo1eh1D/AmxQUvAuiNR7Ey8psXkpjNt02TVbazwcm+3xnZ+Z5nuzwzQ5kJoAX1pvljyRiKCIuR0R1c30aEQPt6EjEzY3t1h/cmCqXJFqtK78l5W6x3qpuHyvZfD0e7V3i1Yi4V4k48+G/89abq/OTRZEvb45HGgtLI/Xm6tm5hcnZfDZfHBu/MHp+fPz86Phje3ily15PvnPh6J3v315b++Gbxu03+s8mMdHuOzZ76/IwT2Tjd1KJiR3rFw8iWQ8lvS4AAICulN/z+yKiv/0ttRp97QgAAAB4nrQGWwAAAMBzL4leVwAAAAAcrK3/A9i6t/eg7oPt5Ne3ImJ4t/z97XuII45EJSKOrSeP3JmQbOwG+3LzVkTcndh5/n1VnmE393ns0R3jR++RHtjn0XkW7pbzz8Ru80+6Pf/ELvNP/9azE/ap8/z3MH9fh/nvcpc5vv38tUrH/LciXu/fLX+ynT/pkP/dLvPfXvvoTjvYpYrWlxGndv37kzySa4/nQ0zMzBV7Pn7g3t+n7+/V/7FO+ZO9+1/qsv/31/+Y7zSXlPlPn9j7898tf3lOfLxZRxoRdzZfy/HajhwnFn78bq/+pyNaT/P5f9Fl/z9/PXi9y00BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgLY2IoUjSbDtO0yyLOB4RL8extKjVG2dmaiuL0+V7EcNRSWfminw0Iqob46Qcj7Xjh+NzO8bjEfHST0c3ks4VeTZVK6Z73TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbjkfEUCRpFhFpRPxZTdMsi+jvYt/BQ6gPAAAAeEaGe10AAAAAcOC6uP4fOIw6AAAAgINTXv/3PcV+yQHUAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy3Ll+6VC6t9Qc3psrx9LXmynzt2tnpvD6fLaxMZVO15aVstlabLfJsqrbwuOMVtdrS2IVYuT7SyOuNkXpz9epCbWWxcXVuYXI2v5pXDqUrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAntRQe0nSLCLSdpymWRbxv4gYjkoyM1fkoxHx/4i4X60MluOxXhcNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAM1dvrs5PFkW+LBAIDi34ICL+A2XsEfR6ZgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoBfqzdX5yaLIl+u9rgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDeSn9JIqJcTlVPDu18dyD5q9p+jYj3PrvyyfXJRmN5rFz/+/b6xqeb68/1on4AAAB4IVx8ko23rtO3ruMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6VW+uzk8WRb68v+BiNFdbSYdtet0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwdP4JAAD//2T7x0Y=") chdir(&(0x7f0000000240)='./file0\x00') syz_io_uring_setup(0x371d, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x6200, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 8m21.404710087s ago: executing program 0 (id=1492): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd59}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 8m20.791928777s ago: executing program 0 (id=1500): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 8m20.775003147s ago: executing program 34 (id=1500): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 4.14745942s ago: executing program 3 (id=4283): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000140)="845715a6", 0x4}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 4.040471562s ago: executing program 3 (id=4284): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c45faf408612a41f7ec7010603010902120001000000000904"], 0x0) 3.880275085s ago: executing program 4 (id=4286): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)="28e6ceb00e919b519d9c75d8fcf6370a0e5820a3ab6a48c49f564a91ccef167412e24838a1258d11365ba45a2f25b09276ee5b5f9480a756f4470ea61b2fb4efb8c84c471dc9", 0x46}, {&(0x7f00000006c0)="52fad8a2f6e21b15aade9d6f12393327d118219aab8428e0f3480004e52eafe4592e182d4cd7f609834f6214afcceeaacdd3ce254ca8f3f4330db1ee806231cfa98b5736d6f3afbadd8022414c8613ac341b8d1538b6cf5d199b7f2b725c9353de81c0b1e0c8ac5d35b8", 0x6a}, {&(0x7f0000000300)="1b3599cc95cb5e69b24ff9b2fd5b1d69d1f18403cf", 0x15}, {&(0x7f0000000940)="c28cbc11b3b6845850476dc55cc2d4bee68c7e", 0x13}, {&(0x7f00000007c0)="d7f0c87b9c16ebce229c316d29e100250a98069fc5ae230095e24fcbfaacff36fd4ae2f47ef80c0282c8cb7b5d4f0b2328ce20cd402ac061011a72e0f78a7bf154ac5a9cd20ad0f13dab6df59af67d3e681182bb734ba0381037620d0e783c18a83d5c2829630bb5aa79e21b0c6f31be5293622882a07f539ae295069528d4ba225e12e3151dc9ed509ae6dec58df5f651a3beb8ce", 0x95}], 0x5}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001000)="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", 0x361}], 0x1}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.796148946s ago: executing program 4 (id=4287): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x454}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[], 0x20}}, 0x40000) shutdown(r2, 0x1) recvfrom(r1, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) 3.435936632s ago: executing program 3 (id=4288): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x48051}, 0x0) 3.370580213s ago: executing program 3 (id=4289): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x13, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2, 0x88000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 3.184029517s ago: executing program 3 (id=4291): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x1d8, 0x12, 0x60d, 0x10000000, 0x202, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @remote, [], [], 'veth0_to_team\x00', 'macsec0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='GPL\x00', 0x2, 0x86, &(0x7f0000000680)=""/134, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.072454579s ago: executing program 6 (id=4292): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000000500000809000000010000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x16ec0, 0x0, 0x9, 0x6, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r2, &(0x7f0000000380), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000002b00), 0x2, 0x0) close(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.96273686s ago: executing program 6 (id=4293): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 2.867888852s ago: executing program 4 (id=4294): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000ff0f0000050000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.821005923s ago: executing program 6 (id=4295): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xe8}}, 0x0) 2.570960147s ago: executing program 1 (id=4296): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001f80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}]}, 0x38}}, 0x4048084) 2.554534017s ago: executing program 1 (id=4297): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7, 0x0, 0x0, @void, @value}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 2.528290897s ago: executing program 1 (id=4298): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', 0x0, 0x800000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x2c, r5, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}}, 0x0) 2.35241923s ago: executing program 7 (id=4300): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x1, 0x140, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) 2.251816752s ago: executing program 3 (id=4301): inotify_init1(0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xe6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) syz_usb_connect$uac1(0x0, 0xac, &(0x7f00000000c0)=ANY=[@ANYBLOB="12015001000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000110000000524050000182407060000009e"], 0x0) 2.237946582s ago: executing program 7 (id=4302): r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000040)={0x8, 'vlan0\x00', {'bond_slave_0\x00'}, 0x3}) 2.147592934s ago: executing program 7 (id=4303): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_create1(0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x8a) r4 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) 1.728812561s ago: executing program 4 (id=4304): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x454}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[], 0x20}}, 0x40000) shutdown(r2, 0x1) recvfrom(r1, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) 1.596327113s ago: executing program 6 (id=4305): syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000000)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0x1, 0x2b2, &(0x7f00000006c0)="$eJzs3U9rY1UUAPDz0jR9OosUcaMIPtCFqzJ166ZRRhC7UiKoCw3ODEgSBqYQmArGruYTuPR7+BHcuPEbDLgV3E0XlSfvX/7ga402VXR+v9Xh3nfuPXm3TbLJeZ+/Mh3ffZDE2dMnkaZJdI7iKM6T2I9ONL6JbgAA/x/neR6/5mWY5JUNM7udGy0MALgx1ef/X/rgBwD+4z78+JP3B8fHdz7IsjRe6j+eDZOImD6eDav5wf34MiZxL25HPy4i8oUqfve94zvRzQr78fp0PhsWmdPPfqzXH/wSUeYfRj/22/MPs8pK/nw23I3nI4vB/d2m1H682J7/Zkt+DHvxxmsr9R9EP376Ih7EJO5GkbvM//owy97Jv3361afFNkV+0onhXnldKfcFCQAAAAAAAAAAAAAAAAAAAACA7TrIsqRq31P27ymG6v47Oxfl/EHW2F/vz1PlJ81CVX+gvOmWM8/ju6a/zu0sy/L6wmV+N17uerAAAAAAAAAAAAAAAAAAAAAAFE4ePbk1mkzuPTx5dDq+dtB0A2h+1v931zlaGXk1TsejncsX3Nt8r9VuA0WtV14c3W5s6ba0B2eLkeeKera+xV4sRj6KKmgOZqt7vfB2tejpeJTVU81NHo+SP9srbQ7u+9WpXly3sLz8k7jI1880XZS6ntXb0t3o3Wqd+i3P883Weevn6ozqkaRssbHZ7rt10PoCiyAtziJd/OMXUz9cvuClbxk7137TAQAAAAAAAAAAAAAAAAAAWi1/9NsyeXZlaufGigIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf9jy+f9NkEbE+sgfgnmdfNU1ddCLhyf/8ksEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgGfB7AAAA//8rlFqg") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x10b) 1.354953347s ago: executing program 1 (id=4306): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), 0x0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) 1.252310089s ago: executing program 7 (id=4307): r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x7) r4 = socket$inet6(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xc}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 943.686784ms ago: executing program 7 (id=4308): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0xfffffffb}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 740.091078ms ago: executing program 4 (id=4309): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtfilter={0x4c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xf1, 0x4, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xffff}}]}}]}, 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 614.542869ms ago: executing program 4 (id=4310): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000940)='net/snmp\x00') 553.385971ms ago: executing program 6 (id=4311): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18050000000004000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000640)=r1, 0x4) sendmsg$unix(r3, 0x0, 0xc000090) 379.862543ms ago: executing program 6 (id=4312): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, [@tmpl={0xc4, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}}, {{@in6=@loopback, 0x0, 0xff}, 0x2, @in6=@empty, 0x0, 0x1, 0x1, 0x40}]}]}, 0x17c}}, 0x0) 276.335725ms ago: executing program 1 (id=4313): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60fca33f00082c00fe800000000000000000000000000000fe800000000000"], 0x0) 226.556596ms ago: executing program 1 (id=4314): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x404, &(0x7f0000000200)={[{@data_err_ignore}, {@mb_optimize_scan}]}, 0x1, 0x5e6, &(0x7f0000001200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) write$binfmt_aout(r1, &(0x7f0000000600)=ANY=[], 0x20) sendfile(r1, r0, 0x0, 0x7ffff000) 0s ago: executing program 7 (id=4315): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000400)={0xa, 0x0, 0x0, @empty}, 0x1c) r6 = dup2(r5, r5) write$tun(r6, 0x0, 0x46) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000180)='reno\x00', 0x5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@data_err_abort}, {@data_err_abort}, {@jqfmt_vfsv1}, {@dioread_lock}, {@jqfmt_vfsold}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nobarrier}, {@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0xb}}, {@dioread_nolock}]}, 0x1, 0x55c, &(0x7f0000000600)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0XUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbbVmTmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG+3dr9q7PZkkS9/ulfSWO7rN58rebz9ueVlyLit68ijhc2t1tdWV0olcvpUl6frC1emqyurJ64sFiaT+fTi9MzM6fenpl+7913ehbrG2f/+f6T2x+e+vro2ne/3D10M4nTcSBf1xrHU7jWWpmIifw9GYvTj2w41YPGBknS7x3giYzkeT4WWR9wMEbyrAf+/76MiDowpBL5D0OqOQ5oXtv36Dr4uXHvg/ULoM3xj65/NhJ7GtdG+9aSh66Msuvd8R60n7Xx65+3bmZL9O5zCIBtXbseESdHR1v6v/zT2iTv/57cyS62ebQN/R/snNvZ+OfNduOfwsb4J9qMf/a3yd0nsX3+F+72oJmOsvHf+23HvxuTVuMjee2FxphvLDl/oZxmfduLEXEsxnZn9a3mc06t3al3Wtc6/suWrP3mWDDfj7ujux9+zlypVnqamFvdux7xStvxb7Jx/JM2xz97P8522caR9NZrndZtH/+zVf8p4vW2x//BjFay9fzkZON8mGyeFZv9fePI753a73f82fHft3X840nrfG318dv4cc+/aad1D8Uf3Z//u5LPGuVd+WNXSrXa0lTEruTjzY9PP3hus97cPov/2NGt+7925//eiPi8y/hvHP751a7i79Pxn3us4//4hTsfffFDp/a76//eapSO5Y900/91u4NP894BAAAAAADAoClExIFICsWNcqFQLK7f33E49hXKlWrt+PnK8sW5aHxXdjzGCs2Z7oMt90NM5ffDNuvTj9RnIuJQRHw7srdRL85WynP9Dh4AAAAAAAAAAAAAAAAAAAAGxP4O3//P/DHS770Dnjk/+Q3Da9v878UvPQEDyf9/GF7yH4aX/IfhJf9heMl/GF7yH4aX/IfhJf8BAAAAAAAAAAAAAAAAAAAAAAAAAACgp86eOZMt9bX7V2ez+tzlleWFyuUTc2l1obi4PFucrSxdKs5XKvPltDhbWdzu9cqVyqWp6Vi+MllLq7XJ6srqucXK8sXauQuLpfn0XDq2I1EBAAAAAAAAAAAAAAAAAADA86W6srpQKpfTJYWdK4zEQOxGbwqjg7EbCj0u9LtnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//8zg2hg==") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) kernel console output (not intermixed with test programs): run } for pid=15743 comm="syz.4.3464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 628.768815][ T29] audit: type=1400 audit(1749581314.382:2533): avc: denied { unmount } for pid=8685 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 628.788866][ T29] audit: type=1400 audit(1749581314.422:2534): avc: denied { create } for pid=15743 comm="syz.4.3464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 628.808710][ T29] audit: type=1400 audit(1749581314.422:2535): avc: denied { ioctl } for pid=15743 comm="syz.4.3464" path="socket:[38049]" dev="sockfs" ino=38049 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 629.333871][T14130] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.542950][T15770] loop6: detected capacity change from 0 to 512 [ 629.550110][T15770] EXT4-fs: Ignoring removed i_version option [ 629.561027][T15771] loop4: detected capacity change from 0 to 256 [ 629.567984][T15771] msdos: Bad value for 'time_offset' [ 629.928219][T15777] loop7: detected capacity change from 0 to 512 [ 630.460227][T15796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.468777][T15796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.765008][T15770] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 630.784658][T15777] EXT4-fs (loop7): 1 orphan inode deleted [ 630.804313][T11446] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:11: Failed to release dquot type 1 [ 630.830673][T15777] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 630.845966][T15777] ext4 filesystem being mounted at /433/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 630.995456][ T6592] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.487290][T15827] loop6: detected capacity change from 0 to 512 [ 631.514140][T15827] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 631.546803][T15827] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 631.641405][T15827] System zones: 1-12 [ 631.660844][T15827] EXT4-fs (loop6): 1 truncate cleaned up [ 631.667289][T15827] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.682078][ T8685] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.692728][T15827] futex_wake_op: syz.6.3495 tries to shift op by -1; fix this program [ 631.803128][T15834] loop4: detected capacity change from 0 to 256 [ 631.810275][T15834] msdos: Bad value for 'time_offset' [ 632.528809][ T6592] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.839033][T15844] loop1: detected capacity change from 0 to 512 [ 632.850717][T15844] EXT4-fs: Ignoring removed orlov option [ 632.858390][T15844] EXT4-fs (loop1): blocks per group (71) and clusters per group (20800) inconsistent [ 633.267645][T15843] loop3: detected capacity change from 0 to 512 [ 633.322427][T15843] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 633.335159][T15843] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 633.394910][T14130] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.667906][T15860] loop1: detected capacity change from 0 to 256 [ 633.703258][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 633.703280][ T29] audit: type=1400 audit(1749581319.382:2589): avc: denied { mount } for pid=15858 comm="syz.1.3506" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 633.857249][ T29] audit: type=1400 audit(1749581319.542:2590): avc: denied { unmount } for pid=13689 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 633.921871][T15865] loop3: detected capacity change from 0 to 512 [ 633.949034][ T29] audit: type=1400 audit(1749581319.632:2591): avc: denied { create } for pid=15866 comm="syz.4.3509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 633.998169][ T29] audit: type=1400 audit(1749581319.662:2592): avc: denied { connect } for pid=15866 comm="syz.4.3509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 634.017854][ T29] audit: type=1400 audit(1749581319.662:2593): avc: denied { setopt } for pid=15866 comm="syz.4.3509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 634.037539][ T29] audit: type=1400 audit(1749581319.662:2594): avc: denied { bind } for pid=15866 comm="syz.4.3509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 634.057071][ T29] audit: type=1400 audit(1749581319.662:2595): avc: denied { write } for pid=15866 comm="syz.4.3509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 634.076553][ T29] audit: type=1400 audit(1749581319.662:2596): avc: denied { read } for pid=15866 comm="syz.4.3509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 634.121132][T15873] loop4: detected capacity change from 0 to 1024 [ 634.131216][T15865] EXT4-fs (loop3): 1 orphan inode deleted [ 634.137503][T15865] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 634.149196][T15873] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 634.162629][T11482] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 634.172383][T11482] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:19: Failed to release dquot type 1 [ 634.214796][T15879] siw: device registration error -23 [ 634.250554][ T29] audit: type=1400 audit(1749581319.902:2597): avc: denied { write } for pid=15868 comm="syz.1.3510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 634.310307][T15865] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 634.560818][T14411] Trying to write to read-only block-device loop4 [ 634.572783][T14411] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.965970][T15891] loop4: detected capacity change from 0 to 512 [ 634.973695][T14130] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.082218][T15896] loop6: detected capacity change from 0 to 1024 [ 635.089123][T15896] EXT4-fs: Ignoring removed nobh option [ 635.533290][T15896] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 635.563711][T15896] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.3515: Allocating blocks 497-513 which overlap fs metadata [ 635.578705][T15896] EXT4-fs (loop6): pa ffff888106a71a10: logic 256, phys. 385, len 8 [ 635.586822][T15896] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 636.089846][T15925] loop1: detected capacity change from 0 to 512 [ 636.150994][T15925] EXT4-fs (loop1): 1 orphan inode deleted [ 636.174530][T11478] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:17: Failed to release dquot type 1 [ 636.188363][T15925] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 636.234818][T15925] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 636.837753][ T6592] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.881035][T15933] loop6: detected capacity change from 0 to 512 [ 636.896450][T15916] lo speed is unknown, defaulting to 1000 [ 636.959533][T15933] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 636.976630][T13689] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.987009][T15933] EXT4-fs (loop6): 1 truncate cleaned up [ 636.993341][T15933] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 637.055612][ T6592] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.214385][T15956] netlink: 'syz.3.3539': attribute type 1 has an invalid length. [ 637.222148][T15956] netlink: 'syz.3.3539': attribute type 2 has an invalid length. [ 637.291720][T15963] loop3: detected capacity change from 0 to 512 [ 637.360057][T15968] loop6: detected capacity change from 0 to 512 [ 637.403629][T15963] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 637.430721][T15963] EXT4-fs (loop3): 1 truncate cleaned up [ 637.447707][T15968] EXT4-fs (loop6): 1 orphan inode deleted [ 637.449331][T15963] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 637.468271][T15968] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 637.678672][T11482] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:19: Failed to release dquot type 1 [ 637.736400][T15968] ext4 filesystem being mounted at /520/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 637.911243][T14130] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.407450][ T6592] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.428497][T15995] lo speed is unknown, defaulting to 1000 [ 638.468941][T16009] loop6: detected capacity change from 0 to 256 [ 638.760037][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 638.760054][ T29] audit: type=1400 audit(1749581324.422:2627): avc: denied { open } for pid=16018 comm="syz.3.3563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 638.785628][ T29] audit: type=1400 audit(1749581324.422:2628): avc: denied { kernel } for pid=16018 comm="syz.3.3563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 638.829315][T16022] loop3: detected capacity change from 0 to 256 [ 638.863576][ T29] audit: type=1400 audit(1749581324.542:2629): avc: denied { module_request } for pid=16020 comm="syz.3.3564" kmod="nls_cp950" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 638.889262][T16022] FAT-fs (loop3): codepage cp950 not found [ 638.897881][T16022] loop3: detected capacity change from 0 to 256 [ 638.987809][T16025] loop7: detected capacity change from 0 to 256 [ 638.994667][T16025] msdos: Bad value for 'time_offset' [ 640.314826][T16039] loop3: detected capacity change from 0 to 512 [ 640.571142][ T29] audit: type=1400 audit(1749581326.132:2630): avc: denied { create } for pid=16045 comm="syz.1.3572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 640.590932][ T29] audit: type=1400 audit(1749581326.132:2631): avc: denied { connect } for pid=16045 comm="syz.1.3572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 640.610807][ T29] audit: type=1400 audit(1749581326.142:2632): avc: denied { read } for pid=16045 comm="syz.1.3572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 640.630284][ T29] audit: type=1400 audit(1749581326.242:2633): avc: denied { create } for pid=16045 comm="syz.1.3572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 641.318138][T16053] loop7: detected capacity change from 0 to 256 [ 641.793634][T16049] siw: device registration error -23 [ 642.074875][T16058] loop7: detected capacity change from 0 to 512 [ 642.090321][T16039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 642.103034][T16039] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 642.245942][T16058] EXT4-fs: test_dummy_encryption option not supported [ 642.343643][T16063] loop1: detected capacity change from 0 to 1024 [ 642.855761][T16063] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 642.867987][T16063] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 643.047654][T14130] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.057018][T13689] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.281506][T16090] loop6: detected capacity change from 0 to 256 [ 643.318834][T16092] loop4: detected capacity change from 0 to 512 [ 643.334227][T16092] EXT4-fs: Ignoring removed nobh option [ 643.382112][T16098] macvlan0: entered promiscuous mode [ 643.391777][T16098] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3591'. [ 643.739398][ T29] audit: type=1400 audit(1749581329.422:2634): avc: denied { map } for pid=16107 comm="syz.1.3595" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=39551 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 643.763900][ T29] audit: type=1400 audit(1749581329.422:2635): avc: denied { read write } for pid=16107 comm="syz.1.3595" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=39551 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 644.069767][T16121] loop1: detected capacity change from 0 to 512 [ 644.085095][T16121] EXT4-fs: Ignoring removed nobh option [ 644.099970][ T29] audit: type=1400 audit(1749581329.782:2636): avc: denied { sys_module } for pid=16122 comm="syz.7.3602" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 644.134894][T16121] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 644.152303][T16121] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.3601: iget: bad i_size value: 38620345925642 [ 644.177646][T16121] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.3601: couldn't read orphan inode 15 (err -117) [ 644.197442][T16121] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 644.232234][ T29] audit: type=1400 audit(1749581329.912:2637): avc: denied { create } for pid=16130 comm="syz.6.3603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 644.284303][ T29] audit: type=1400 audit(1749581329.942:2638): avc: denied { append } for pid=16120 comm="syz.1.3601" path="/134/file1/cpuacct.usage_sys" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 644.308881][T11446] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm kworker/u8:11: bg 0: block 5: invalid block bitmap [ 644.322975][T11446] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 65 with error 28 [ 644.335314][T11446] EXT4-fs (loop1): This should not happen!! Data will be lost [ 644.335314][T11446] [ 644.345065][T11446] EXT4-fs (loop1): Total free blocks count 0 [ 644.351077][T11446] EXT4-fs (loop1): Free/Dirty block details [ 644.357116][T11446] EXT4-fs (loop1): free_blocks=0 [ 644.362115][T11446] EXT4-fs (loop1): dirty_blocks=65 [ 644.367380][T11446] EXT4-fs (loop1): Block reservation details [ 644.373414][T11446] EXT4-fs (loop1): i_reserved_data_blocks=65 [ 644.379104][ T29] audit: type=1400 audit(1749581329.992:2639): avc: denied { bind } for pid=16130 comm="syz.6.3603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 644.403968][T13689] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.340052][T16177] loop3: detected capacity change from 0 to 512 [ 645.388839][T16177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 645.401513][T16177] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 645.440050][ T29] audit: type=1400 audit(1749581331.122:2640): avc: denied { write } for pid=16178 comm="syz.1.3621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 645.766622][T16188] loop1: detected capacity change from 0 to 1024 [ 645.827518][T16191] loop6: detected capacity change from 0 to 512 [ 645.858936][T16191] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 645.878597][T16188] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 645.917652][T16191] EXT4-fs (loop6): 1 truncate cleaned up [ 645.927776][T16188] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 645.949159][T16191] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 646.007181][ T29] audit: type=1400 audit(1749581331.692:2641): avc: denied { create } for pid=16199 comm="syz.4.3628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 646.043832][T13689] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.058192][ T6592] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.149129][ T29] audit: type=1400 audit(1749581331.832:2642): avc: denied { connect } for pid=16199 comm="syz.4.3628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 647.062206][T16219] loop6: detected capacity change from 0 to 512 [ 647.069070][T16219] EXT4-fs: Ignoring removed i_version option [ 647.098060][T16057] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 328: padding at end of block bitmap is not set [ 647.123355][T14130] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.141665][T16222] loop7: detected capacity change from 0 to 512 [ 647.297489][T16219] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 647.324635][T16222] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 647.337563][T16222] ext4 filesystem being mounted at /456/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 647.468635][ T6592] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.038936][T16253] loop1: detected capacity change from 0 to 512 [ 649.055283][ T8685] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.143450][T16253] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 649.173567][T16253] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 649.350120][T16268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3650'. [ 649.458234][T16276] loop4: detected capacity change from 0 to 512 [ 649.466138][T16276] EXT4-fs: test_dummy_encryption option not supported [ 650.075460][T16288] loop7: detected capacity change from 0 to 512 [ 650.101064][T16288] EXT4-fs: Ignoring removed nobh option [ 650.119902][T16288] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 650.154349][T16288] EXT4-fs error (device loop7): ext4_orphan_get:1393: inode #15: comm syz.7.3656: iget: bad i_size value: 38620345925642 [ 650.199646][T16288] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.3656: couldn't read orphan inode 15 (err -117) [ 650.262569][T16288] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 650.448793][T11480] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm kworker/u8:18: bg 0: block 5: invalid block bitmap [ 650.488580][T11480] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 65 with error 28 [ 650.501005][T11480] EXT4-fs (loop7): This should not happen!! Data will be lost [ 650.501005][T11480] [ 650.510703][T11480] EXT4-fs (loop7): Total free blocks count 0 [ 650.516733][T11480] EXT4-fs (loop7): Free/Dirty block details [ 650.522858][T11480] EXT4-fs (loop7): free_blocks=0 [ 650.527965][T11480] EXT4-fs (loop7): dirty_blocks=65 [ 650.533121][T11480] EXT4-fs (loop7): Block reservation details [ 650.539151][T11480] EXT4-fs (loop7): i_reserved_data_blocks=65 [ 650.956128][ T8685] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.257812][T16328] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3672'. [ 651.370131][T16333] loop3: detected capacity change from 0 to 512 [ 651.391235][T16333] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 651.412504][ T29] audit: type=1400 audit(1749581337.092:2643): avc: denied { map } for pid=16325 comm="syz.4.3671" path="socket:[39949]" dev="sockfs" ino=39949 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 651.555600][T16333] EXT4-fs (loop3): 1 truncate cleaned up [ 651.561701][T16333] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 651.683196][T14130] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.008771][T16346] lo speed is unknown, defaulting to 1000 [ 652.776768][T16367] loop3: detected capacity change from 0 to 1024 [ 652.801208][T16365] loop7: detected capacity change from 0 to 512 [ 652.807921][T16365] EXT4-fs: Ignoring removed i_version option [ 652.905469][T16365] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 652.927829][T16367] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 652.953637][T16367] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 653.001288][T16374] loop6: detected capacity change from 0 to 512 [ 653.103592][T16374] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 653.135574][T16374] EXT4-fs (loop6): 1 truncate cleaned up [ 653.157866][T16374] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 653.172829][T13689] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.186675][T14130] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.208891][ T6592] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.254613][T16380] loop1: detected capacity change from 0 to 512 [ 653.264031][T16380] EXT4-fs: Ignoring removed nobh option [ 653.281670][T16380] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 653.298857][T16380] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.3687: iget: bad i_size value: 38620345925642 [ 653.311888][T16380] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.3687: couldn't read orphan inode 15 (err -117) [ 653.343020][T16380] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 653.384047][ T270] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm kworker/u8:5: bg 0: block 5: invalid block bitmap [ 653.397851][ T270] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 65 with error 28 [ 653.410168][ T270] EXT4-fs (loop1): This should not happen!! Data will be lost [ 653.410168][ T270] [ 653.420044][ T270] EXT4-fs (loop1): Total free blocks count 0 [ 653.426080][ T270] EXT4-fs (loop1): Free/Dirty block details [ 653.431995][ T270] EXT4-fs (loop1): free_blocks=0 [ 653.437156][ T270] EXT4-fs (loop1): dirty_blocks=65 [ 653.442348][ T270] EXT4-fs (loop1): Block reservation details [ 653.448398][ T270] EXT4-fs (loop1): i_reserved_data_blocks=65 [ 653.470014][T13689] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.799281][T16397] siw: device registration error -23 [ 653.816261][ T8685] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.427804][T16404] loop7: detected capacity change from 0 to 512 [ 654.435463][T16404] EXT4-fs: test_dummy_encryption option not supported [ 654.729933][T16416] loop6: detected capacity change from 0 to 512 [ 654.743647][T16416] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 654.755372][T16416] EXT4-fs (loop6): 1 truncate cleaned up [ 654.761827][T16416] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 654.837939][T16424] loop1: detected capacity change from 0 to 512 [ 654.867171][ T6592] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.888345][T16424] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 654.946373][T16424] ext4 filesystem being mounted at /147/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 656.152170][T16455] loop6: detected capacity change from 0 to 512 [ 656.231363][T16455] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.293419][T16455] ext4 filesystem being mounted at /557/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 656.546106][T16472] loop3: detected capacity change from 0 to 512 [ 656.586198][T16472] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 656.636947][T16472] EXT4-fs (loop3): 1 truncate cleaned up [ 656.643036][T16472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.689023][ T29] audit: type=1400 audit(1749581342.372:2644): avc: denied { ioctl } for pid=16465 comm="syz.3.3717" path="/154/file2/file1" dev="loop3" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 656.984239][T16479] loop7: detected capacity change from 0 to 512 [ 656.991363][T16479] ext4: Unknown parameter 'noacl' [ 657.700456][T16481] loop7: detected capacity change from 0 to 512 [ 657.744833][T16481] EXT4-fs: Ignoring removed nobh option [ 657.751234][T16481] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 657.814226][T16481] EXT4-fs error (device loop7): ext4_orphan_get:1393: inode #15: comm syz.7.3722: iget: bad i_size value: 38620345925642 [ 657.870416][T16481] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.3722: couldn't read orphan inode 15 (err -117) [ 657.911883][T16481] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 657.997676][T11478] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm kworker/u8:17: bg 0: block 5: invalid block bitmap [ 658.023051][T11478] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 65 with error 28 [ 658.035398][T11478] EXT4-fs (loop7): This should not happen!! Data will be lost [ 658.035398][T11478] [ 658.045097][T11478] EXT4-fs (loop7): Total free blocks count 0 [ 658.051091][T11478] EXT4-fs (loop7): Free/Dirty block details [ 658.057036][T11478] EXT4-fs (loop7): free_blocks=0 [ 658.062067][T11478] EXT4-fs (loop7): dirty_blocks=65 [ 658.067200][T11478] EXT4-fs (loop7): Block reservation details [ 658.073245][T11478] EXT4-fs (loop7): i_reserved_data_blocks=65 [ 658.144591][ T8685] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.410550][T13689] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.433218][T16493] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3726'. [ 659.073687][T16261] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 217: padding at end of block bitmap is not set [ 659.096812][T16509] loop1: detected capacity change from 0 to 512 [ 659.346588][T16509] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 659.359196][T16509] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 659.411768][ T29] audit: type=1400 audit(1749581345.072:2645): avc: denied { ioctl } for pid=16512 comm="syz.4.3733" path="socket:[41166]" dev="sockfs" ino=41166 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 659.622749][T16515] loop4: detected capacity change from 0 to 512 [ 659.696066][T16515] EXT4-fs: Ignoring removed nobh option [ 660.248570][T16523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.257237][T16523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.498331][T13689] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.745869][ T29] audit: type=1400 audit(1749581346.432:2646): avc: denied { unmount } for pid=8685 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 660.783832][T16526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3738'. [ 661.143377][T16538] loop7: detected capacity change from 0 to 512 [ 661.186075][T16538] EXT4-fs (loop7): 1 orphan inode deleted [ 661.194076][T16538] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 661.213786][T11480] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 661.223607][T11480] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:18: Failed to release dquot type 1 [ 661.281581][T16538] ext4 filesystem being mounted at /483/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 661.513935][ T6592] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.155099][T16556] loop6: detected capacity change from 0 to 256 [ 662.166080][ T8685] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.220845][T16556] msdos: Bad value for 'time_offset' [ 662.393374][T14130] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.485437][T16562] loop7: detected capacity change from 0 to 512 [ 662.492355][T16562] EXT4-fs: Ignoring removed orlov option [ 662.499376][T16562] EXT4-fs (loop7): blocks per group (71) and clusters per group (20800) inconsistent [ 663.074270][T16571] loop1: detected capacity change from 0 to 512 [ 663.081010][T16571] EXT4-fs: Ignoring removed mblk_io_submit option [ 663.196238][T16571] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 663.280965][T16573] loop7: detected capacity change from 0 to 512 [ 663.365375][T16573] EXT4-fs: Ignoring removed nobh option [ 663.449455][T16573] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 663.736946][T16573] EXT4-fs error (device loop7): ext4_orphan_get:1393: inode #15: comm syz.7.3755: iget: bad i_size value: 38620345925642 [ 663.782626][T16573] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.3755: couldn't read orphan inode 15 (err -117) [ 663.827642][T16581] loop3: detected capacity change from 0 to 512 [ 663.845299][T16573] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 663.996160][T11480] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm kworker/u8:18: bg 0: block 5: invalid block bitmap [ 664.022755][T16581] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 664.047121][T11480] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 65 with error 28 [ 664.059498][T11480] EXT4-fs (loop7): This should not happen!! Data will be lost [ 664.059498][T11480] [ 664.069184][T11480] EXT4-fs (loop7): Total free blocks count 0 [ 664.075184][T11480] EXT4-fs (loop7): Free/Dirty block details [ 664.081147][T11480] EXT4-fs (loop7): free_blocks=0 [ 664.086109][T11480] EXT4-fs (loop7): dirty_blocks=65 [ 664.091229][T11480] EXT4-fs (loop7): Block reservation details [ 664.097339][T11480] EXT4-fs (loop7): i_reserved_data_blocks=65 [ 664.150533][T16581] ext4 filesystem being mounted at /156/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 664.516492][ T8685] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.594649][T16594] loop1: detected capacity change from 0 to 256 [ 664.733500][ T29] audit: type=1400 audit(1749581350.412:2647): avc: denied { setopt } for pid=16596 comm="syz.7.3763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 664.753140][ T29] audit: type=1400 audit(1749581350.412:2648): avc: denied { read } for pid=16596 comm="syz.7.3763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 665.206917][T16602] lo speed is unknown, defaulting to 1000 [ 665.687840][T16607] loop1: detected capacity change from 0 to 512 [ 665.694741][T16607] EXT4-fs: Ignoring removed orlov option [ 665.768263][T16607] EXT4-fs (loop1): blocks per group (71) and clusters per group (20800) inconsistent [ 666.245065][T16620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.255746][T16619] loop6: detected capacity change from 0 to 1024 [ 666.272083][T16620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.297550][T16619] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 666.327947][T16619] ext4 filesystem being mounted at /560/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 666.429638][ T6592] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.517006][T16628] loop6: detected capacity change from 0 to 512 [ 666.548196][T16628] EXT4-fs: Ignoring removed nobh option [ 666.574197][T16628] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 666.618763][T16628] EXT4-fs error (device loop6): ext4_orphan_get:1393: inode #15: comm syz.6.3772: iget: bad i_size value: 38620345925642 [ 666.643890][T16628] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.3772: couldn't read orphan inode 15 (err -117) [ 666.656513][T16628] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 666.688283][T11480] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm kworker/u8:18: bg 0: block 5: invalid block bitmap [ 666.734581][T11480] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 65 with error 28 [ 666.746975][T11480] EXT4-fs (loop6): This should not happen!! Data will be lost [ 666.746975][T11480] [ 666.756719][T11480] EXT4-fs (loop6): Total free blocks count 0 [ 666.762698][T11480] EXT4-fs (loop6): Free/Dirty block details [ 666.768665][T11480] EXT4-fs (loop6): free_blocks=0 [ 666.773648][T11480] EXT4-fs (loop6): dirty_blocks=65 [ 666.778838][T11480] EXT4-fs (loop6): Block reservation details [ 666.784859][T11480] EXT4-fs (loop6): i_reserved_data_blocks=65 [ 666.846642][ T6592] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.897997][T16634] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3775'. [ 667.135488][ T29] audit: type=1404 audit(1749581352.822:2649): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 667.175718][ T29] audit: type=1404 audit(1749581352.822:2650): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 667.208813][ T29] audit: type=1400 audit(1749581352.882:2651): avc: denied { name_bind } for pid=16642 comm="syz.7.3779" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 667.230697][ T29] audit: type=1400 audit(1749581352.882:2652): avc: denied { node_bind } for pid=16642 comm="syz.7.3779" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 667.416524][ T29] audit: type=1400 audit(1749581353.102:2653): avc: denied { unmount } for pid=14130 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 667.440378][T14130] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.450455][ T29] audit: type=1400 audit(1749581353.112:2654): avc: denied { read write } for pid=13689 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 667.474781][ T29] audit: type=1400 audit(1749581353.112:2655): avc: denied { open } for pid=13689 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 667.499001][ T29] audit: type=1400 audit(1749581353.112:2656): avc: denied { ioctl } for pid=13689 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 667.736525][T16652] loop1: detected capacity change from 0 to 1024 [ 667.886972][T16652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 667.899242][T16652] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 668.348361][T16667] loop3: detected capacity change from 0 to 512 [ 668.355050][T16667] EXT4-fs: Ignoring removed orlov option [ 668.365812][T16667] EXT4-fs (loop3): blocks per group (71) and clusters per group (20800) inconsistent [ 669.163752][T13689] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.320343][T16671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3786'. [ 669.337089][T16680] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3788'. [ 669.563143][T16686] loop1: detected capacity change from 0 to 512 [ 669.569792][T16686] EXT4-fs: Ignoring removed i_version option [ 669.595229][T16686] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 669.782588][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 669.782675][ T29] audit: type=1400 audit(1749581355.462:2679): avc: denied { create } for pid=16691 comm="syz.6.3793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 669.813500][ T29] audit: type=1400 audit(1749581355.492:2680): avc: denied { name_bind } for pid=16691 comm="syz.6.3793" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 669.915317][ T29] audit: type=1400 audit(1749581355.602:2681): avc: denied { mount } for pid=16698 comm="syz.7.3796" name="/" dev="ramfs" ino=41467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 670.344525][T13689] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.668857][T16708] loop3: detected capacity change from 0 to 512 [ 670.675531][T16708] EXT4-fs: Ignoring removed orlov option [ 670.834879][T16708] EXT4-fs (loop3): blocks per group (71) and clusters per group (20800) inconsistent [ 671.385533][T16714] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3800'. [ 672.125332][ T29] audit: type=1400 audit(1749581357.772:2682): avc: denied { read } for pid=16716 comm="syz.3.3802" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 672.148633][ T29] audit: type=1400 audit(1749581357.772:2683): avc: denied { open } for pid=16716 comm="syz.3.3802" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 672.172841][ T29] audit: type=1400 audit(1749581357.772:2684): avc: denied { ioctl } for pid=16716 comm="syz.3.3802" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 672.198514][ T29] audit: type=1400 audit(1749581357.772:2685): avc: denied { read } for pid=16723 comm="syz.4.3804" dev="nsfs" ino=4026532371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 672.219826][ T29] audit: type=1400 audit(1749581357.772:2686): avc: denied { open } for pid=16723 comm="syz.4.3804" path="net:[4026532371]" dev="nsfs" ino=4026532371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 672.243197][ T29] audit: type=1400 audit(1749581357.772:2687): avc: denied { create } for pid=16723 comm="syz.4.3804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 672.262776][ T29] audit: type=1400 audit(1749581357.772:2688): avc: denied { bind } for pid=16723 comm="syz.4.3804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 672.373930][T16734] loop3: detected capacity change from 0 to 512 [ 672.407765][T16734] ext4: Unknown parameter 'noacl' [ 672.570351][T16737] loop7: detected capacity change from 0 to 512 [ 672.576937][T16737] EXT4-fs: Ignoring removed i_version option [ 672.664459][T16737] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 672.745159][T16748] loop3: detected capacity change from 0 to 1024 [ 672.811010][T16747] loop4: detected capacity change from 0 to 512 [ 672.838799][T16748] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 672.851111][T16748] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 673.300547][ T8685] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.416013][T14130] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.663438][T16768] loop1: detected capacity change from 0 to 256 [ 673.916991][T16784] loop6: detected capacity change from 0 to 512 [ 673.983430][T16784] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 673.996041][T16784] ext4 filesystem being mounted at /572/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 674.686335][T16791] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3825'. [ 675.335197][T16797] loop7: detected capacity change from 0 to 512 [ 675.371291][ T6592] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.407283][T16797] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 675.419865][T16797] ext4 filesystem being mounted at /507/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 675.719785][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 675.719801][ T29] audit: type=1400 audit(1749581361.402:2698): avc: denied { create } for pid=16802 comm="syz.6.3829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 675.809008][ T29] audit: type=1400 audit(1749581361.432:2699): avc: denied { setopt } for pid=16802 comm="syz.6.3829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 675.828819][ T29] audit: type=1400 audit(1749581361.432:2700): avc: denied { ioctl } for pid=16802 comm="syz.6.3829" path="socket:[40570]" dev="sockfs" ino=40570 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 675.853812][ T29] audit: type=1400 audit(1749581361.432:2701): avc: denied { write } for pid=16802 comm="syz.6.3829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 676.106527][ T29] audit: type=1400 audit(1749581361.772:2702): avc: denied { unmount } for pid=13689 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 676.394392][T16816] loop3: detected capacity change from 0 to 512 [ 676.401391][T16816] EXT4-fs: Ignoring removed orlov option [ 676.501825][T16816] EXT4-fs (loop3): blocks per group (71) and clusters per group (20800) inconsistent [ 676.781848][ T8685] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.965253][ T29] audit: type=1400 audit(1749581362.652:2703): avc: denied { create } for pid=16828 comm="syz.7.3838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 677.013526][ T29] audit: type=1400 audit(1749581362.672:2704): avc: denied { listen } for pid=16828 comm="syz.7.3838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 677.033227][ T29] audit: type=1400 audit(1749581362.672:2705): avc: denied { create } for pid=16828 comm="syz.7.3838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 677.353536][ T29] audit: type=1400 audit(1749581363.012:2706): avc: denied { execute } for pid=16833 comm="syz.7.3840" name="file0" dev="tmpfs" ino=2722 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 677.376044][ T29] audit: type=1400 audit(1749581363.012:2707): avc: denied { execute_no_trans } for pid=16833 comm="syz.7.3840" path="/511/file0" dev="tmpfs" ino=2722 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 679.197333][T16868] netlink: 'syz.6.3852': attribute type 1 has an invalid length. [ 679.205169][T16868] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3852'. [ 679.396783][T16876] loop4: detected capacity change from 0 to 512 [ 679.414720][T16876] EXT4-fs: Ignoring removed nobh option [ 679.476655][T16884] loop4: detected capacity change from 0 to 256 [ 680.232429][T16896] loop7: detected capacity change from 0 to 1024 [ 680.794893][T16896] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 680.806996][T16896] ext4 filesystem being mounted at /514/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 681.088062][ T8685] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.213629][T16906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3864'. [ 681.533150][T16916] loop7: detected capacity change from 0 to 512 [ 681.565959][T16916] EXT4-fs: Ignoring removed nobh option [ 681.601917][T16916] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 681.634489][T16916] EXT4-fs error (device loop7): ext4_orphan_get:1393: inode #15: comm syz.7.3869: iget: bad i_size value: 38620345925642 [ 681.661144][T16916] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.3869: couldn't read orphan inode 15 (err -117) [ 681.674192][T16916] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 681.677156][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 681.677172][ T29] audit: type=1400 audit(1749581367.362:2713): avc: denied { open } for pid=16922 comm="syz.4.3872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 681.712101][ T29] audit: type=1400 audit(1749581367.362:2714): avc: denied { kernel } for pid=16922 comm="syz.4.3872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 681.731831][ T29] audit: type=1400 audit(1749581367.382:2715): avc: denied { add_name } for pid=16915 comm="syz.7.3869" name="cpuacct.usage_sys" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 681.753817][ T29] audit: type=1400 audit(1749581367.382:2716): avc: denied { create } for pid=16915 comm="syz.7.3869" name="cpuacct.usage_sys" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 681.775228][ T29] audit: type=1400 audit(1749581367.382:2717): avc: denied { read append open } for pid=16915 comm="syz.7.3869" path="/519/file1/cpuacct.usage_sys" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 681.809305][T11478] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm kworker/u8:17: bg 0: block 5: invalid block bitmap [ 681.821839][ T29] audit: type=1400 audit(1749581367.492:2718): avc: denied { watch } for pid=16926 comm="syz.4.3874" path="/141" dev="tmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 681.829662][T11478] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 65 with error 28 [ 681.856345][T11478] EXT4-fs (loop7): This should not happen!! Data will be lost [ 681.856345][T11478] [ 681.866123][T11478] EXT4-fs (loop7): Total free blocks count 0 [ 681.872196][T11478] EXT4-fs (loop7): Free/Dirty block details [ 681.878117][T11478] EXT4-fs (loop7): free_blocks=0 [ 681.883141][T11478] EXT4-fs (loop7): dirty_blocks=65 [ 681.888375][T11478] EXT4-fs (loop7): Block reservation details [ 681.894540][T11478] EXT4-fs (loop7): i_reserved_data_blocks=65 [ 681.955202][T16929] loop3: detected capacity change from 0 to 512 [ 682.054790][ T8685] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.105821][T16929] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 682.118644][T16929] ext4 filesystem being mounted at /180/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 682.183438][T16928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.204311][ T29] audit: type=1400 audit(1749581367.862:2719): avc: denied { read write } for pid=16926 comm="syz.4.3874" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 682.227910][ T29] audit: type=1400 audit(1749581367.862:2720): avc: denied { open } for pid=16926 comm="syz.4.3874" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 682.251500][ T29] audit: type=1400 audit(1749581367.862:2721): avc: denied { ioctl } for pid=16926 comm="syz.4.3874" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 682.295543][T16928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.508447][T16934] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3876'. [ 682.771756][T16948] loop1: detected capacity change from 0 to 256 [ 683.144630][T16954] loop7: detected capacity change from 0 to 1024 [ 683.388089][T16954] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 683.400268][T16954] ext4 filesystem being mounted at /520/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 683.415289][T14130] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.532946][T16959] loop3: detected capacity change from 0 to 512 [ 683.643810][T16959] EXT4-fs: Ignoring removed nobh option [ 683.649804][T16959] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 683.671112][T16959] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.3883: iget: bad i_size value: 38620345925642 [ 683.753832][ T8685] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.912514][T16959] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.3883: couldn't read orphan inode 15 (err -117) [ 683.926094][T16959] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 683.985881][T10325] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u8:10: bg 0: block 5: invalid block bitmap [ 684.015592][T16965] loop7: detected capacity change from 0 to 512 [ 684.077110][T10325] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 65 with error 28 [ 684.089506][T10325] EXT4-fs (loop3): This should not happen!! Data will be lost [ 684.089506][T10325] [ 684.099205][T10325] EXT4-fs (loop3): Total free blocks count 0 [ 684.105235][T10325] EXT4-fs (loop3): Free/Dirty block details [ 684.111145][T10325] EXT4-fs (loop3): free_blocks=0 [ 684.116138][T10325] EXT4-fs (loop3): dirty_blocks=65 [ 684.121268][T10325] EXT4-fs (loop3): Block reservation details [ 684.127290][T10325] EXT4-fs (loop3): i_reserved_data_blocks=65 [ 684.240462][T16965] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 684.253155][T16965] ext4 filesystem being mounted at /521/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 684.449355][T14130] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.573017][ T29] audit: type=1400 audit(1749581370.252:2722): avc: denied { write } for pid=16968 comm="syz.1.3886" name="ip6_flowlabel" dev="proc" ino=4026533318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 684.964932][T16971] loop1: detected capacity change from 0 to 256 [ 684.971506][T16971] msdos: Bad value for 'time_offset' [ 685.409893][ T8685] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.521197][T16977] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3888'. [ 687.043926][T17013] loop7: detected capacity change from 0 to 512 [ 687.050942][T17013] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 687.063311][T17013] EXT4-fs (loop7): 1 truncate cleaned up [ 687.069336][T17013] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 687.091368][ T29] audit: type=1400 audit(1749581372.772:2723): avc: denied { read write } for pid=17004 comm="syz.7.3898" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 687.114130][ T29] audit: type=1400 audit(1749581372.772:2724): avc: denied { open } for pid=17004 comm="syz.7.3898" path="/525/file2/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 687.137328][ T29] audit: type=1400 audit(1749581372.772:2725): avc: denied { ioctl } for pid=17004 comm="syz.7.3898" path="/525/file2/file1" dev="loop7" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 687.192954][T17018] loop4: detected capacity change from 0 to 512 [ 687.775730][ T8685] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 687.809267][T17030] loop7: detected capacity change from 0 to 512 [ 687.845012][T17030] EXT4-fs: Ignoring removed nobh option [ 687.906499][T17030] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 688.015400][T17030] EXT4-fs error (device loop7): ext4_orphan_get:1393: inode #15: comm syz.7.3907: iget: bad i_size value: 38620345925642 [ 688.240850][T17030] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.3907: couldn't read orphan inode 15 (err -117) [ 688.291888][T17030] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 688.451210][T11480] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm kworker/u8:18: bg 0: block 5: invalid block bitmap [ 688.466323][T11480] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 65 with error 28 [ 688.478665][T11480] EXT4-fs (loop7): This should not happen!! Data will be lost [ 688.478665][T11480] [ 688.488377][T11480] EXT4-fs (loop7): Total free blocks count 0 [ 688.488392][T11480] EXT4-fs (loop7): Free/Dirty block details [ 688.488407][T11480] EXT4-fs (loop7): free_blocks=0 [ 688.505269][T11480] EXT4-fs (loop7): dirty_blocks=65 [ 688.510452][T11480] EXT4-fs (loop7): Block reservation details [ 688.516545][T11480] EXT4-fs (loop7): i_reserved_data_blocks=65 [ 688.698699][ T8685] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.083483][T17059] loop6: detected capacity change from 0 to 512 [ 689.100581][T17059] EXT4-fs (loop6): 1 orphan inode deleted [ 689.114529][T11482] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 689.124329][T11482] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:19: Failed to release dquot type 1 [ 689.139774][T17059] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 689.165003][T17059] ext4 filesystem being mounted at /593/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 689.515906][ T29] audit: type=1400 audit(1749581375.142:2726): avc: denied { write } for pid=17058 comm="syz.6.3915" path=2F3539332F66696C65312F2E02 dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 689.974602][ T6592] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 690.132901][T17071] loop3: detected capacity change from 0 to 512 [ 690.143889][T17071] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 690.156559][T17071] EXT4-fs (loop3): 1 truncate cleaned up [ 690.162666][T17071] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 690.238425][T17079] loop7: detected capacity change from 0 to 512 [ 690.265030][T17079] EXT4-fs: Ignoring removed nobh option [ 690.276542][T17079] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 690.294784][T17079] EXT4-fs error (device loop7): ext4_orphan_get:1393: inode #15: comm syz.7.3920: iget: bad i_size value: 38620345925642 [ 690.324544][T17079] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.3920: couldn't read orphan inode 15 (err -117) [ 690.344378][T17079] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 690.406341][T11446] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm kworker/u8:11: bg 0: block 5: invalid block bitmap [ 690.430724][T11446] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 65 with error 28 [ 690.443035][T11446] EXT4-fs (loop7): This should not happen!! Data will be lost [ 690.443035][T11446] [ 690.452728][T11446] EXT4-fs (loop7): Total free blocks count 0 [ 690.458824][T11446] EXT4-fs (loop7): Free/Dirty block details [ 690.464794][T11446] EXT4-fs (loop7): free_blocks=0 [ 690.469752][T11446] EXT4-fs (loop7): dirty_blocks=65 [ 690.474881][T11446] EXT4-fs (loop7): Block reservation details [ 690.480860][T11446] EXT4-fs (loop7): i_reserved_data_blocks=65 [ 690.491903][ T8685] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 690.642052][ T29] audit: type=1400 audit(1749581376.322:2727): avc: denied { create } for pid=17086 comm="syz.1.3923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 690.669904][ T29] audit: type=1400 audit(1749581376.352:2728): avc: denied { cmd } for pid=17086 comm="syz.1.3923" path="socket:[41982]" dev="sockfs" ino=41982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 690.855910][T14130] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.318825][T17099] loop6: detected capacity change from 0 to 256 [ 691.325538][T17099] msdos: Bad value for 'time_offset' [ 691.559384][T17108] loop7: detected capacity change from 0 to 512 [ 691.566142][T17108] EXT4-fs: Ignoring removed i_version option [ 691.579116][T17108] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 692.335266][ T8685] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.399560][ T29] audit: type=1400 audit(1749581378.082:2729): avc: denied { create } for pid=17124 comm="syz.7.3935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 692.419272][ T29] audit: type=1400 audit(1749581378.082:2730): avc: denied { setopt } for pid=17124 comm="syz.7.3935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 692.439053][ T29] audit: type=1400 audit(1749581378.082:2731): avc: denied { write } for pid=17124 comm="syz.7.3935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 692.458646][ T29] audit: type=1400 audit(1749581378.082:2732): avc: denied { connect } for pid=17124 comm="syz.7.3935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 692.478391][ T29] audit: type=1400 audit(1749581378.082:2733): avc: denied { name_connect } for pid=17124 comm="syz.7.3935" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 692.580943][ T29] audit: type=1400 audit(1749581378.192:2734): avc: denied { listen } for pid=17124 comm="syz.7.3935" lport=48635 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 692.601659][ T29] audit: type=1400 audit(1749581378.212:2735): avc: denied { accept } for pid=17124 comm="syz.7.3935" lport=48635 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 693.102734][T17139] loop1: detected capacity change from 0 to 512 [ 693.219749][T17139] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 693.243691][T17139] ext4 filesystem being mounted at /198/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 693.286485][T17145] loop7: detected capacity change from 0 to 512 [ 693.313336][T17145] EXT4-fs: Ignoring removed nobh option [ 693.324004][T17145] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 693.334455][T17145] EXT4-fs error (device loop7): ext4_orphan_get:1393: inode #15: comm syz.7.3941: iget: bad i_size value: 38620345925642 [ 693.348609][T17145] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.3941: couldn't read orphan inode 15 (err -117) [ 693.361608][T17145] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 693.401807][T10325] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm kworker/u8:10: bg 0: block 5: invalid block bitmap [ 693.420223][T10325] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 65 with error 28 [ 693.432535][T10325] EXT4-fs (loop7): This should not happen!! Data will be lost [ 693.432535][T10325] [ 693.442191][T10325] EXT4-fs (loop7): Total free blocks count 0 [ 693.448197][T10325] EXT4-fs (loop7): Free/Dirty block details [ 693.454201][T10325] EXT4-fs (loop7): free_blocks=0 [ 693.459327][T10325] EXT4-fs (loop7): dirty_blocks=65 [ 693.464516][T10325] EXT4-fs (loop7): Block reservation details [ 693.470508][T10325] EXT4-fs (loop7): i_reserved_data_blocks=65 [ 693.477918][ T8685] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 693.671644][T17155] loop3: detected capacity change from 0 to 512 [ 693.783629][T17157] hub 6-0:1.0: USB hub found [ 693.788605][T17157] hub 6-0:1.0: 8 ports detected [ 693.841421][ T29] audit: type=1400 audit(1749581379.432:2736): avc: denied { write } for pid=17147 comm="syz.7.3942" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 693.923217][T17155] EXT4-fs (loop3): 1 orphan inode deleted [ 693.930121][T17155] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 693.943955][ T270] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 693.953760][ T270] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 693.967589][T17155] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 695.069869][T14130] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.269759][T11482] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.313523][ T29] audit: type=1400 audit(1749581380.992:2737): avc: denied { mounton } for pid=17176 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 695.369707][T11482] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.442936][T11482] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.591885][T11482] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.737168][T17176] lo speed is unknown, defaulting to 1000 [ 695.799645][T11482] bridge_slave_1: left allmulticast mode [ 695.805360][T11482] bridge_slave_1: left promiscuous mode [ 695.811026][T11482] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.886024][T11482] bridge_slave_0: left allmulticast mode [ 695.891712][T11482] bridge_slave_0: left promiscuous mode [ 695.897357][T11482] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.037077][T17075] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 217: padding at end of block bitmap is not set [ 696.283789][T11482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 696.305458][T11482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 696.340874][T11482] bond0 (unregistering): Released all slaves [ 696.428126][T11482] tipc: Left network mode [ 696.528187][T17176] chnl_net:caif_netlink_parms(): no params data found [ 696.578347][T11482] hsr_slave_0: left promiscuous mode [ 696.588952][T17219] loop3: detected capacity change from 0 to 512 [ 696.599199][T17219] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 696.612472][T17219] EXT4-fs (loop3): 1 truncate cleaned up [ 696.618719][T17219] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 696.631840][T11482] hsr_slave_1: left promiscuous mode [ 696.637619][T11482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 696.645116][T11482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 696.660679][T11482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 696.668201][T11482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 696.686663][T11482] veth1_macvtap: left promiscuous mode [ 696.692170][T11482] veth0_macvtap: left promiscuous mode [ 696.697927][T11482] veth1_vlan: left promiscuous mode [ 696.864212][T11482] team0 (unregistering): Port device team_slave_1 removed [ 696.881555][T11482] team0 (unregistering): Port device team_slave_0 removed [ 696.993238][T17176] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.000545][T17176] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.019153][T17176] bridge_slave_0: entered allmulticast mode [ 697.032606][T17176] bridge_slave_0: entered promiscuous mode [ 697.050444][T17176] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.057607][T17176] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.066712][T17176] bridge_slave_1: entered allmulticast mode [ 697.078976][T17176] bridge_slave_1: entered promiscuous mode [ 697.110708][T17176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 697.129137][T17176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 697.167222][T17176] team0: Port device team_slave_0 added [ 697.176736][T17176] team0: Port device team_slave_1 added [ 697.216333][T17176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 697.223545][T17176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 697.249590][T17176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 697.306669][T14130] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 697.323580][T17176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 697.330723][T17176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 697.356802][T17176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 697.422164][T17264] loop3: detected capacity change from 0 to 512 [ 697.455778][T17176] hsr_slave_0: entered promiscuous mode [ 697.461964][T17176] hsr_slave_1: entered promiscuous mode [ 697.472233][T17176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 697.480462][T17176] Cannot create hsr debugfs directory [ 697.504565][T17264] EXT4-fs (loop3): 1 orphan inode deleted [ 697.510795][T17264] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 697.523821][T11482] __quota_error: 17 callbacks suppressed [ 697.523835][T11482] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 697.539304][T11482] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:19: Failed to release dquot type 1 [ 697.547692][T17264] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 697.668617][T13689] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 698.950192][T14130] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.581255][T17330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3964'. [ 699.626403][T17176] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 699.641227][T17176] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 699.660848][T17176] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 699.677147][T17176] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 699.763557][T17176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.777944][T17176] 8021q: adding VLAN 0 to HW filter on device team0 [ 699.794713][T17353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.843617][T17353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.883133][T11478] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.890227][T11478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 699.929089][T11478] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.936449][T11478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 700.118609][T17176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.377038][T17176] veth0_vlan: entered promiscuous mode [ 700.396881][T17176] veth1_vlan: entered promiscuous mode [ 700.428081][T17176] veth0_macvtap: entered promiscuous mode [ 700.444184][T17176] veth1_macvtap: entered promiscuous mode [ 700.468477][T17176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 700.483693][T17176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 700.500581][T17176] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.509342][T17176] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.518283][T17176] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.527058][T17176] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.554090][ T29] audit: type=1400 audit(1749581386.242:2755): avc: denied { mounton } for pid=17176 comm="syz-executor" path="/root/syzkaller.kJdFgT/syz-tmp" dev="sda1" ino=2059 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 700.621647][ T29] audit: type=1400 audit(1749581386.272:2756): avc: denied { mount } for pid=17176 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 700.643895][ T29] audit: type=1400 audit(1749581386.272:2757): avc: denied { mount } for pid=17176 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 700.666015][ T29] audit: type=1400 audit(1749581386.272:2758): avc: denied { mounton } for pid=17176 comm="syz-executor" path="/root/syzkaller.kJdFgT/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 700.693020][ T29] audit: type=1400 audit(1749581386.272:2759): avc: denied { mounton } for pid=17176 comm="syz-executor" path="/root/syzkaller.kJdFgT/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=42782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 700.720726][ T29] audit: type=1400 audit(1749581386.282:2760): avc: denied { mounton } for pid=17176 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 700.743762][ T29] audit: type=1400 audit(1749581386.282:2761): avc: denied { mount } for pid=17176 comm="syz-executor" name="/" dev="gadgetfs" ino=3772 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 700.865456][ T29] audit: type=1400 audit(1749581386.512:2762): avc: denied { connect } for pid=17434 comm="syz.4.3971" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 700.886159][ T29] audit: type=1400 audit(1749581386.512:2763): avc: denied { write } for pid=17434 comm="syz.4.3971" laddr=fe80::445b:9bff:feba:69db lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 700.989183][T17441] loop1: detected capacity change from 0 to 512 [ 701.144538][T17441] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 701.198044][T17441] ext4 filesystem being mounted at /201/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 701.508854][T17465] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3975'. [ 701.818751][T17504] loop4: detected capacity change from 0 to 512 [ 701.833986][T17504] EXT4-fs: Ignoring removed nobh option [ 702.483741][T17518] siw: device registration error -23 [ 702.554781][T17523] loop7: detected capacity change from 0 to 512 [ 702.561572][T17523] ext4: Unknown parameter 'noacl' [ 703.370465][T17535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3990'. [ 703.512941][T17539] loop3: detected capacity change from 0 to 512 [ 703.582298][T17539] EXT4-fs: Ignoring removed nobh option [ 703.684811][T17539] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 703.720159][T17539] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.3992: iget: bad i_size value: 38620345925642 [ 703.776940][T17539] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.3992: couldn't read orphan inode 15 (err -117) [ 703.814222][T17539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 703.924650][T11446] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u8:11: bg 0: block 5: invalid block bitmap [ 703.966147][T11446] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 65 with error 28 [ 703.978463][T11446] EXT4-fs (loop3): This should not happen!! Data will be lost [ 703.978463][T11446] [ 703.988118][T11446] EXT4-fs (loop3): Total free blocks count 0 [ 703.994126][T11446] EXT4-fs (loop3): Free/Dirty block details [ 704.000111][T11446] EXT4-fs (loop3): free_blocks=0 [ 704.005122][T11446] EXT4-fs (loop3): dirty_blocks=65 [ 704.010243][T11446] EXT4-fs (loop3): Block reservation details [ 704.016256][T11446] EXT4-fs (loop3): i_reserved_data_blocks=65 [ 704.091199][T14130] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.121736][T17453] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 217: padding at end of block bitmap is not set [ 704.444875][T17553] loop7: detected capacity change from 0 to 512 [ 704.451896][T17553] EXT4-fs: Ignoring removed orlov option [ 704.606571][T17553] EXT4-fs (loop7): blocks per group (71) and clusters per group (20800) inconsistent [ 704.758112][T17559] loop3: detected capacity change from 0 to 512 [ 704.790397][T17559] EXT4-fs: Ignoring removed nobh option [ 704.800703][T17559] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 704.811116][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 704.811126][ T29] audit: type=1400 audit(1749581390.492:2767): avc: denied { mount } for pid=17561 comm="syz.6.4000" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 704.868440][T17559] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.3996: iget: bad i_size value: 38620345925642 [ 704.886522][T17567] IPv6: sit1: Disabled Multicast RS [ 704.900283][T13689] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.910321][T17559] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.3996: couldn't read orphan inode 15 (err -117) [ 704.925325][T17559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 705.005604][T17575] loop4: detected capacity change from 0 to 512 [ 705.615933][T17589] loop7: detected capacity change from 0 to 512 [ 705.622726][T17589] EXT4-fs: Ignoring removed i_version option [ 705.632503][T17589] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 705.826763][T11480] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u8:18: bg 0: block 5: invalid block bitmap [ 705.851973][T11480] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 65 with error 28 [ 705.864387][T11480] EXT4-fs (loop3): This should not happen!! Data will be lost [ 705.864387][T11480] [ 705.874065][T11480] EXT4-fs (loop3): Total free blocks count 0 [ 705.880090][T11480] EXT4-fs (loop3): Free/Dirty block details [ 705.886098][T11480] EXT4-fs (loop3): free_blocks=0 [ 705.891138][T11480] EXT4-fs (loop3): dirty_blocks=65 [ 705.896336][T11480] EXT4-fs (loop3): Block reservation details [ 705.902319][T11480] EXT4-fs (loop3): i_reserved_data_blocks=65 [ 706.031743][T14130] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.395267][ T8685] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.716460][ T29] audit: type=1400 audit(1749581392.532:2768): avc: denied { write } for pid=17603 comm="syz.7.4013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 707.736706][ T29] audit: type=1400 audit(1749581392.532:2769): avc: denied { nlmsg_write } for pid=17603 comm="syz.7.4013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 708.289258][T17604] loop6: detected capacity change from 0 to 512 [ 708.306196][T17622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4019'. [ 708.336098][T17604] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 708.380876][T17604] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 708.991574][T17176] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 709.883645][T17673] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4033'. [ 709.893287][T17673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4033'. [ 710.960335][ T29] audit: type=1400 audit(1749581396.642:2770): avc: denied { ioctl } for pid=17702 comm="syz.7.4043" path="socket:[44170]" dev="sockfs" ino=44170 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 711.122165][ T29] audit: type=1400 audit(1749581396.802:2771): avc: denied { create } for pid=17710 comm="syz.3.4047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 711.155684][T17707] loop4: detected capacity change from 0 to 512 [ 711.162427][T17707] ext4: Unknown parameter 'noacl' [ 712.095812][T17728] siw: device registration error -23 [ 713.220038][T17751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.254614][T17751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.318387][T17753] loop7: detected capacity change from 0 to 512 [ 713.494894][T17753] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 713.507453][T17753] ext4 filesystem being mounted at /561/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 713.889830][ T29] audit: type=1404 audit(1749581399.572:2772): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 713.933607][T17764] loop3: detected capacity change from 0 to 512 [ 713.940521][T17764] ext4: Unknown parameter 'noacl' [ 713.980355][ T29] audit: type=1404 audit(1749581399.602:2773): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 713.995388][ T29] audit: type=1400 audit(1749581399.612:2774): avc: denied { prog_load } for pid=17762 comm="syz.3.4062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 714.014558][ T29] audit: type=1400 audit(1749581399.612:2775): avc: denied { bpf } for pid=17762 comm="syz.3.4062" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 714.036140][ T29] audit: type=1400 audit(1749581399.612:2776): avc: denied { perfmon } for pid=17762 comm="syz.3.4062" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 714.057598][ T29] audit: type=1400 audit(1749581399.612:2777): avc: denied { prog_run } for pid=17762 comm="syz.3.4062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 714.076647][ T29] audit: type=1400 audit(1749581399.612:2778): avc: denied { read write } for pid=17762 comm="syz.3.4062" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 714.100770][ T29] audit: type=1400 audit(1749581399.612:2779): avc: denied { open } for pid=17762 comm="syz.3.4062" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 714.165298][T17767] siw: device registration error -23 [ 714.587085][T17778] loop6: detected capacity change from 0 to 512 [ 714.593768][T17778] EXT4-fs: Ignoring removed i_version option [ 714.605892][T17778] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 714.675257][ T8685] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.817534][T17784] loop1: detected capacity change from 0 to 1024 [ 714.828170][T17784] EXT4-fs: Ignoring removed nobh option [ 715.367210][T17176] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.416979][T17784] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 715.705816][T17784] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.4067: Allocating blocks 497-513 which overlap fs metadata [ 715.723141][T17784] EXT4-fs (loop1): pa ffff888106a71a10: logic 256, phys. 385, len 8 [ 715.731171][T17784] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 715.742458][T17799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.771365][T17799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.066888][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 716.066902][ T29] audit: type=1400 audit(1749581401.752:2806): avc: denied { create } for pid=17796 comm="syz.6.4071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 716.128898][ T29] audit: type=1400 audit(1749581401.782:2807): avc: denied { write } for pid=17796 comm="syz.6.4071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 716.149498][ T29] audit: type=1400 audit(1749581401.782:2808): avc: denied { read } for pid=17796 comm="syz.6.4071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 716.645381][ T29] audit: type=1400 audit(1749581402.202:2809): avc: denied { create } for pid=17802 comm="syz.3.4073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 716.665177][ T29] audit: type=1400 audit(1749581402.202:2810): avc: denied { write } for pid=17802 comm="syz.3.4073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 717.096093][ T29] audit: type=1400 audit(1749581402.772:2811): avc: denied { create } for pid=17812 comm="syz.7.4075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 717.115618][ T29] audit: type=1400 audit(1749581402.772:2812): avc: denied { write } for pid=17812 comm="syz.7.4075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 717.139744][T17815] siw: device registration error -23 [ 717.243491][ T29] audit: type=1400 audit(1749581402.922:2813): avc: denied { read } for pid=17820 comm="syz.3.4079" dev="nsfs" ino=4026532412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 717.264813][ T29] audit: type=1400 audit(1749581402.922:2814): avc: denied { open } for pid=17820 comm="syz.3.4079" path="net:[4026532412]" dev="nsfs" ino=4026532412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 717.342798][T17826] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 717.411913][ T29] audit: type=1400 audit(1749581403.062:2815): avc: denied { read } for pid=17821 comm="syz.4.4080" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 718.543412][T17859] loop3: detected capacity change from 0 to 512 [ 718.550242][T17859] ext4: Unknown parameter 'noacl' [ 719.355807][T17880] loop6: detected capacity change from 0 to 512 [ 719.362482][T17880] EXT4-fs: Ignoring removed i_version option [ 719.375676][T17880] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 719.473467][T13689] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 719.543220][T17895] loop4: detected capacity change from 0 to 512 [ 720.144835][T17176] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.496033][T17908] loop6: detected capacity change from 0 to 512 [ 720.522089][T17908] EXT4-fs: Ignoring removed nobh option [ 720.531201][T17908] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 720.541670][T17908] EXT4-fs error (device loop6): ext4_orphan_get:1393: inode #15: comm syz.6.4106: iget: bad i_size value: 38620345925642 [ 720.555743][T17908] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.4106: couldn't read orphan inode 15 (err -117) [ 720.568477][T17908] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 720.619240][T11482] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm kworker/u8:19: bg 0: block 5: invalid block bitmap [ 720.633725][T11482] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 65 with error 28 [ 720.646135][T11482] EXT4-fs (loop6): This should not happen!! Data will be lost [ 720.646135][T11482] [ 720.655796][T11482] EXT4-fs (loop6): Total free blocks count 0 [ 720.661804][T11482] EXT4-fs (loop6): Free/Dirty block details [ 720.667729][T11482] EXT4-fs (loop6): free_blocks=0 [ 720.672682][T11482] EXT4-fs (loop6): dirty_blocks=65 [ 720.677943][T11482] EXT4-fs (loop6): Block reservation details [ 720.683972][T11482] EXT4-fs (loop6): i_reserved_data_blocks=65 [ 720.802014][T17176] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.924582][T17922] loop1: detected capacity change from 0 to 1024 [ 720.992058][T17922] EXT4-fs: Ignoring removed nobh option [ 721.032334][T17925] loop7: detected capacity change from 0 to 512 [ 721.070730][T17925] EXT4-fs: Ignoring removed nobh option [ 721.099484][T17922] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 721.120455][T17925] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 721.132852][T17925] EXT4-fs error (device loop7): ext4_orphan_get:1393: inode #15: comm syz.7.4114: iget: bad i_size value: 38620345925642 [ 721.175783][T17925] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.4114: couldn't read orphan inode 15 (err -117) [ 721.271030][T17922] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.4112: Allocating blocks 497-513 which overlap fs metadata [ 721.303860][T17925] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 721.311049][T17922] EXT4-fs (loop1): pa ffff888106a71a10: logic 256, phys. 385, len 8 [ 721.324483][T17922] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 721.327567][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 721.327582][ T29] audit: type=1400 audit(1749581407.012:2838): avc: denied { create } for pid=17935 comm="syz.3.4116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 721.526027][T17940] loop3: detected capacity change from 0 to 512 [ 721.532765][T17940] EXT4-fs: Ignoring removed i_version option [ 721.549890][T17940] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 721.740873][ T8685] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.762732][ T29] audit: type=1400 audit(1749581407.442:2839): avc: denied { open } for pid=17943 comm="syz.7.4118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 721.782183][ T29] audit: type=1400 audit(1749581407.442:2840): avc: denied { kernel } for pid=17943 comm="syz.7.4118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 722.382953][T14130] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.846844][T17966] loop7: detected capacity change from 0 to 512 [ 723.126786][T17966] EXT4-fs (loop7): 1 orphan inode deleted [ 723.133264][T17966] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 723.146232][T11446] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 723.154776][T17966] ext4 filesystem being mounted at /577/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 723.155998][T11446] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:11: Failed to release dquot type 1 [ 723.494080][ T29] audit: type=1400 audit(1749581409.062:2841): avc: denied { write } for pid=17965 comm="syz.7.4126" path=2F3537372F66696C65312F2E02 dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 723.756957][ T8685] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.924139][T17990] loop4: detected capacity change from 0 to 512 [ 723.930844][T17990] ext4: Unknown parameter 'noacl' [ 724.699235][T13689] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 726.642656][T18045] loop7: detected capacity change from 0 to 1024 [ 726.695086][T18045] EXT4-fs: Ignoring removed nobh option [ 726.836638][T18045] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 727.204153][T18045] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.4151: Allocating blocks 497-513 which overlap fs metadata [ 727.294267][T18045] EXT4-fs (loop7): pa ffff888106a9bc40: logic 256, phys. 385, len 8 [ 727.302336][T18045] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 727.901840][ T29] audit: type=1400 audit(1749581413.582:2842): avc: denied { listen } for pid=18074 comm="syz.1.4161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 728.331727][ T29] audit: type=1400 audit(1749581413.662:2843): avc: denied { create } for pid=18074 comm="syz.1.4161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 728.642114][T18085] loop3: detected capacity change from 0 to 512 [ 728.685455][T18085] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 728.714895][T18094] syz_tun: entered allmulticast mode [ 728.723850][T18085] ext4 filesystem being mounted at /250/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 728.739853][T18093] syz_tun: left allmulticast mode [ 729.893597][T18122] loop4: detected capacity change from 0 to 512 [ 729.919951][T18122] EXT4-fs: Ignoring removed nobh option [ 730.563744][T18092] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 217: padding at end of block bitmap is not set [ 730.767458][T18131] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4178'. [ 730.768284][ T29] audit: type=1400 audit(1749581416.452:2844): avc: denied { create } for pid=18127 comm="syz.6.4178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 730.797076][ T29] audit: type=1400 audit(1749581416.452:2845): avc: denied { write } for pid=18127 comm="syz.6.4178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 730.842847][ T8685] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.958276][T18134] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4180'. [ 731.833856][T18154] loop7: detected capacity change from 0 to 512 [ 732.140819][T18160] loop4: detected capacity change from 0 to 512 [ 732.147499][T18160] ext4: Unknown parameter 'noacl' [ 732.289931][ T29] audit: type=1400 audit(1749581417.962:2846): avc: denied { write } for pid=18162 comm="syz.4.4190" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 732.313245][ T29] audit: type=1400 audit(1749581417.962:2847): avc: denied { open } for pid=18162 comm="syz.4.4190" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 732.336748][ T29] audit: type=1400 audit(1749581417.972:2848): avc: denied { ioctl } for pid=18162 comm="syz.4.4190" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 732.413660][T18154] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 732.426179][T18154] ext4 filesystem being mounted at /583/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 732.567015][T18168] loop1: detected capacity change from 0 to 512 [ 732.608974][T18170] loop4: detected capacity change from 0 to 512 [ 732.628847][T18170] EXT4-fs: Ignoring removed nobh option [ 732.699514][T18168] EXT4-fs (loop1): 1 orphan inode deleted [ 732.714732][T10325] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 732.724603][T10325] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:10: Failed to release dquot type 1 [ 732.743871][T18168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 732.799492][T18168] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 733.025097][ T8685] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.425545][ T29] audit: type=1404 audit(1749581419.052:2849): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 733.440588][ T29] audit: type=1404 audit(1749581419.052:2850): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 733.518787][T14130] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.532051][T13689] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.532657][ T29] audit: type=1400 audit(1749581419.202:2851): avc: denied { unmount } for pid=14130 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 733.561001][ T29] audit: type=1400 audit(1749581419.242:2852): avc: denied { read write } for pid=13689 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 733.585304][ T29] audit: type=1400 audit(1749581419.242:2853): avc: denied { open } for pid=13689 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 733.609535][ T29] audit: type=1400 audit(1749581419.242:2854): avc: denied { ioctl } for pid=13689 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 733.653516][ T29] audit: type=1400 audit(1749581419.332:2855): avc: denied { execmem } for pid=18188 comm="syz.1.4198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 733.693136][ T29] audit: type=1400 audit(1749581419.372:2856): avc: denied { map } for pid=18184 comm="syz.7.4195" path="socket:[45202]" dev="sockfs" ino=45202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 733.757051][ T29] audit: type=1400 audit(1749581419.432:2857): avc: denied { name_bind } for pid=18192 comm="syz.3.4197" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 733.778924][ T29] audit: type=1400 audit(1749581419.432:2858): avc: denied { node_bind } for pid=18192 comm="syz.3.4197" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 733.856668][T18201] loop1: detected capacity change from 0 to 512 [ 733.884778][T18201] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 733.913252][T18201] EXT4-fs (loop1): 1 truncate cleaned up [ 733.919401][T18201] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 735.709892][T13689] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 735.876214][T18216] loop6: detected capacity change from 0 to 512 [ 735.884353][T18216] EXT4-fs: Ignoring removed nobh option [ 735.894014][T18216] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 735.977016][T18216] EXT4-fs error (device loop6): ext4_orphan_get:1393: inode #15: comm syz.6.4206: iget: bad i_size value: 38620345925642 [ 736.001725][T18216] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.4206: couldn't read orphan inode 15 (err -117) [ 736.034928][T18216] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 736.086336][T11446] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm kworker/u8:11: bg 0: block 5: invalid block bitmap [ 736.099340][T11446] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 65 with error 28 [ 736.111659][T11446] EXT4-fs (loop6): This should not happen!! Data will be lost [ 736.111659][T11446] [ 736.121401][T11446] EXT4-fs (loop6): Total free blocks count 0 [ 736.127491][T11446] EXT4-fs (loop6): Free/Dirty block details [ 736.133393][T11446] EXT4-fs (loop6): free_blocks=0 [ 736.138482][T11446] EXT4-fs (loop6): dirty_blocks=65 [ 736.143649][T11446] EXT4-fs (loop6): Block reservation details [ 736.149638][T11446] EXT4-fs (loop6): i_reserved_data_blocks=65 [ 736.180849][T17176] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.210284][T18226] loop3: detected capacity change from 0 to 512 [ 736.315999][T18226] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 736.328740][T18226] ext4 filesystem being mounted at /254/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 737.715390][T18247] loop1: detected capacity change from 0 to 512 [ 737.726940][T18247] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 737.747030][T14130] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 737.828039][T18247] EXT4-fs (loop1): 1 truncate cleaned up [ 737.834732][T18247] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 737.940883][T18254] sctp: [Deprecated]: syz.4.4218 (pid 18254) Use of struct sctp_assoc_value in delayed_ack socket option. [ 737.940883][T18254] Use struct sctp_sack_info instead [ 739.507417][T13689] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 739.579119][T18259] loop6: detected capacity change from 0 to 512 [ 739.612784][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 739.612796][ T29] audit: type=1400 audit(1749581425.292:2899): avc: denied { module_request } for pid=18260 comm="syz.4.4220" kmod="netdev-syz_tun" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 739.713196][T18267] siw: device registration error -23 [ 739.741914][ T29] audit: type=1400 audit(1749581425.342:2900): avc: denied { sys_module } for pid=18260 comm="syz.4.4220" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 739.763155][ T29] audit: type=1400 audit(1749581425.392:2901): avc: denied { create } for pid=18256 comm="syz.3.4217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 739.783518][ T29] audit: type=1400 audit(1749581425.392:2902): avc: denied { write } for pid=18256 comm="syz.3.4217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 739.895090][T18259] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 739.925200][T18259] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 740.021085][ T29] audit: type=1400 audit(1749581425.702:2903): avc: denied { create } for pid=18273 comm=77DEA305FF07 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 740.069287][T18274] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 740.077926][T18274] netlink: 'wÞ£ÿ': attribute type 30 has an invalid length. [ 740.102640][ T29] audit: type=1400 audit(1749581425.752:2904): avc: denied { setopt } for pid=18273 comm=77DEA305FF07 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 740.192629][T18274] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 740.201477][T18274] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 740.210202][T18274] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 740.218959][T18274] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 740.265136][T18274] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 740.273831][T18274] netlink: 'wÞ£ÿ': attribute type 30 has an invalid length. [ 741.070861][ T29] audit: type=1400 audit(1749581426.752:2905): avc: denied { create } for pid=18285 comm="syz.7.4225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 741.137754][T18297] lo speed is unknown, defaulting to 1000 [ 741.495490][T18301] loop1: detected capacity change from 0 to 512 [ 741.531853][ T29] audit: type=1400 audit(1749581426.782:2906): avc: denied { write } for pid=18285 comm="syz.7.4225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 741.581249][T18301] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 741.593785][T18301] ext4 filesystem being mounted at /236/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 741.887047][T18308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4229'. [ 742.230992][ T29] audit: type=1400 audit(1749581427.572:2907): avc: denied { write } for pid=18305 comm="syz.4.4229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 742.251334][ T29] audit: type=1400 audit(1749581427.572:2908): avc: denied { nlmsg_write } for pid=18305 comm="syz.4.4229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 742.964446][T18312] loop3: detected capacity change from 0 to 512 [ 743.333490][T18312] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 743.980184][T18221] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 217: padding at end of block bitmap is not set [ 744.003872][T13689] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 744.218064][T18317] loop4: detected capacity change from 0 to 512 [ 745.866526][T18312] EXT4-fs (loop3): 1 truncate cleaned up [ 745.872810][T18312] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 745.944906][T14130] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 746.250301][T18338] loop7: detected capacity change from 0 to 512 [ 746.269040][T18338] EXT4-fs: Ignoring removed mblk_io_submit option [ 746.327654][T18338] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 746.370175][ T29] audit: type=1400 audit(1749581431.992:2909): avc: denied { bind } for pid=18335 comm="syz.4.4240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 746.429812][T18338] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec118, mo2=0002] [ 746.499240][T18338] System zones: 1-12 [ 746.526891][T18338] EXT4-fs (loop7): 1 truncate cleaned up [ 746.585547][T18338] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 746.622868][T18346] loop1: detected capacity change from 0 to 512 [ 746.629605][T18346] EXT4-fs: Ignoring removed nobh option [ 746.635644][T18346] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 746.658571][T18346] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.4242: iget: bad i_size value: 38620345925642 [ 746.676212][T18338] EXT4-fs error (device loop7): ext4_lookup:1787: inode #15: comm syz.7.4241: iget: bad extra_isize 46 (inode size 256) [ 746.689124][T18346] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.4242: couldn't read orphan inode 15 (err -117) [ 746.702953][T18346] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 746.729205][ T8685] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 746.740703][ T12] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm kworker/u8:0: bg 0: block 5: invalid block bitmap [ 746.753993][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 65 with error 28 [ 746.766315][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 746.766315][ T12] [ 746.776074][ T12] EXT4-fs (loop1): Total free blocks count 0 [ 746.782073][ T12] EXT4-fs (loop1): Free/Dirty block details [ 746.788133][ T12] EXT4-fs (loop1): free_blocks=0 [ 746.793196][ T12] EXT4-fs (loop1): dirty_blocks=65 [ 746.798350][ T12] EXT4-fs (loop1): Block reservation details [ 746.804445][ T12] EXT4-fs (loop1): i_reserved_data_blocks=65 [ 746.811531][T13689] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 747.066902][T18358] wg1: entered promiscuous mode [ 747.071911][T18358] wg1: entered allmulticast mode [ 747.091417][ T29] audit: type=1400 audit(1749581432.752:2910): avc: denied { read write } for pid=18357 comm="syz.4.4247" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 747.115737][ T29] audit: type=1400 audit(1749581432.752:2911): avc: denied { open } for pid=18357 comm="syz.4.4247" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 747.149456][T18359] loop1: detected capacity change from 0 to 512 [ 748.036407][T18359] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 748.048968][T18359] ext4 filesystem being mounted at /240/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 748.568831][ T29] audit: type=1400 audit(1749581434.242:2912): avc: denied { mounton } for pid=18390 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 748.592655][ T270] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 748.603003][ T270] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.701027][ T29] audit: type=1400 audit(1749581434.382:2913): avc: denied { read } for pid=18391 comm="syz.3.4259" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 748.724329][ T29] audit: type=1400 audit(1749581434.382:2914): avc: denied { open } for pid=18391 comm="syz.3.4259" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 748.748628][ T29] audit: type=1400 audit(1749581434.382:2915): avc: denied { ioctl } for pid=18391 comm="syz.3.4259" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 748.816264][T13689] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.846740][ T270] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 748.857054][ T270] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.937949][ T270] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 748.948410][ T270] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.075814][ T270] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.086299][ T270] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.121417][T17176] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 749.140663][T18390] lo speed is unknown, defaulting to 1000 [ 749.300393][ T270] bridge_slave_1: left allmulticast mode [ 749.306213][ T270] bridge_slave_1: left promiscuous mode [ 749.311848][ T270] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.496049][ T270] bridge_slave_0: left allmulticast mode [ 749.501741][ T270] bridge_slave_0: left promiscuous mode [ 749.507447][ T270] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.527483][ T29] audit: type=1400 audit(1749581435.212:2916): avc: denied { read } for pid=3037 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 750.022077][T18424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4266'. [ 750.049276][ T29] audit: type=1400 audit(1749581435.732:2917): avc: denied { setopt } for pid=18425 comm="syz.3.4267" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 750.071501][ T29] audit: type=1404 audit(1749581435.762:2918): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 750.115412][ T270] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 750.128435][ T270] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 750.138339][ T270] bond0 (unregistering): Released all slaves [ 750.237555][ T270] tipc: Disabling bearer [ 750.242851][ T270] tipc: Left network mode [ 750.245700][T18428] lo: entered allmulticast mode [ 750.261259][T18425] lo: left allmulticast mode [ 750.413498][ T270] hsr_slave_0: left promiscuous mode [ 750.420230][ T270] hsr_slave_1: left promiscuous mode [ 750.426149][ T270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 750.433621][ T270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 750.444560][ T270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 750.452063][ T270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 750.506719][ T270] veth1_macvtap: left promiscuous mode [ 750.517175][ T270] veth0_macvtap: left promiscuous mode [ 750.532727][ T270] veth1_vlan: left promiscuous mode [ 751.020662][T18459] loop6: detected capacity change from 0 to 512 [ 751.102547][ T270] team0 (unregistering): Port device team_slave_1 removed [ 751.136498][ T270] team0 (unregistering): Port device team_slave_0 removed [ 751.211469][T18459] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 751.229560][ T10] lo speed is unknown, defaulting to 1000 [ 751.235595][ T10] infiniband syz0: ib_query_port failed (-19) [ 751.237482][T18459] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 751.275298][T18469] loop4: detected capacity change from 0 to 1024 [ 751.282037][T18469] EXT4-fs: Ignoring removed nobh option [ 751.333673][T18390] chnl_net:caif_netlink_parms(): no params data found [ 751.377821][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 751.377832][ T29] audit: type=1400 audit(1749581437.062:2963): avc: denied { name_bind } for pid=18471 comm="syz.3.4276" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 751.405746][ T29] audit: type=1400 audit(1749581437.062:2964): avc: denied { node_bind } for pid=18471 comm="syz.3.4276" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 751.434925][T18464] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 217: padding at end of block bitmap is not set [ 751.478040][T18390] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.485293][T18390] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.494149][T18390] bridge_slave_0: entered allmulticast mode [ 751.501035][T18390] bridge_slave_0: entered promiscuous mode [ 751.509707][T18390] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.516826][T18390] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.569016][T18390] bridge_slave_1: entered allmulticast mode [ 751.635014][T18390] bridge_slave_1: entered promiscuous mode [ 751.677912][T18390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 751.700692][T18390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 751.738881][T18390] team0: Port device team_slave_0 added [ 751.748122][T18390] team0: Port device team_slave_1 added [ 751.785255][T18390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 751.792342][T18390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 751.818328][T18390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 751.838882][T18390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 751.845879][T18390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 751.871917][T18390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 751.905167][T18390] hsr_slave_0: entered promiscuous mode [ 751.911367][T18390] hsr_slave_1: entered promiscuous mode [ 751.920444][T18390] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 751.939248][T18390] Cannot create hsr debugfs directory [ 752.243429][ T29] audit: type=1400 audit(1749581437.912:2965): avc: denied { read } for pid=18390 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 752.264523][T18510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4278'. [ 752.273871][T18390] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 752.285461][T18390] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 752.315718][T18390] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 752.343666][ T29] audit: type=1400 audit(1749581438.022:2966): avc: denied { create } for pid=18515 comm="syz.3.4279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 752.344448][T18390] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 752.363312][ T29] audit: type=1400 audit(1749581438.022:2967): avc: denied { getopt } for pid=18515 comm="syz.3.4279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 752.363358][ T29] audit: type=1400 audit(1749581438.022:2968): avc: denied { connect } for pid=18515 comm="syz.3.4279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 752.409301][ T29] audit: type=1400 audit(1749581438.022:2969): avc: denied { name_connect } for pid=18515 comm="syz.3.4279" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 752.432617][T18517] sctp: [Deprecated]: syz.3.4279 (pid 18517) Use of struct sctp_assoc_value in delayed_ack socket option. [ 752.432617][T18517] Use struct sctp_sack_info instead [ 752.458870][ T29] audit: type=1400 audit(1749581438.122:2970): avc: denied { setopt } for pid=18515 comm="syz.3.4279" laddr=::ac14:140b lport=33825 faddr=::ac14:140b fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 752.490585][ T29] audit: type=1400 audit(1749581438.142:2971): avc: denied { unmount } for pid=13689 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 752.559787][T18523] lo: entered allmulticast mode [ 752.566787][T18521] lo: left allmulticast mode [ 752.800892][T18390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 752.826768][ T29] audit: type=1404 audit(1749581438.502:2972): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 752.865661][T18390] 8021q: adding VLAN 0 to HW filter on device team0 [ 752.875284][T18541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.885407][T11461] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.892587][T11461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 752.899910][T18541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.947063][T11482] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.954173][T11482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 753.080178][T18390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 753.286008][T18390] veth0_vlan: entered promiscuous mode [ 753.301074][T18390] veth1_vlan: entered promiscuous mode [ 753.324854][T18390] veth0_macvtap: entered promiscuous mode [ 753.339481][T18390] veth1_macvtap: entered promiscuous mode [ 753.357898][T18390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 753.370689][T18390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 753.382237][T18390] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.391098][T18390] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.399863][T18390] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.408802][T18390] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.472187][T18601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4288'. [ 753.821823][T17176] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 754.512903][T18648] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4299'. [ 754.888572][T18660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.156777][T18660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.314142][T18666] loop6: detected capacity change from 0 to 256 [ 756.634712][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 756.634728][ T29] audit: type=1400 audit(1749581442.322:3037): avc: denied { create } for pid=18686 comm="syz.6.4312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 756.662025][ T29] audit: type=1400 audit(1749581442.352:3038): avc: denied { write } for pid=18686 comm="syz.6.4312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 756.677223][T18692] loop1: detected capacity change from 0 to 1024 [ 756.682301][ T29] audit: type=1400 audit(1749581442.352:3039): avc: denied { nlmsg_write } for pid=18686 comm="syz.6.4312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 756.710777][T18692] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 756.723591][ T29] audit: type=1400 audit(1749581442.412:3040): avc: denied { mount } for pid=18691 comm="syz.1.4314" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 756.745712][ T29] audit: type=1400 audit(1749581442.412:3041): avc: denied { add_name } for pid=18691 comm="syz.1.4314" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 756.766401][ T29] audit: type=1400 audit(1749581442.412:3042): avc: denied { create } for pid=18691 comm="syz.1.4314" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 756.786671][ T29] audit: type=1400 audit(1749581442.412:3043): avc: denied { read open } for pid=18691 comm="syz.1.4314" path="/253/bus/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 756.809544][ T29] audit: type=1400 audit(1749581442.412:3044): avc: denied { write } for pid=18691 comm="syz.1.4314" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 756.907165][T18696] ================================================================== [ 756.915287][T18696] BUG: KCSAN: data-race in __filemap_add_folio / filemap_write_and_wait_range [ 756.924264][T18696] [ 756.926598][T18696] read-write to 0xffff8881048a42d8 of 8 bytes by task 18692 on cpu 1: [ 756.934765][T18696] __filemap_add_folio+0x5b9/0x7d0 [ 756.939912][T18696] filemap_add_folio+0x98/0x1b0 [ 756.944786][T18696] __filemap_get_folio+0x31e/0x650 [ 756.949939][T18696] ext4_write_begin+0x234/0xd30 [ 756.954822][T18696] generic_perform_write+0x184/0x490 [ 756.960128][T18696] ext4_buffered_write_iter+0x1ee/0x3c0 [ 756.965714][T18696] ext4_file_write_iter+0xdbf/0xf00 [ 756.970943][T18696] iter_file_splice_write+0x5f2/0x970 [ 756.976370][T18696] direct_splice_actor+0x156/0x2a0 [ 756.981530][T18696] splice_direct_to_actor+0x312/0x680 [ 756.986938][T18696] do_splice_direct+0xda/0x150 [ 756.991736][T18696] do_sendfile+0x380/0x650 [ 756.996170][T18696] __x64_sys_sendfile64+0x105/0x150 [ 757.001388][T18696] x64_sys_call+0xb39/0x2fb0 [ 757.005995][T18696] do_syscall_64+0xd2/0x200 [ 757.010513][T18696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.016423][T18696] [ 757.018755][T18696] read to 0xffff8881048a42d8 of 8 bytes by task 18696 on cpu 0: [ 757.026394][T18696] filemap_write_and_wait_range+0x59/0x340 [ 757.032216][T18696] ext4_file_write_iter+0xe04/0xf00 [ 757.037431][T18696] iter_file_splice_write+0x5f2/0x970 [ 757.042821][T18696] direct_splice_actor+0x156/0x2a0 [ 757.047949][T18696] splice_direct_to_actor+0x312/0x680 [ 757.053345][T18696] do_splice_direct+0xda/0x150 [ 757.058134][T18696] do_sendfile+0x380/0x650 [ 757.062574][T18696] __x64_sys_sendfile64+0x105/0x150 [ 757.067807][T18696] x64_sys_call+0xb39/0x2fb0 [ 757.072412][T18696] do_syscall_64+0xd2/0x200 [ 757.076946][T18696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.082861][T18696] [ 757.085206][T18696] value changed: 0x0000000000000000 -> 0x0000000000000001 [ 757.092334][T18696] [ 757.094676][T18696] Reported by Kernel Concurrency Sanitizer on: [ 757.100857][T18696] CPU: 0 UID: 0 PID: 18696 Comm: syz.1.4314 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) [ 757.113382][T18696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 757.123449][T18696] ================================================================== [ 757.131743][T18700] loop7: detected capacity change from 0 to 1024 [ 757.138744][T18700] EXT4-fs: Ignoring removed nobh option [ 757.141569][ T29] audit: type=1400 audit(1749581442.642:3045): avc: denied { create } for pid=18697 comm="syz.7.4315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 757.164230][ T29] audit: type=1400 audit(1749581442.642:3046): avc: denied { connect } for pid=18697 comm="syz.7.4315" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 757.186819][T18700] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 757.204796][T18699] EXT4-fs error (device loop7): mb_free_blocks:1948: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 757.260976][T18696] ================================================================== [ 757.269092][T18696] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark [ 757.277345][T18696] [ 757.279664][T18696] write to 0xffff8881048a428c of 4 bytes by task 18692 on cpu 0: [ 757.287373][T18696] xas_set_mark+0x12b/0x140 [ 757.291877][T18696] __folio_start_writeback+0x1dd/0x440 [ 757.297342][T18696] ext4_bio_write_folio+0x5ad/0x9f0 [ 757.302538][T18696] mpage_submit_folio+0xe4/0x170 [ 757.307481][T18696] mpage_process_page_bufs+0x39b/0x4a0 [ 757.312959][T18696] mpage_prepare_extent_to_map+0x741/0xaa0 [ 757.318788][T18696] ext4_do_writepages+0xa1a/0x21c0 [ 757.323914][T18696] ext4_writepages+0x176/0x300 [ 757.328690][T18696] do_writepages+0x1c6/0x310 [ 757.333289][T18696] file_write_and_wait_range+0x156/0x2c0 [ 757.338941][T18696] generic_buffers_fsync_noflush+0x45/0x120 [ 757.344893][T18696] ext4_sync_file+0x1ab/0x690 [ 757.349581][T18696] vfs_fsync_range+0x10d/0x130 [ 757.354345][T18696] ext4_buffered_write_iter+0x34f/0x3c0 [ 757.359908][T18696] ext4_file_write_iter+0xdbf/0xf00 [ 757.365137][T18696] iter_file_splice_write+0x5f2/0x970 [ 757.370517][T18696] direct_splice_actor+0x156/0x2a0 [ 757.375655][T18696] splice_direct_to_actor+0x312/0x680 [ 757.381040][T18696] do_splice_direct+0xda/0x150 [ 757.385813][T18696] do_sendfile+0x380/0x650 [ 757.390232][T18696] __x64_sys_sendfile64+0x105/0x150 [ 757.395446][T18696] x64_sys_call+0xb39/0x2fb0 [ 757.400051][T18696] do_syscall_64+0xd2/0x200 [ 757.404565][T18696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.410478][T18696] [ 757.412822][T18696] read to 0xffff8881048a428c of 4 bytes by task 18696 on cpu 1: [ 757.420463][T18696] filemap_write_and_wait_range+0xfc/0x340 [ 757.426284][T18696] filemap_invalidate_pages+0xa4/0x1a0 [ 757.431751][T18696] kiocb_invalidate_pages+0x6e/0x80 [ 757.436972][T18696] __iomap_dio_rw+0x5d4/0x1250 [ 757.441748][T18696] iomap_dio_rw+0x40/0x90 [ 757.446091][T18696] ext4_file_write_iter+0xad9/0xf00 [ 757.451302][T18696] iter_file_splice_write+0x5f2/0x970 [ 757.456683][T18696] direct_splice_actor+0x156/0x2a0 [ 757.461802][T18696] splice_direct_to_actor+0x312/0x680 [ 757.467178][T18696] do_splice_direct+0xda/0x150 [ 757.471957][T18696] do_sendfile+0x380/0x650 [ 757.476386][T18696] __x64_sys_sendfile64+0x105/0x150 [ 757.481599][T18696] x64_sys_call+0xb39/0x2fb0 [ 757.486190][T18696] do_syscall_64+0xd2/0x200 [ 757.490691][T18696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.496577][T18696] [ 757.498908][T18696] value changed: 0x0a000021 -> 0x04000021 [ 757.504626][T18696] [ 757.506947][T18696] Reported by Kernel Concurrency Sanitizer on: [ 757.513137][T18696] CPU: 1 UID: 0 PID: 18696 Comm: syz.1.4314 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) [ 757.525641][T18696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 757.535688][T18696] ================================================================== [ 757.635616][T13689] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.705629][T18390] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.