last executing test programs: 5.321508029s ago: executing program 1 (id=3920): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x3c16, 0x400001, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd29, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x9}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 5.237701646s ago: executing program 3 (id=3923): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, 0x0, &(0x7f00000005c0)=""/155}, 0x20) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 3.201345591s ago: executing program 2 (id=3925): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) write$cgroup_subtree(r0, 0x0, 0xffbf) 3.034308834s ago: executing program 2 (id=3927): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000080)=r5}, 0x20) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8c001}, 0x4000054) 2.881769217s ago: executing program 3 (id=3930): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18a8000000000000000000000006000000181100", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c0001000000", @ANYRES32=r6, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 2.846070359s ago: executing program 4 (id=3931): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x4480, &(0x7f00000000c0), 0x83, 0x22e, &(0x7f0000000940)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) 2.292028855s ago: executing program 3 (id=3932): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x87) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x2000035e, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000630120000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 2.229190399s ago: executing program 4 (id=3933): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000012c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") listxattr(&(0x7f0000000240)='./file1\x00', 0x0, 0x0) 2.09780091s ago: executing program 3 (id=3934): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x46f, &(0x7f0000001200)="$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") r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) symlinkat(&(0x7f0000000400)='./file1\x00', r0, &(0x7f00000003c0)='./bus\x00') creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fchdir(r2) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r6, 0x2007ffb) sendfile(r6, r6, 0x0, 0x1000000201005) 1.999879768s ago: executing program 4 (id=3935): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880) 1.941137583s ago: executing program 1 (id=3936): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x40047451, &(0x7f0000000180)) 1.926165464s ago: executing program 2 (id=3938): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x6}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) utime(&(0x7f0000000200)='./file0\x00', 0x0) 1.913391966s ago: executing program 4 (id=3939): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB='iocharset=maccyrillic,discard,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=remount-ro,iocharset=cp936,errors=continue,iocharset=cp863,errors=remount-ro,time_offset=0x0000000000000008,errors=remount-ro,utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c00da9e6281ed732202e92d385b355a8b25d5f39dadafad4bb7987fd8e29441bbc6e82871b48b3edc068c8629dccf3f5b446c25368d6872e0b16e23dbb4468ad8f7bf9f04ce7af7b48e32c74faaa501363aaf927834ab5356364b36f24655f86b3fff40d19d5bb954f3da29015cdb001605b6d29039f7b166c8b2f5"], 0x1, 0x1524, &(0x7f0000002280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = epoll_create1(0x80000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0xe000001a}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$usbfs(&(0x7f0000000040), 0xf, 0xc340) 1.189043514s ago: executing program 2 (id=3940): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x26f9, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd", 0x0, 0x14000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.105136261s ago: executing program 2 (id=3941): prlimit64(0x0, 0x1, 0x0, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0xc044) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) lseek(r5, 0xdfffffffffffffff, 0x2) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="ff8c3f2d33c3461f50a4a49581b5493eb76e196809a3d8ebb61a3b4fc7f7376a155df9117404fa55", @ANYRESOCT=r2, @ANYRES32=r6], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) ptrace$ARCH_SHSTK_ENABLE(0x1e, r3, 0x1, 0x5001) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r7, 0x4b4c, &(0x7f0000000080)) 1.104861181s ago: executing program 1 (id=3942): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18a8000000000000000000000006000000181100", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c0001000000", @ANYRES32=r6, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 1.10460896s ago: executing program 1 (id=3943): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc02000000000000000000000000000000000000000000000000000000000000000000030002000002000000890000", @ANYRES32=0x0, @ANYBLOB='\x00'/19], 0x1fc}}, 0x0) 990.29039ms ago: executing program 1 (id=3944): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x87) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x2000035e, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000630120000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 988.81298ms ago: executing program 3 (id=3945): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r2, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) 988.11519ms ago: executing program 4 (id=3946): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x10e, &(0x7f0000000280)={[{@init_itable_val={'init_itable', 0x3d, 0x957}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@stripe={'stripe', 0x3d, 0xf151}}, {@orlov}, {@nombcache}]}, 0x4, 0x476, &(0x7f0000000340)="$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") open(0x0, 0x14507e, 0x183) lsetxattr$security_capability(&(0x7f0000000180)='./bus\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) 959.807943ms ago: executing program 3 (id=3947): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x3c16, 0x400001, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd29, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x9}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 873.16009ms ago: executing program 1 (id=3948): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x34, r6, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xa000000}]}, 0x34}}, 0x0) 537.215687ms ago: executing program 0 (id=3952): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000000), 0x0) 536.981747ms ago: executing program 0 (id=3953): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x40047451, &(0x7f0000000180)) 507.532129ms ago: executing program 0 (id=3954): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="380100001a000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000008000001c25080000000000050000000000000004000000000000000000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff0000ea000000000000000040020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x20000084}, 0x8000) 496.41803ms ago: executing program 0 (id=3955): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x3}, 0x18) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x14) 301.237086ms ago: executing program 0 (id=3956): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) socket$packet(0x11, 0x3, 0x300) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c042) 300.995766ms ago: executing program 0 (id=3957): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB='iocharset=maccyrillic,discard,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=remount-ro,iocharset=cp936,errors=continue,iocharset=cp863,errors=remount-ro,time_offset=0x0000000000000008,errors=remount-ro,utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c00da9e6281ed732202e92d385b355a8b25d5f39dadafad4bb7987fd8e29441bbc6e82871b48b3edc068c8629dccf3f5b446c25368d6872e0b16e23dbb4468ad8f7bf9f04ce7af7b48e32c74faaa501363aaf927834ab5356364b36f24655f86b3fff40d19d5bb954f3da29015cdb001605b6d29039f7b166c8b2f5"], 0x1, 0x1524, &(0x7f0000002280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = epoll_create1(0x80000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0xe000001a}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$usbfs(&(0x7f0000000040), 0xf, 0xc340) 290.232497ms ago: executing program 2 (id=3958): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0xe2002, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 0s ago: executing program 4 (id=3959): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x42ab, 0x24d417d6, 0xffffffffffffffff, 0x800, 0xe26}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) kernel console output (not intermixed with test programs): error (device loop2): ext4_free_branches:1026: inode #16: comm syz.2.2234: invalid indirect mapped block 4294967295 (level 0) [ 276.991844][ T6738] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #16: comm syz.2.2234: invalid indirect mapped block 4294967295 (level 1) [ 277.043713][ T6738] EXT4-fs (loop2): 1 orphan inode deleted [ 277.054672][ T6738] EXT4-fs (loop2): 1 truncate cleaned up [ 277.070724][ T6738] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 277.233990][ T6767] fuse: Bad value for 'user_id' [ 277.297514][ T6777] incfs_lookup_dentry err:-5 [ 277.302164][ T6777] incfs: Can't find or create .index dir in ./file0 [ 277.317534][ T6777] incfs: mount failed -5 [ 277.319673][ T6780] bridge: RTM_NEWNEIGH with invalid ether address [ 278.633347][ T6807] fuse: Bad value for 'user_id' [ 278.715868][ T6811] incfs_lookup_dentry err:-5 [ 278.745420][ T6811] incfs: Can't find or create .index dir in ./file0 [ 278.785181][ T6811] incfs: mount failed -5 [ 278.947719][ T6834] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 278.957579][ T6834] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 278.967322][ T6829] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue [ 278.990360][ T6829] ext4 filesystem being mounted at /424/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.062754][ T6838] hub 8-0:1.0: USB hub found [ 279.068429][ T6838] hub 8-0:1.0: 1 port detected [ 279.099604][ T6834] device veth1_macvtap entered promiscuous mode [ 279.556734][ T2117] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 279.945846][ T24] kauditd_printk_skb: 75 callbacks suppressed [ 279.945857][ T24] audit: type=1326 audit(1755842430.610:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6848 comm="syz.1.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1c3f22be9 code=0x7ffc0000 [ 279.983129][ T24] audit: type=1326 audit(1755842430.610:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6848 comm="syz.1.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1c3f22be9 code=0x7ffc0000 [ 280.008653][ T24] audit: type=1326 audit(1755842430.610:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6848 comm="syz.1.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1c3f22be9 code=0x7ffc0000 [ 280.033204][ T24] audit: type=1326 audit(1755842430.610:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6848 comm="syz.1.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1c3f22be9 code=0x7ffc0000 [ 280.057396][ T6847] exfat: Deprecated parameter 'utf8' [ 280.057558][ T24] audit: type=1326 audit(1755842430.610:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6848 comm="syz.1.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1c3f22be9 code=0x7ffc0000 [ 280.089950][ T24] audit: type=1326 audit(1755842430.610:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6848 comm="syz.1.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1c3f22be9 code=0x7ffc0000 [ 280.115487][ T24] audit: type=1326 audit(1755842430.610:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6848 comm="syz.1.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1c3f22be9 code=0x7ffc0000 [ 280.140503][ T24] audit: type=1326 audit(1755842430.610:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6848 comm="syz.1.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1c3f22be9 code=0x7ffc0000 [ 280.143923][ T6847] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 280.190552][ T24] audit: type=1326 audit(1755842430.610:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6848 comm="syz.1.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1c3f22be9 code=0x7ffc0000 [ 280.215200][ T24] audit: type=1326 audit(1755842430.610:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6848 comm="syz.1.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb1c3f22be9 code=0x7ffc0000 [ 280.240314][ T6862] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue [ 280.263838][ T6862] ext4 filesystem being mounted at /404/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.868324][ T6886] EXT4-fs (loop2): Ignoring removed bh option [ 280.874858][ T6886] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 280.889796][ T6886] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,bh,nomblk_io_submit,,errors=continue [ 281.283917][ T6913] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 281.453110][ T6915] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 281.469195][ T6915] EXT4-fs (loop4): Test dummy encryption mode enabled [ 281.502079][ T6915] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 281.780362][ T6918] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue [ 281.796749][ T6918] ext4 filesystem being mounted at /429/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.164322][ T6945] incfs: Error accessing: ./file0. [ 283.170486][ T6945] incfs: mount failed -2 [ 283.319933][ T6958] exfat: Deprecated parameter 'utf8' [ 283.331281][ T6958] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 283.570354][ T6973] hub 8-0:1.0: USB hub found [ 283.575388][ T6973] hub 8-0:1.0: 1 port detected [ 285.668835][ T6998] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 285.676323][ T6998] EXT4-fs (loop4): Test dummy encryption mode enabled [ 285.690199][ T6998] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 285.817465][ T7038] device veth1_macvtap left promiscuous mode [ 285.818435][ T7025] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 285.832882][ T7025] ext4 filesystem being mounted at /431/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.920925][ T7033] __quota_error: 11 callbacks suppressed [ 285.920940][ T7033] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 285.936983][ T7033] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 285.956039][ T7033] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.2339: Failed to acquire dquot type 1 [ 286.048282][ T7033] EXT4-fs (loop0): 1 truncate cleaned up [ 286.126392][ T7033] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,auto_da_alloc,minixdf,noinit_itable,init_itable,,errors=continue [ 286.181965][ T7033] ext4 filesystem being mounted at /435/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.196702][ T7052] device syzkaller0 entered promiscuous mode [ 286.378480][ T7073] fuse: Unknown parameter 'group_i00000000000000000000' [ 287.342719][ T7093] syz.1.2362[7093] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 287.342775][ T7093] syz.1.2362[7093] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 287.476763][ T24] audit: type=1400 audit(1755842438.150:1567): avc: denied { create } for pid=7096 comm="syz.2.2359" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 287.730777][ T24] audit: type=1400 audit(1755842438.250:1568): avc: denied { unlink } for pid=278 comm="syz-executor" name="file0" dev="tmpfs" ino=2399 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 287.882967][ T7106] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 287.896812][ T7106] ext4 filesystem being mounted at /433/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.689294][ T7120] fuse: Unknown parameter 'group_id00000000000000000000' [ 288.809128][ T24] audit: type=1326 audit(1755842439.480:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7134 comm="syz.2.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ee529be9 code=0x7ffc0000 [ 289.122746][ T24] audit: type=1326 audit(1755842439.480:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7134 comm="syz.2.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ee529be9 code=0x7ffc0000 [ 289.154927][ T7145] device syzkaller0 entered promiscuous mode [ 289.170940][ T24] audit: type=1326 audit(1755842439.570:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7134 comm="syz.2.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7fc8ee529be9 code=0x7ffc0000 [ 289.221037][ T24] audit: type=1326 audit(1755842439.570:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7134 comm="syz.2.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ee529be9 code=0x7ffc0000 [ 289.246259][ T24] audit: type=1326 audit(1755842439.570:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7134 comm="syz.2.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ee529be9 code=0x7ffc0000 [ 289.862145][ T7156] syz.0.2383[7156] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 289.862204][ T7156] syz.0.2383[7156] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 289.906593][ T7158] fuse: Unknown parameter 'group_id00000000000000000000' [ 290.599322][ T7143] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 290.622721][ T7143] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 290.713020][ T7143] F2FS-fs (loop4): Found nat_bits in checkpoint [ 290.805796][ T7143] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 290.823168][ T7143] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 291.075004][ T7143] attempt to access beyond end of device [ 291.075004][ T7143] loop4: rw=2049, want=56088, limit=40427 [ 291.728187][ T7143] attempt to access beyond end of device [ 291.728187][ T7143] loop4: rw=2049, want=57344, limit=40427 [ 291.807258][ T7186] incfs_lookup_dentry err:-5 [ 291.840157][ T7186] incfs: Can't find or create .index dir in ./file0 [ 291.860236][ T7143] attempt to access beyond end of device [ 291.860236][ T7143] loop4: rw=2049, want=50984, limit=40427 [ 291.872519][ T7186] incfs: mount failed -5 [ 291.899523][ T276] attempt to access beyond end of device [ 291.899523][ T276] loop4: rw=2049, want=45104, limit=40427 [ 292.219255][ T7201] syz.3.2400[7201] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 292.219311][ T7201] syz.3.2400[7201] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 292.339253][ T7195] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 292.366322][ T7195] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 292.428853][ T7195] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.2398: corrupted in-inode xattr [ 292.499971][ T7195] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.2398: couldn't read orphan inode 15 (err -117) [ 292.513392][ T7195] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,jqfmt=vfsv0,,errors=continue [ 293.477148][ T7223] hub 8-0:1.0: USB hub found [ 293.482146][ T7223] hub 8-0:1.0: 1 port detected [ 293.626356][ T24] audit: type=1326 audit(1755842444.290:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7226 comm="syz.3.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0f71f7be9 code=0x7ffc0000 [ 293.947082][ T24] audit: type=1326 audit(1755842444.320:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7226 comm="syz.3.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fd0f71f7be9 code=0x7ffc0000 [ 294.166253][ T24] audit: type=1326 audit(1755842444.360:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7226 comm="syz.3.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0f71f7be9 code=0x7ffc0000 [ 294.226083][ T24] audit: type=1326 audit(1755842444.370:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7226 comm="syz.3.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0f71f7be9 code=0x7ffc0000 [ 294.291095][ T24] audit: type=1326 audit(1755842444.960:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7238 comm="syz.3.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0f71f7be9 code=0x7ffc0000 [ 294.327686][ T24] audit: type=1326 audit(1755842444.990:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7238 comm="syz.3.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd0f71f7be9 code=0x7ffc0000 [ 294.351593][ T24] audit: type=1326 audit(1755842444.990:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7238 comm="syz.3.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0f71f7be9 code=0x7ffc0000 [ 294.388041][ T24] audit: type=1326 audit(1755842444.990:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7238 comm="syz.3.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0f71f7be9 code=0x7ffc0000 [ 294.578796][ T24] audit: type=1326 audit(1755842444.990:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7238 comm="syz.3.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0f71f7be9 code=0x7ffc0000 [ 294.611281][ T24] audit: type=1326 audit(1755842444.990:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7238 comm="syz.3.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0f71f7be9 code=0x7ffc0000 [ 294.839479][ T7261] syz.0.2418[7261] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 294.849599][ T7261] syz.0.2418[7261] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.308762][ T7277] 9pnet: Insufficient options for proto=fd [ 295.588736][ T7289] 9pnet: Insufficient options for proto=fd [ 295.643105][ T7296] fuse: Bad value for 'fd' [ 295.951041][ T7306] erofs: (device loop4): mounted with root inode @ nid 36. [ 296.215978][ T7309] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 296.237826][ T7309] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 296.436258][ T7309] F2FS-fs (loop2): Found nat_bits in checkpoint [ 296.478965][ T7321] 9pnet: Insufficient options for proto=fd [ 296.496371][ T7309] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 296.510026][ T7309] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 296.608429][ T7324] attempt to access beyond end of device [ 296.608429][ T7324] loop2: rw=2049, want=55296, limit=40427 [ 296.639307][ T7324] attempt to access beyond end of device [ 296.639307][ T7324] loop2: rw=2049, want=57344, limit=40427 [ 296.670847][ T7324] attempt to access beyond end of device [ 296.670847][ T7324] loop2: rw=2049, want=53224, limit=40427 [ 296.797686][ T7324] attempt to access beyond end of device [ 296.797686][ T7324] loop2: rw=2049, want=53248, limit=40427 [ 296.822377][ T7324] attempt to access beyond end of device [ 296.822377][ T7324] loop2: rw=2049, want=65472, limit=40427 [ 296.840358][ T7324] attempt to access beyond end of device [ 296.840358][ T7324] loop2: rw=2049, want=67792, limit=40427 [ 296.879389][ T278] attempt to access beyond end of device [ 296.879389][ T278] loop2: rw=2049, want=45104, limit=40427 [ 297.165215][ T7347] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.2456: Failed to acquire dquot type 1 [ 297.177800][ T7353] syz.3.2452[7353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 297.177856][ T7353] syz.3.2452[7353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 297.206790][ T7347] EXT4-fs (loop0): 1 truncate cleaned up [ 297.281531][ T7355] tipc: Enabling of bearer rejected, failed to enable media [ 297.296253][ T7347] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,auto_da_alloc,minixdf,noinit_itable,init_itable,,errors=continue [ 297.306614][ T7355] device syzkaller0 entered promiscuous mode [ 297.319224][ T7347] ext4 filesystem being mounted at /461/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.460274][ T7358] device pim6reg1 entered promiscuous mode [ 297.588843][ T7365] incfs_lookup_dentry err:-5 [ 297.603731][ T7365] incfs: Can't find or create .index dir in ./file0 [ 298.044884][ T7365] incfs: mount failed -5 [ 298.092152][ T7352] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 298.146293][ T7352] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 298.597286][ T7352] F2FS-fs (loop4): Found nat_bits in checkpoint [ 298.779468][ T7352] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 298.809647][ T7352] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 298.972792][ T7390] exfat: Deprecated parameter 'utf8' [ 299.228387][ T7390] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 299.254108][ T7397] attempt to access beyond end of device [ 299.254108][ T7397] loop4: rw=2049, want=55296, limit=40427 [ 299.301989][ T7397] attempt to access beyond end of device [ 299.301989][ T7397] loop4: rw=2049, want=57344, limit=40427 [ 299.334611][ T7397] attempt to access beyond end of device [ 299.334611][ T7397] loop4: rw=2049, want=53240, limit=40427 [ 299.338342][ T7402] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 299.357409][ T7402] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 299.378370][ T7402] EXT4-fs error (device loop0): ext4_get_journal_inode:5243: inode #32: comm syz.0.2475: iget: special inode unallocated [ 299.398098][ T7402] EXT4-fs (loop0): no journal found [ 299.403701][ T7402] EXT4-fs (loop0): can't get journal size [ 299.415361][ T7402] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue [ 299.439669][ T7402] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1439: inode #12: block 16: comm syz.0.2475: path /468/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 299.439717][ T24] kauditd_printk_skb: 34 callbacks suppressed [ 299.439727][ T24] audit: type=1400 audit(1755842450.110:1616): avc: denied { watch } for pid=7401 comm="syz.0.2475" path="/468/file0" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 299.696358][ T7421] bridge: RTM_NEWNEIGH with invalid ether address [ 299.713875][ T24] audit: type=1400 audit(1755842450.380:1617): avc: denied { mounton } for pid=7422 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 299.792246][ T7422] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.799831][ T7422] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.808405][ T7422] device bridge_slave_0 entered promiscuous mode [ 299.816773][ T7422] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.823891][ T7422] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.831606][ T7422] device bridge_slave_1 entered promiscuous mode [ 299.884586][ T7422] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.892315][ T7422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.899694][ T7422] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.906947][ T7422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.962528][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 299.981972][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.983648][ T7443] syz.1.2487[7443] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 299.996698][ T7443] syz.1.2487[7443] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 300.008518][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.044661][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 300.053084][ T317] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.060392][ T317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.080068][ T7441] EXT4-fs (loop0): Ignoring removed bh option [ 300.139106][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 300.154578][ T7441] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,block_validity,max_dir_size_kb=0x0000000000000009,data_err=ignore,grpquota,abort,user_xattr,bh,errors=remount-ro, [ 300.170497][ T317] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.184685][ T317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.224303][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 300.226746][ T7453] exfat: Deprecated parameter 'utf8' [ 300.245083][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 300.286346][ T7453] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 300.342571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 300.388537][ T7422] device veth0_vlan entered promiscuous mode [ 300.413368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 300.422134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 300.432356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 300.446632][ T7460] bridge: RTM_NEWNEIGH with invalid ether address [ 300.466632][ T7422] device veth1_macvtap entered promiscuous mode [ 300.479446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 300.497185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 300.507315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 300.516143][ T7462] device pim6reg1 entered promiscuous mode [ 300.531332][ T24] audit: type=1400 audit(1755842451.200:1618): avc: denied { mounton } for pid=7422 comm="syz-executor" path="/root/syzkaller.7fFXfE/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 300.573455][ T24] audit: type=1400 audit(1755842451.230:1619): avc: denied { mount } for pid=7422 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 300.596985][ T24] audit: type=1400 audit(1755842451.230:1620): avc: denied { mount } for pid=7422 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 300.662167][ T24] audit: type=1400 audit(1755842451.230:1621): avc: denied { mounton } for pid=7422 comm="syz-executor" path="/root/syzkaller.7fFXfE/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 300.706466][ T24] audit: type=1400 audit(1755842451.230:1622): avc: denied { mounton } for pid=7422 comm="syz-executor" path="/root/syzkaller.7fFXfE/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=37918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 300.803244][ T24] audit: type=1400 audit(1755842451.230:1623): avc: denied { mounton } for pid=7422 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=517 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 300.845299][ T24] audit: type=1400 audit(1755842451.230:1624): avc: denied { mounton } for pid=7422 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 301.467470][ T7493] bridge: RTM_NEWNEIGH with invalid ether address [ 301.492401][ T7495] fuse: Bad value for 'rootmode' [ 301.618333][ T7507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7507 comm=syz.1.2515 [ 301.646909][ T7511] 9pnet: Insufficient options for proto=fd [ 301.800960][ T7518] syz.3.2519[7518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 301.801022][ T7518] syz.3.2519[7518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 301.985028][ T7530] 9pnet: Insufficient options for proto=fd [ 302.003169][ T7532] device syzkaller0 entered promiscuous mode [ 302.032140][ T7535] device veth1_macvtap left promiscuous mode [ 302.144056][ T24] audit: type=1400 audit(1755842452.810:1625): avc: denied { relabelfrom } for pid=7547 comm="syz.3.2532" name="" dev="pipefs" ino=38115 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 302.365915][ T7550] syz.2.2533[7550] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 302.366232][ T7550] syz.2.2533[7550] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 302.770579][ T7559] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 302.791900][ T7559] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 302.815983][ T7559] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz.2.2537: corrupted in-inode xattr [ 302.828619][ T7559] EXT4-fs error (device loop2): ext4_orphan_get:1400: comm syz.2.2537: couldn't read orphan inode 15 (err -117) [ 302.840998][ T7559] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,jqfmt=vfsv0,,errors=continue [ 303.024795][ T7580] syz.2.2545[7580] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 303.024853][ T7580] syz.2.2545[7580] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 303.047064][ T7584] exfat: Deprecated parameter 'utf8' [ 303.068407][ T7584] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 303.636784][ T7602] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 303.816022][ T7605] 9pnet: Insufficient options for proto=fd [ 304.262587][ T7636] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier=0x0000000000000000,resuid=0x0000000000000000,block_validity,errors=remount-ro, [ 305.423765][ T7673] 9pnet: Insufficient options for proto=fd [ 305.521264][ T7680] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 305.947242][ T7705] 9pnet: Insufficient options for proto=fd [ 306.558352][ T7718] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 306.575038][ T24] kauditd_printk_skb: 70 callbacks suppressed [ 306.575049][ T24] audit: type=1326 audit(1755842457.240:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7726 comm="syz.0.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08f2a1be9 code=0x7ffc0000 [ 306.610715][ T24] audit: type=1326 audit(1755842457.270:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7726 comm="syz.0.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08f2a1be9 code=0x7ffc0000 [ 306.640190][ T24] audit: type=1326 audit(1755842457.270:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7726 comm="syz.0.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb08f2a1be9 code=0x7ffc0000 [ 306.665921][ T24] audit: type=1326 audit(1755842457.270:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7726 comm="syz.0.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08f2a1be9 code=0x7ffc0000 [ 306.690201][ T24] audit: type=1326 audit(1755842457.270:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7726 comm="syz.0.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08f2a1be9 code=0x7ffc0000 [ 306.735240][ T24] audit: type=1326 audit(1755842457.270:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7726 comm="syz.0.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb08f2a1be9 code=0x7ffc0000 [ 306.759516][ T24] audit: type=1326 audit(1755842457.270:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7726 comm="syz.0.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08f2a1be9 code=0x7ffc0000 [ 306.815696][ T24] audit: type=1326 audit(1755842457.270:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7726 comm="syz.0.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08f2a1be9 code=0x7ffc0000 [ 306.926302][ T24] audit: type=1326 audit(1755842457.270:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7726 comm="syz.0.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb08f2a1be9 code=0x7ffc0000 [ 306.950432][ T24] audit: type=1326 audit(1755842457.270:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7726 comm="syz.0.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08f2a1be9 code=0x7ffc0000 [ 307.007653][ T7734] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 308.845800][ T7810] overlayfs: failed to resolve './file0': -2 [ 309.346726][ T7831] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 309.354107][ T7831] EXT4-fs (loop3): Test dummy encryption mode enabled [ 309.365822][ T7831] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 309.829083][ T7861] 9pnet: Insufficient options for proto=fd [ 309.989318][ T7865] overlayfs: failed to resolve './file0': -2 [ 310.172117][ T7869] tipc: Enabling of bearer rejected, failed to enable media [ 310.384444][ T7887] 9pnet: Insufficient options for proto=fd [ 310.450108][ T7888] device veth1_macvtap entered promiscuous mode [ 310.467265][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 310.489759][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 310.517869][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 310.526368][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 310.556814][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 310.567178][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 310.580172][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 310.601617][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 310.624401][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 311.030624][ T7937] device syzkaller0 entered promiscuous mode [ 311.162931][ T7940] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,acl,,errors=continue [ 311.179445][ T7940] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.217691][ T7950] device pim6reg1 entered promiscuous mode [ 311.369555][ T7969] device veth1_macvtap left promiscuous mode [ 311.800451][ T24] kauditd_printk_skb: 148 callbacks suppressed [ 311.800463][ T24] audit: type=1326 audit(1755842462.470:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.1.2711" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb1c3f22be9 code=0x0 [ 312.124047][ T24] audit: type=1326 audit(1755842462.790:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8006 comm="syz.2.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ee529be9 code=0x7ffc0000 [ 312.206943][ T24] audit: type=1326 audit(1755842462.830:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8006 comm="syz.2.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ee529be9 code=0x7ffc0000 [ 312.252754][ T24] audit: type=1326 audit(1755842462.870:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8006 comm="syz.2.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fc8ee529be9 code=0x7ffc0000 [ 312.329505][ T24] audit: type=1326 audit(1755842462.870:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8006 comm="syz.2.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ee529be9 code=0x7ffc0000 [ 312.867906][ T8021] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 312.882745][ T8021] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 312.901392][ T8021] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.2721: Failed to acquire dquot type 1 [ 312.934115][ T8021] EXT4-fs (loop3): 1 truncate cleaned up [ 312.939831][ T8021] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,auto_da_alloc,minixdf,noinit_itable,init_itable,,errors=continue [ 312.967545][ T8021] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.060428][ T24] audit: type=1400 audit(1755842463.730:1859): avc: denied { map } for pid=8051 comm="syz.3.2735" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 313.094432][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 313.136495][ T24] audit: type=1400 audit(1755842463.760:1860): avc: denied { execute } for pid=8051 comm="syz.3.2735" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 315.613747][ T8086] overlayfs: failed to resolve './file0': -2 [ 315.736963][ T8094] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,,errors=continue [ 315.751323][ T8094] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 316.367895][ T8103] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 316.808516][ T25] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 317.216777][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 317.546336][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.797698][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.818940][ T25] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 318.013316][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.030377][ T25] usb 3-1: config 0 descriptor?? [ 318.280451][ T8145] overlayfs: failed to resolve './file0': -2 [ 318.537296][ T25] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 318.547573][ T25] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 318.554735][ T25] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 318.562013][ T25] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 318.569538][ T25] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 318.576543][ T25] savu 0003:1E7D:2D5A.0005: unbalanced collection at end of report description [ 318.585839][ T25] savu 0003:1E7D:2D5A.0005: parse failed [ 318.591835][ T25] savu: probe of 0003:1E7D:2D5A.0005 failed with error -22 [ 318.738714][ T24] audit: type=1326 audit(1755842469.410:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8106 comm="syz.2.2756" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc8ee529be9 code=0x0 [ 318.886016][ T8175] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 318.941682][ T8175] device veth1_macvtap entered promiscuous mode [ 318.959868][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 319.542916][ T8188] binder: 8183:8188 ioctl c0306201 0 returned -14 [ 320.313913][ T24] audit: type=1400 audit(1755842470.210:1862): avc: denied { set_context_mgr } for pid=8183 comm="syz.4.2785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 320.358875][ T674] usb 3-1: USB disconnect, device number 6 [ 320.448525][ T8194] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 320.713962][ T8216] tipc: Enabling of bearer rejected, failed to enable media [ 320.724327][ T8217] bridge: RTM_NEWNEIGH with invalid ether address [ 320.797885][ T24] audit: type=1400 audit(1755842471.470:1863): avc: denied { read write } for pid=8228 comm="syz.3.2802" name="uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 320.824392][ T674] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 320.834644][ T24] audit: type=1400 audit(1755842471.490:1864): avc: denied { open } for pid=8228 comm="syz.3.2802" path="/dev/uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 320.845651][ T674] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 320.875309][ T24] audit: type=1400 audit(1755842471.540:1865): avc: denied { write } for pid=8231 comm="syz.1.2803" name="file0" dev="tmpfs" ino=3267 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 321.001464][ T24] audit: type=1400 audit(1755842471.540:1866): avc: denied { open } for pid=8231 comm="syz.1.2803" path="/599/file0" dev="tmpfs" ino=3267 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 321.066888][ T24] audit: type=1400 audit(1755842471.540:1867): avc: denied { ioctl } for pid=8231 comm="syz.1.2803" path="/599/file0" dev="tmpfs" ino=3267 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 321.165891][ T8237] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.173707][ T8237] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.182808][ T8237] device bridge_slave_0 entered promiscuous mode [ 321.192343][ T8237] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.199503][ T8237] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.207206][ T8237] device bridge_slave_1 entered promiscuous mode [ 321.241814][ T8237] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.248917][ T8237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.256533][ T8237] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.263567][ T8237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.285876][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 321.293773][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.301999][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.318927][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 321.327674][ T317] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.335686][ T317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.343820][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 321.354145][ T317] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.361369][ T317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.379692][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 321.388303][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 321.402493][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 321.414274][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 321.422616][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 321.430421][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 321.439254][ T8237] device veth0_vlan entered promiscuous mode [ 321.460769][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 321.471312][ T8237] device veth1_macvtap entered promiscuous mode [ 321.485438][ T8251] bridge: RTM_NEWNEIGH with invalid ether address [ 321.498812][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 321.515409][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 321.566843][ T24] audit: type=1400 audit(1755842472.240:1868): avc: denied { create } for pid=8259 comm=",&#^%" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 321.592106][ T24] audit: type=1400 audit(1755842472.240:1869): avc: denied { write } for pid=8259 comm=",&#^%" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 321.678056][ T8269] fuse: Unknown parameter 'user_id00000000000000000000' [ 321.698564][ T49] device bridge_slave_1 left promiscuous mode [ 321.698631][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.699238][ T49] device bridge_slave_0 left promiscuous mode [ 321.699290][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.700234][ T49] device bridge0 left promiscuous mode [ 321.700255][ T49] device veth1_macvtap left promiscuous mode [ 321.700282][ T49] device veth0_vlan left promiscuous mode [ 321.853319][ T8278] bridge: RTM_NEWNEIGH with invalid ether address [ 322.212619][ T8305] device pim6reg1 entered promiscuous mode [ 322.319859][ T8314] 9pnet: Insufficient options for proto=fd [ 322.576047][ T24] audit: type=1400 audit(1755842473.240:1870): avc: denied { write } for pid=8329 comm="syz.0.2840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 322.785653][ T8343] 9pnet: Insufficient options for proto=fd [ 323.008413][ T8351] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 323.016199][ T8351] EXT4-fs (loop3): Test dummy encryption mode enabled [ 323.029931][ T8351] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 324.234675][ T8382] tipc: Started in network mode [ 324.245707][ T8382] tipc: Own node identity 964ee4788b23, cluster identity 4711 [ 324.314209][ T8382] tipc: Enabled bearer , priority 0 [ 324.358483][ T8385] device syzkaller0 entered promiscuous mode [ 324.442847][ T8381] tipc: Resetting bearer [ 324.477665][ T8381] tipc: Disabling bearer [ 324.495829][ T8388] 9pnet: Insufficient options for proto=fd [ 324.880603][ T8406] syz.2.2868[8406] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 324.880659][ T8406] syz.2.2868[8406] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.039473][ T8420] EXT4-fs (loop3): Ignoring removed orlov option [ 325.069723][ T8420] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 325.083016][ T8420] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #17: comm syz.3.2874: corrupted in-inode xattr [ 325.096068][ T8420] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.2874: couldn't read orphan inode 17 (err -117) [ 325.108739][ T8420] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000957,nombcache,debug_want_extra_isize=0x000000000000002a,stripe=0x000000000000f151,orlov,nombcache,,errors=continue [ 325.209142][ T24] kauditd_printk_skb: 30 callbacks suppressed [ 325.209168][ T24] audit: type=1326 audit(1755842475.880:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8422 comm="syz.2.2875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ee529be9 code=0x7ffc0000 [ 325.239485][ T562] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 325.256014][ T24] audit: type=1326 audit(1755842475.920:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8422 comm="syz.2.2875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fc8ee529be9 code=0x7ffc0000 [ 325.279773][ T24] audit: type=1326 audit(1755842475.920:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8422 comm="syz.2.2875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ee529be9 code=0x7ffc0000 [ 325.304189][ T24] audit: type=1326 audit(1755842475.920:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8422 comm="syz.2.2875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc8ee529be9 code=0x7ffc0000 [ 325.328366][ T24] audit: type=1326 audit(1755842475.920:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8422 comm="syz.2.2875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ee529be9 code=0x7ffc0000 [ 325.352127][ T24] audit: type=1326 audit(1755842475.920:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8422 comm="syz.2.2875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc8ee529be9 code=0x7ffc0000 [ 325.375580][ T24] audit: type=1326 audit(1755842475.920:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8422 comm="syz.2.2875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ee529be9 code=0x7ffc0000 [ 325.399804][ T24] audit: type=1326 audit(1755842475.920:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8422 comm="syz.2.2875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc8ee529be9 code=0x7ffc0000 [ 325.424434][ T24] audit: type=1326 audit(1755842475.920:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8422 comm="syz.2.2875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ee529be9 code=0x7ffc0000 [ 325.448733][ T24] audit: type=1326 audit(1755842475.920:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8422 comm="syz.2.2875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc8ee529be9 code=0x7ffc0000 [ 325.496211][ T562] usb 5-1: Using ep0 maxpacket: 32 [ 325.619483][ T562] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.635939][ T562] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.647310][ T562] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 325.657116][ T562] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.665831][ T562] usb 5-1: config 0 descriptor?? [ 326.263723][ T562] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 326.546988][ T8438] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2878'. [ 326.578476][ T8438] bridge1: port 1(veth3) entered blocking state [ 326.584877][ T8438] bridge1: port 1(veth3) entered disabled state [ 326.591969][ T8438] device veth3 entered promiscuous mode [ 326.631266][ T8446] syz.3.2881[8446] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 326.631320][ T8446] syz.3.2881[8446] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 326.670529][ T8448] fuse: Unknown parameter '0x0000000000000004' [ 326.859546][ T562] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 326.866594][ T562] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 326.874890][ T562] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 326.881964][ T562] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 326.889452][ T562] savu 0003:1E7D:2D5A.0007: unbalanced collection at end of report description [ 326.956314][ T562] savu 0003:1E7D:2D5A.0007: parse failed [ 326.962028][ T562] savu: probe of 0003:1E7D:2D5A.0007 failed with error -22 [ 327.107387][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 327.116234][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 327.148019][ T8471] device veth1_macvtap entered promiscuous mode [ 327.157580][ T317] device bridge_slave_1 left promiscuous mode [ 327.164895][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.174931][ T317] device bridge_slave_0 left promiscuous mode [ 327.181734][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.192401][ T317] device veth0_vlan left promiscuous mode [ 327.616884][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 327.639828][ T8477] EXT4-fs (loop3): Ignoring removed oldalloc option [ 327.653736][ T8477] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 327.661482][ T8477] EXT4-fs (loop3): Unrecognized mount option "mb_optimize_scan=0x0000000000000001" or missing value [ 327.673699][ T8482] fuse: Unknown parameter '0x0000000000000004' [ 328.484958][ T674] usb 5-1: USB disconnect, device number 6 [ 328.831675][ T8512] fuse: Unknown parameter '0x0000000000000004' [ 329.032453][ T8519] EXT4-fs (loop3): Ignoring removed orlov option [ 329.092555][ T8519] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 329.114431][ T8519] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #17: comm syz.3.2909: corrupted in-inode xattr [ 329.270060][ T8519] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.2909: couldn't read orphan inode 17 (err -117) [ 329.287096][ T8519] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000957,nombcache,debug_want_extra_isize=0x000000000000002a,stripe=0x000000000000f151,orlov,nombcache,,errors=continue [ 329.381444][ T8549] fuse: Unknown parameter '0x0000000000000004' [ 329.707327][ T8564] loop_set_status: loop2 () has still dirty pages (nrpages=2) [ 329.866819][ T8578] syz.3.2931[8578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 329.866875][ T8578] syz.3.2931[8578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 329.924164][ T8585] device syzkaller0 entered promiscuous mode [ 330.270375][ T24] kauditd_printk_skb: 25 callbacks suppressed [ 330.270393][ T24] audit: type=1400 audit(1755842480.940:1936): avc: denied { name_bind } for pid=8597 comm="syz.2.2941" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 330.310785][ T24] audit: type=1400 audit(1755842480.970:1937): avc: denied { node_bind } for pid=8597 comm="syz.2.2941" saddr=::ffff:172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 330.334555][ T24] audit: type=1400 audit(1755842480.970:1938): avc: denied { mount } for pid=8595 comm="syz.3.2940" name="/" dev="incremental-fs" ino=462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 330.364270][ T24] audit: type=1400 audit(1755842481.030:1939): avc: denied { unmount } for pid=7422 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 330.399875][ T24] audit: type=1400 audit(1755842481.070:1940): avc: denied { write } for pid=8603 comm="syz.3.2943" name="001" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 330.989990][ T24] audit: type=1400 audit(1755842481.660:1941): avc: denied { create } for pid=8613 comm="syz.2.2947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 331.003035][ T8620] syz.4.2949[8620] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 331.016300][ T8620] syz.4.2949[8620] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 331.035010][ T24] audit: type=1400 audit(1755842481.680:1942): avc: denied { create } for pid=8613 comm="syz.2.2947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 331.074071][ T24] audit: type=1400 audit(1755842481.680:1943): avc: denied { write } for pid=8613 comm="syz.2.2947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 331.100515][ T8622] device syzkaller0 entered promiscuous mode [ 331.127761][ T24] audit: type=1400 audit(1755842481.800:1944): avc: denied { read } for pid=8632 comm="syz.0.2955" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 331.151636][ T24] audit: type=1400 audit(1755842481.800:1945): avc: denied { open } for pid=8632 comm="syz.0.2955" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 331.229797][ T8638] hub 8-0:1.0: USB hub found [ 331.239144][ T8638] hub 8-0:1.0: 1 port detected [ 332.061183][ T8655] syz.1.2963[8655] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 332.061245][ T8655] syz.1.2963[8655] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 332.339383][ T8681] capability: warning: `syz.3.2965' uses 32-bit capabilities (legacy support in use) [ 332.533566][ T8687] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2977'. [ 333.118521][ T8701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2981'. [ 333.417547][ T8719] device wireguard0 entered promiscuous mode [ 333.897346][ T8728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2992'. [ 335.257106][ T8752] fuse: Unknown parameter 'fd0x0000000000000004' [ 335.735679][ T8763] incfs: Error accessing: ./file0. [ 335.741040][ T8763] incfs: mount failed -2 [ 335.766940][ T24] kauditd_printk_skb: 31 callbacks suppressed [ 335.766951][ T24] audit: type=1400 audit(1755842486.440:1977): avc: denied { read write } for pid=8758 comm="syz.3.3001" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 335.883882][ T24] audit: type=1400 audit(1755842486.440:1978): avc: denied { open } for pid=8758 comm="syz.3.3001" path="/dev/raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 335.921224][ T8765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3003'. [ 335.974355][ T24] audit: type=1400 audit(1755842486.470:1979): avc: denied { ioctl } for pid=8758 comm="syz.3.3001" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 336.090605][ T24] audit: type=1326 audit(1755842486.710:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8766 comm="syz.2.3004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ee529be9 code=0x7ffc0000 [ 336.188076][ T24] audit: type=1326 audit(1755842486.710:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8766 comm="syz.2.3004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fc8ee529be9 code=0x7ffc0000 [ 336.230626][ T24] audit: type=1326 audit(1755842486.710:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8766 comm="syz.2.3004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ee529be9 code=0x7ffc0000 [ 336.549090][ T8784] exfat: Deprecated parameter 'utf8' [ 336.590438][ T8784] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 336.795350][ T24] audit: type=1400 audit(1755842487.460:1983): avc: denied { block_suspend } for pid=8783 comm="syz.3.3010" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 337.396285][ T24] audit: type=1326 audit(1755842488.060:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8796 comm="syz.1.3015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2989900be9 code=0x7ffc0000 [ 337.429277][ T24] audit: type=1326 audit(1755842488.060:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8796 comm="syz.1.3015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f2989900be9 code=0x7ffc0000 [ 337.453718][ T24] audit: type=1326 audit(1755842488.060:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8796 comm="syz.1.3015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2989900be9 code=0x7ffc0000 [ 337.484550][ T8798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3014'. [ 338.488198][ T8814] incfs: Error accessing: ./file0. [ 338.493371][ T8814] incfs: mount failed -2 [ 338.967989][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3029'. [ 340.831867][ T24] kauditd_printk_skb: 26 callbacks suppressed [ 340.831878][ T24] audit: type=1400 audit(1755842491.500:2013): avc: denied { create } for pid=8869 comm="syz.4.3045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 340.901673][ T24] audit: type=1326 audit(1755842491.570:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8876 comm="syz.2.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ee529be9 code=0x7ffc0000 [ 340.940559][ T24] audit: type=1326 audit(1755842491.570:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8876 comm="syz.2.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8ee529be9 code=0x7ffc0000 [ 340.964698][ T24] audit: type=1326 audit(1755842491.600:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8876 comm="syz.2.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ee529be9 code=0x7ffc0000 [ 340.993049][ T24] audit: type=1326 audit(1755842491.600:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8876 comm="syz.2.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ee529be9 code=0x7ffc0000 [ 341.070903][ T24] audit: type=1326 audit(1755842491.630:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8876 comm="syz.2.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8ee529be9 code=0x7ffc0000 [ 341.211612][ T24] audit: type=1326 audit(1755842491.630:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8876 comm="syz.2.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ee529be9 code=0x7ffc0000 [ 341.266484][ T24] audit: type=1326 audit(1755842491.630:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8876 comm="syz.2.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ee529be9 code=0x7ffc0000 [ 341.297664][ T24] audit: type=1326 audit(1755842491.660:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8876 comm="syz.2.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7fc8ee529be9 code=0x7ffc0000 [ 341.326238][ T24] audit: type=1326 audit(1755842491.660:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8876 comm="syz.2.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ee529be9 code=0x7ffc0000 [ 341.366802][ T8894] device pim6reg1 entered promiscuous mode [ 341.515705][ T8910] tipc: Enabled bearer , priority 0 [ 341.523777][ T8910] tipc: Resetting bearer [ 341.530915][ T8909] tipc: Disabling bearer [ 341.645510][ T8926] device pim6reg1 entered promiscuous mode [ 341.739259][ T8939] tipc: Enabled bearer , priority 0 [ 341.757822][ T8939] tipc: Resetting bearer [ 341.822486][ T8940] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.830355][ T8940] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.838070][ T8940] device bridge_slave_0 entered promiscuous mode [ 341.845159][ T8940] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.852634][ T8940] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.860576][ T8940] device bridge_slave_1 entered promiscuous mode [ 341.861326][ T8947] 9pnet: Insufficient options for proto=fd [ 341.873716][ T8938] tipc: Disabling bearer [ 341.918984][ T8940] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.926037][ T8940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.933404][ T8940] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.940495][ T8940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.956815][ T7184] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.966468][ T7184] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.994762][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 342.003681][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 342.011241][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 342.019622][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 342.028141][ T7184] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.035216][ T7184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.043932][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 342.052856][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 342.067978][ T7184] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.075072][ T7184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.083349][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 342.091685][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 342.101973][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 342.110197][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 342.124236][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 342.133233][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 342.144280][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 342.153164][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 342.169120][ T8940] device veth0_vlan entered promiscuous mode [ 342.176684][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 342.187124][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 342.236453][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 342.248411][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 342.277322][ T8940] device veth1_macvtap entered promiscuous mode [ 342.348272][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 342.356589][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 342.368622][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 342.377628][ T8970] 9pnet: Insufficient options for proto=fd [ 342.397896][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 342.407295][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 342.496137][ T49] tipc: Left network mode [ 342.541243][ T8984] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3093'. [ 342.616666][ T8987] overlayfs: failed to resolve './file0': -2 [ 342.866933][ T8998] 9pnet: Insufficient options for proto=fd [ 343.155352][ T9014] EXT4-fs (loop3): Ignoring removed orlov option [ 343.161934][ T9014] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 343.173566][ T9014] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #17: comm syz.3.3105: corrupted in-inode xattr [ 343.186626][ T9014] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.3105: couldn't read orphan inode 17 (err -117) [ 343.199423][ T9014] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000957,nombcache,debug_want_extra_isize=0x000000000000002a,stripe=0x000000000000f151,orlov,nombcache,,errors=continue [ 343.538495][ T49] device bridge_slave_1 left promiscuous mode [ 343.545018][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.552779][ T49] device bridge_slave_0 left promiscuous mode [ 343.559310][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.640072][ T9058] overlayfs: failed to resolve './file0': -2 [ 344.681153][ T9057] 9pnet: Insufficient options for proto=fd [ 345.410844][ T9085] 9pnet: Insufficient options for proto=fd [ 345.626098][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3132'. [ 346.112467][ T9106] device veth1_macvtap left promiscuous mode [ 346.359519][ T9114] overlayfs: failed to resolve './file0': -2 [ 346.597790][ T9116] 9pnet: Insufficient options for proto=fd [ 346.630033][ T9120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3143'. [ 346.643220][ T9122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3144'. [ 347.630354][ T9151] 9pnet: Insufficient options for proto=fd [ 347.664242][ T24] kauditd_printk_skb: 157 callbacks suppressed [ 347.664252][ T24] audit: type=1400 audit(1755842498.330:2180): avc: denied { create } for pid=9153 comm="syz.2.3155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 347.695617][ T9157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3156'. [ 347.711435][ T24] audit: type=1400 audit(1755842498.380:2181): avc: denied { connect } for pid=9153 comm="syz.2.3155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 347.731662][ T24] audit: type=1400 audit(1755842498.400:2182): avc: denied { read } for pid=9153 comm="syz.2.3155" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 347.755123][ T24] audit: type=1400 audit(1755842498.400:2183): avc: denied { open } for pid=9153 comm="syz.2.3155" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 348.038626][ T24] audit: type=1326 audit(1755842498.650:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9153 comm="syz.2.3155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ee529be9 code=0x7ffc0000 [ 348.070947][ T24] audit: type=1326 audit(1755842498.680:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9153 comm="syz.2.3155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8ee529be9 code=0x7ffc0000 [ 348.095393][ T24] audit: type=1326 audit(1755842498.690:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9153 comm="syz.2.3155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ee529be9 code=0x7ffc0000 [ 348.126380][ T24] audit: type=1326 audit(1755842498.710:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9153 comm="syz.2.3155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc8ee529be9 code=0x7ffc0000 [ 348.167900][ T24] audit: type=1326 audit(1755842498.710:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9153 comm="syz.2.3155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ee529be9 code=0x7ffc0000 [ 348.198493][ T24] audit: type=1326 audit(1755842498.710:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9153 comm="syz.2.3155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc8ee529be9 code=0x7ffc0000 [ 348.341837][ T9175] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 348.350907][ T9175] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 348.737494][ T9188] 9pnet: Insufficient options for proto=fd [ 348.822872][ T9194] 9pnet: Insufficient options for proto=fd [ 349.074794][ T9210] overlayfs: failed to resolve './file0': -2 [ 349.634138][ T9212] 9pnet: Insufficient options for proto=fd [ 349.764103][ T9220] device pim6reg1 entered promiscuous mode [ 349.766109][ T9222] 9pnet: Insufficient options for proto=fd [ 349.825614][ T9235] 9pnet: Insufficient options for proto=fd [ 349.875135][ T9236] EXT4-fs (loop3): Ignoring removed orlov option [ 349.886264][ T9236] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 349.898752][ T9236] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #17: comm syz.3.3187: corrupted in-inode xattr [ 349.911453][ T9236] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.3187: couldn't read orphan inode 17 (err -117) [ 349.923915][ T9236] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000957,nombcache,debug_want_extra_isize=0x000000000000002a,stripe=0x000000000000f151,orlov,nombcache,,errors=continue [ 350.773266][ T9271] 9pnet: Insufficient options for proto=fd [ 351.462214][ T9302] 9pnet: Insufficient options for proto=fd [ 351.507935][ T9300] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.515228][ T9300] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.522593][ T9300] device bridge_slave_0 entered promiscuous mode [ 351.531089][ T9300] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.539401][ T9300] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.547325][ T9300] device bridge_slave_1 entered promiscuous mode [ 351.569878][ T2117] tipc: Left network mode [ 351.613216][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 351.622535][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 351.646522][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 351.655223][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 351.663923][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.672427][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.681395][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 351.722406][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 351.767043][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 351.780458][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.787642][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.846089][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 351.880364][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 351.891841][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 351.940362][ T9300] device veth0_vlan entered promiscuous mode [ 351.963898][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 351.974462][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 351.982713][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 352.068421][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 352.131782][ T9300] device veth1_macvtap entered promiscuous mode [ 353.305904][ T24] kauditd_printk_skb: 46 callbacks suppressed [ 353.305915][ T24] audit: type=1326 audit(1755842503.950:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9350 comm="syz.4.3233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e95d5be9 code=0x7ffc0000 [ 353.340582][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 353.352863][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 353.363529][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 353.374074][ T24] audit: type=1326 audit(1755842503.950:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9350 comm="syz.4.3233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14e95d5be9 code=0x7ffc0000 [ 353.383918][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 353.398768][ T24] audit: type=1326 audit(1755842503.950:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9350 comm="syz.4.3233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e95d5be9 code=0x7ffc0000 [ 353.443174][ T24] audit: type=1326 audit(1755842503.950:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9350 comm="syz.4.3233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e95d5be9 code=0x7ffc0000 [ 353.469361][ T24] audit: type=1326 audit(1755842503.950:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9350 comm="syz.4.3233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14e95d5be9 code=0x7ffc0000 [ 353.507446][ T24] audit: type=1326 audit(1755842503.960:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9350 comm="syz.4.3233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e95d5be9 code=0x7ffc0000 [ 353.534659][ T24] audit: type=1326 audit(1755842503.960:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9350 comm="syz.4.3233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e95d5be9 code=0x7ffc0000 [ 353.575782][ T24] audit: type=1326 audit(1755842503.960:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9350 comm="syz.4.3233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14e95d5be9 code=0x7ffc0000 [ 353.600275][ T24] audit: type=1326 audit(1755842503.960:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9350 comm="syz.4.3233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e95d5be9 code=0x7ffc0000 [ 353.625469][ T24] audit: type=1326 audit(1755842503.960:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9350 comm="syz.4.3233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14e95d5be9 code=0x7ffc0000 [ 353.657581][ T9373] EXT4-fs (loop3): Ignoring removed orlov option [ 353.670575][ T9373] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 353.682287][ T9373] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #17: comm syz.3.3239: corrupted in-inode xattr [ 353.695342][ T9373] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.3239: couldn't read orphan inode 17 (err -117) [ 353.717355][ T2117] device bridge_slave_1 left promiscuous mode [ 353.719100][ T9373] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000957,nombcache,debug_want_extra_isize=0x000000000000002a,stripe=0x000000000000f151,orlov,nombcache,,errors=continue [ 353.726999][ T2117] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.779839][ T2117] device bridge_slave_0 left promiscuous mode [ 353.806431][ T2117] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.814740][ T2117] device veth1_macvtap left promiscuous mode [ 353.821167][ T2117] device veth0_vlan left promiscuous mode [ 354.229366][ T9390] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.237163][ T9390] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.245041][ T9390] device bridge_slave_0 entered promiscuous mode [ 354.256539][ T9390] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.263891][ T9390] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.273201][ T9390] device bridge_slave_1 entered promiscuous mode [ 354.807222][ T2117] tipc: Left network mode [ 355.115554][ T9390] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.123108][ T9390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.130503][ T9390] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.137544][ T9390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.229872][ T7184] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.237822][ T7184] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.268899][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 355.370205][ T9423] hub 8-0:1.0: USB hub found [ 355.375245][ T9423] hub 8-0:1.0: 1 port detected [ 355.400593][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 356.493207][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 356.502382][ T9434] 9pnet: Insufficient options for proto=fd [ 356.509304][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 356.531226][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.538523][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.550018][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 356.564155][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 356.577589][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.584656][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.606941][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 356.615899][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 356.624494][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 356.633099][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 356.664922][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 356.675934][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 356.685967][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 356.758377][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 356.799115][ T9390] device veth0_vlan entered promiscuous mode [ 356.928530][ T9390] device veth1_macvtap entered promiscuous mode [ 357.590787][ T9461] hub 8-0:1.0: USB hub found [ 357.595761][ T9461] hub 8-0:1.0: 1 port detected [ 357.924284][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 357.937528][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 357.957813][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 358.133966][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 358.847032][ T9472] hub 8-0:1.0: USB hub found [ 358.852201][ T9472] hub 8-0:1.0: 1 port detected [ 359.087768][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 359.106475][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 359.140159][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 359.149078][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 359.157391][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 359.438217][ T2117] device bridge_slave_1 left promiscuous mode [ 359.452739][ T2117] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.461827][ T2117] device bridge_slave_0 left promiscuous mode [ 359.477485][ T2117] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.495707][ T2117] device veth0_vlan left promiscuous mode [ 360.990577][ T9511] hub 8-0:1.0: USB hub found [ 360.995625][ T9511] hub 8-0:1.0: 1 port detected [ 361.659554][ T9530] 9pnet: Could not find request transport: fd0x0000000000000003 [ 361.686460][ T9528] fuse: Bad value for 'fd' [ 361.813558][ T9542] tipc: Started in network mode [ 361.823673][ T9542] tipc: Own node identity 7ab73ce8a228, cluster identity 4711 [ 361.832481][ T9542] tipc: Enabled bearer , priority 0 [ 361.841285][ T9542] device syzkaller0 entered promiscuous mode [ 361.852701][ T9542] tipc: Resetting bearer [ 361.866915][ T9541] tipc: Resetting bearer [ 361.877089][ T9541] tipc: Disabling bearer [ 362.783482][ T24] kauditd_printk_skb: 18 callbacks suppressed [ 362.783494][ T24] audit: type=1400 audit(1755842513.450:2264): avc: denied { ioctl } for pid=9566 comm="syz.0.3312" path="socket:[46314]" dev="sockfs" ino=46314 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 362.911029][ T9569] hub 8-0:1.0: USB hub found [ 362.916474][ T9569] hub 8-0:1.0: 1 port detected [ 363.970302][ T9599] erofs: (device loop3): mounted with root inode @ nid 36. [ 364.134630][ T24] audit: type=1400 audit(1755842514.800:2265): avc: denied { shutdown } for pid=9595 comm="syz.2.3322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 364.806347][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 364.817273][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 364.826454][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 364.837452][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 364.846462][ T9608] loop9: unable to read partition table [ 364.852597][ T9608] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 364.852597][ T9608] ) failed (rc=-5) [ 364.871086][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 364.882684][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 364.892939][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 364.904093][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 364.915221][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 364.926370][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 364.935342][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 364.946306][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 364.956679][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 364.967586][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 365.243026][ T9616] bridge: RTM_NEWNEIGH with invalid ether address [ 365.292070][ T24] audit: type=1326 audit(1755842515.960:2266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9619 comm="syz.2.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cc757be9 code=0x7ffc0000 [ 365.316930][ T24] audit: type=1326 audit(1755842515.960:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9619 comm="syz.2.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f81cc756550 code=0x7ffc0000 [ 365.341968][ T24] audit: type=1326 audit(1755842515.960:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9619 comm="syz.2.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f81cc756550 code=0x7ffc0000 [ 365.365770][ T24] audit: type=1326 audit(1755842515.960:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9619 comm="syz.2.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cc757be9 code=0x7ffc0000 [ 365.406686][ T24] audit: type=1326 audit(1755842515.960:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9619 comm="syz.2.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f81cc757be9 code=0x7ffc0000 [ 365.439613][ T24] audit: type=1326 audit(1755842515.960:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9619 comm="syz.2.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cc757be9 code=0x7ffc0000 [ 365.464692][ T24] audit: type=1326 audit(1755842515.960:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9619 comm="syz.2.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81cc757be9 code=0x7ffc0000 [ 365.502807][ T24] audit: type=1326 audit(1755842515.960:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9619 comm="syz.2.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cc757be9 code=0x7ffc0000 [ 366.032990][ T9633] 9pnet: Insufficient options for proto=fd [ 366.171480][ T9641] bridge: RTM_NEWNEIGH with invalid ether address [ 366.637464][ T9655] device pim6reg1 entered promiscuous mode [ 367.128676][ T9669] bridge: RTM_NEWNEIGH with invalid ether address [ 367.363047][ T9693] syz.0.3361[9693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 367.363107][ T9693] syz.0.3361[9693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 367.610301][ T9719] 9pnet: Insufficient options for proto=fd [ 367.914274][ T24] kauditd_printk_skb: 27 callbacks suppressed [ 367.914283][ T24] audit: type=1400 audit(1755842518.580:2301): avc: denied { bind } for pid=9736 comm="syz.0.3378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 367.954800][ T24] audit: type=1400 audit(1755842518.610:2302): avc: denied { name_bind } for pid=9736 comm="syz.0.3378" src=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 367.980494][ T24] audit: type=1400 audit(1755842518.610:2303): avc: denied { node_bind } for pid=9736 comm="syz.0.3378" src=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 368.925676][ T9776] incfs: Error accessing: ./file0. [ 368.931127][ T9776] incfs: mount failed -2 [ 369.935551][ T24] audit: type=1326 audit(1755842520.600:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.4.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeff3cebe9 code=0x7ffc0000 [ 369.965787][ T24] audit: type=1326 audit(1755842520.630:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.4.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeff3cebe9 code=0x7ffc0000 [ 369.992031][ T24] audit: type=1326 audit(1755842520.660:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.4.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdeff3cebe9 code=0x7ffc0000 [ 370.036909][ T24] audit: type=1326 audit(1755842520.660:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.4.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeff3cebe9 code=0x7ffc0000 [ 370.060978][ T24] audit: type=1326 audit(1755842520.660:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.4.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeff3cebe9 code=0x7ffc0000 [ 370.084546][ T24] audit: type=1326 audit(1755842520.660:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.4.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdeff3cebe9 code=0x7ffc0000 [ 370.108254][ T24] audit: type=1326 audit(1755842520.660:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.4.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeff3cebe9 code=0x7ffc0000 [ 370.148699][ T9806] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 370.155582][ T9806] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 370.166554][ T9806] F2FS-fs (loop3): Found nat_bits in checkpoint [ 370.187935][ T9806] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 370.195364][ T9806] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 370.268616][ T9815] handle_bad_sector: 4 callbacks suppressed [ 370.268626][ T9815] attempt to access beyond end of device [ 370.268626][ T9815] loop3: rw=2049, want=57344, limit=40427 [ 370.291484][ T9815] attempt to access beyond end of device [ 370.291484][ T9815] loop3: rw=2049, want=53248, limit=40427 [ 370.327431][ T9815] attempt to access beyond end of device [ 370.327431][ T9815] loop3: rw=2049, want=77824, limit=40427 [ 370.345882][ T9815] attempt to access beyond end of device [ 370.345882][ T9815] loop3: rw=2049, want=85312, limit=40427 [ 370.365683][ T7422] attempt to access beyond end of device [ 370.365683][ T7422] loop3: rw=2049, want=45104, limit=40427 [ 370.705025][ T9832] syz.0.3418[9832] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 370.705081][ T9832] syz.0.3418[9832] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 370.816647][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 370.846661][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 370.856593][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 370.876563][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 370.886937][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 370.895355][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 370.903848][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 370.912671][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 371.453804][ T9856] 9pnet: Insufficient options for proto=fd [ 371.472275][ T9853] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 371.489454][ T9853] EXT4-fs error (device loop3): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 371.504526][ T9853] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 371.516878][ T9853] EXT4-fs (loop3): This should not happen!! Data will be lost [ 371.516878][ T9853] [ 371.526750][ T9853] EXT4-fs (loop3): Total free blocks count 0 [ 371.532883][ T9853] EXT4-fs (loop3): Free/Dirty block details [ 371.539361][ T9853] EXT4-fs (loop3): free_blocks=4096 [ 371.544634][ T9853] EXT4-fs (loop3): dirty_blocks=16 [ 371.550178][ T9853] EXT4-fs (loop3): Block reservation details [ 371.556491][ T9853] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 371.958731][ T9898] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 372.102009][ T9898] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.3447: bg 0: block 4: invalid block bitmap [ 372.122169][ T9898] EXT4-fs (loop3): Remounting filesystem read-only [ 372.132439][ T9898] EXT4-fs (loop3): 1 truncate cleaned up [ 372.138453][ T9898] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,abort,errors=remount-ro,quota, [ 372.376915][ T9918] syz.3.3454[9918] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 372.376954][ T9918] syz.3.3454[9918] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 372.425003][ T9926] 9pnet: Insufficient options for proto=fd [ 373.119650][ T24] kauditd_printk_skb: 82 callbacks suppressed [ 373.119691][ T24] audit: type=1326 audit(1755842523.790:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9947 comm="syz.0.3467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd443bbe9 code=0x7ffc0000 [ 373.165447][ T24] audit: type=1326 audit(1755842523.820:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9947 comm="syz.0.3467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5dd443bbe9 code=0x7ffc0000 [ 373.197410][ T24] audit: type=1326 audit(1755842523.820:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9947 comm="syz.0.3467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd443bbe9 code=0x7ffc0000 [ 373.232932][ T24] audit: type=1326 audit(1755842523.820:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9947 comm="syz.0.3467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5dd443bbe9 code=0x7ffc0000 [ 373.315718][ T9957] overlayfs: failed to resolve './file0': -2 [ 373.490501][ T24] audit: type=1326 audit(1755842523.820:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9947 comm="syz.0.3467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd443bbe9 code=0x7ffc0000 [ 373.514406][ T24] audit: type=1326 audit(1755842523.820:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9947 comm="syz.0.3467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5dd443bbe9 code=0x7ffc0000 [ 373.553530][ T24] audit: type=1326 audit(1755842523.820:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9947 comm="syz.0.3467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd443bbe9 code=0x7ffc0000 [ 373.602351][ T24] audit: type=1326 audit(1755842523.820:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9947 comm="syz.0.3467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f5dd443bbe9 code=0x7ffc0000 [ 373.629782][ T24] audit: type=1326 audit(1755842523.820:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9947 comm="syz.0.3467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd443bbe9 code=0x7ffc0000 [ 373.654441][ T24] audit: type=1404 audit(1755842524.250:2402): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 374.202681][T10025] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 374.209725][T10025] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 374.220874][T10025] F2FS-fs (loop3): Found nat_bits in checkpoint [ 374.254028][T10025] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 374.261220][T10025] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 374.327688][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 374.349458][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 374.352270][T10036] attempt to access beyond end of device [ 374.352270][T10036] loop3: rw=2049, want=55520, limit=40427 [ 374.368941][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 374.375617][T10036] attempt to access beyond end of device [ 374.375617][T10036] loop3: rw=2049, want=57344, limit=40427 [ 374.397860][T10036] attempt to access beyond end of device [ 374.397860][T10036] loop3: rw=2049, want=51640, limit=40427 [ 374.462613][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 374.478018][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 374.486856][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 374.495398][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 374.503990][ T7184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 374.708028][T10049] overlayfs: failed to resolve './file0': -2 [ 374.719075][ T7422] attempt to access beyond end of device [ 374.719075][ T7422] loop3: rw=2049, want=45104, limit=40427 [ 375.523957][T10072] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue [ 375.576329][T10072] ext4 filesystem being mounted at /215/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 376.158310][T10095] FAT-fs (loop3): Directory bread(block 64) failed [ 376.165445][T10095] FAT-fs (loop3): Directory bread(block 65) failed [ 376.175369][T10095] FAT-fs (loop3): Directory bread(block 66) failed [ 376.182222][T10095] FAT-fs (loop3): Directory bread(block 67) failed [ 376.193644][T10095] FAT-fs (loop3): Directory bread(block 68) failed [ 376.200470][T10095] FAT-fs (loop3): Directory bread(block 69) failed [ 376.207192][T10095] FAT-fs (loop3): Directory bread(block 70) failed [ 376.213794][T10095] FAT-fs (loop3): Directory bread(block 71) failed [ 376.220552][T10095] FAT-fs (loop3): Directory bread(block 72) failed [ 376.227257][T10095] FAT-fs (loop3): Directory bread(block 73) failed [ 376.315451][T10095] FAT-fs (loop3): error, invalid access to FAT (entry 0x00006c61) [ 376.315852][T10106] netlink: 'syz.2.3532': attribute type 15 has an invalid length. [ 376.343036][T10106] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3532'. [ 378.814825][ T24] kauditd_printk_skb: 129 callbacks suppressed [ 378.814843][ T24] audit: type=1400 audit(1755842529.480:2532): avc: denied { read } for pid=10161 comm="syz.1.3553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 378.919332][T10167] hub 8-0:1.0: USB hub found [ 378.925753][T10167] hub 8-0:1.0: 1 port detected [ 379.338835][ T24] audit: type=1400 audit(1755842529.580:2533): avc: denied { write } for pid=10163 comm="syz.4.3554" name="001" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 380.082190][ T24] audit: type=1326 audit(1755842530.640:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10170 comm="syz.1.3556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2989900be9 code=0x7ffc0000 [ 380.224475][ T24] audit: type=1326 audit(1755842530.640:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10170 comm="syz.1.3556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2989900be9 code=0x7ffc0000 [ 380.427845][ T24] audit: type=1326 audit(1755842530.640:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10170 comm="syz.1.3556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2989900be9 code=0x7ffc0000 [ 380.452686][ T24] audit: type=1326 audit(1755842530.640:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10170 comm="syz.1.3556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2989900be9 code=0x7ffc0000 [ 380.477243][ T24] audit: type=1326 audit(1755842530.640:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10170 comm="syz.1.3556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2989900be9 code=0x7ffc0000 [ 380.531407][ T24] audit: type=1326 audit(1755842530.640:2539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10170 comm="syz.1.3556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f2989900be9 code=0x7ffc0000 [ 380.555600][ T24] audit: type=1326 audit(1755842530.640:2540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10170 comm="syz.1.3556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2989900be9 code=0x7ffc0000 [ 380.584204][ T24] audit: type=1326 audit(1755842530.640:2541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10170 comm="syz.1.3556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2989900be9 code=0x7ffc0000 [ 380.715204][T10194] EXT4-fs (loop3): Ignoring removed orlov option [ 380.724160][T10194] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 380.736662][T10194] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #17: comm syz.3.3563: corrupted in-inode xattr [ 380.749490][T10194] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.3563: couldn't read orphan inode 17 (err -117) [ 380.763157][T10194] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000957,nombcache,debug_want_extra_isize=0x000000000000002a,stripe=0x000000000000f151,orlov,nombcache,,errors=continue [ 383.866298][ T24] kauditd_printk_skb: 26 callbacks suppressed [ 383.866326][ T24] audit: type=1400 audit(1755842534.540:2568): avc: denied { create } for pid=10269 comm="syz.2.3590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 383.941708][ T24] audit: type=1400 audit(1755842534.570:2569): avc: denied { bind } for pid=10269 comm="syz.2.3590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 383.979827][ T24] audit: type=1400 audit(1755842534.610:2570): avc: denied { setopt } for pid=10273 comm="syz.0.3593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 384.066226][T10277] hub 8-0:1.0: USB hub found [ 384.071468][T10277] hub 8-0:1.0: 1 port detected [ 384.208715][ T24] audit: type=1400 audit(1755842534.610:2571): avc: denied { bind } for pid=10273 comm="syz.0.3593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 384.388663][ T24] audit: type=1400 audit(1755842534.610:2572): avc: denied { listen } for pid=10273 comm="syz.0.3593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 384.559837][ T24] audit: type=1400 audit(1755842534.610:2573): avc: denied { write } for pid=10273 comm="syz.0.3593" path="socket:[47597]" dev="sockfs" ino=47597 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 385.022708][ T24] audit: type=1107 audit(1755842535.690:2574): pid=10287 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='@' [ 385.241867][ T24] audit: type=1400 audit(1755842535.910:2575): avc: denied { name_bind } for pid=10302 comm="syz.4.3604" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 385.320340][T10307] overlayfs: failed to resolve './file0': -2 [ 386.558006][ T24] audit: type=1400 audit(1755842537.220:2576): avc: denied { write } for pid=10315 comm="syz.4.3607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 386.608234][ T24] audit: type=1400 audit(1755842537.260:2577): avc: denied { read } for pid=10324 comm="syz.2.3610" name="ppp" dev="devtmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 386.708430][T10330] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 388.174245][T10361] overlayfs: failed to resolve './file0': -2 [ 388.347172][T10370] hub 8-0:1.0: USB hub found [ 388.352402][T10370] hub 8-0:1.0: 1 port detected [ 389.316316][ T24] kauditd_printk_skb: 60 callbacks suppressed [ 389.316352][ T24] audit: type=1326 audit(1755842539.980:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10380 comm="syz.4.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeff3cebe9 code=0x7ffc0000 [ 389.354699][ T24] audit: type=1326 audit(1755842540.010:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10380 comm="syz.4.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeff3cebe9 code=0x7ffc0000 [ 389.367031][T10384] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 389.394664][ T24] audit: type=1326 audit(1755842540.010:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10380 comm="syz.4.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdeff3cebe9 code=0x7ffc0000 [ 389.422862][ T24] audit: type=1326 audit(1755842540.010:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10380 comm="syz.4.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeff3cebe9 code=0x7ffc0000 [ 389.469148][ T24] audit: type=1326 audit(1755842540.010:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10380 comm="syz.4.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeff3cebe9 code=0x7ffc0000 [ 389.619177][ T24] audit: type=1326 audit(1755842540.010:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10380 comm="syz.4.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdeff3cebe9 code=0x7ffc0000 [ 389.641567][T10392] device syzkaller0 entered promiscuous mode [ 389.709050][ T24] audit: type=1326 audit(1755842540.130:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10380 comm="syz.4.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeff3cebe9 code=0x7ffc0000 [ 389.859870][ T24] audit: type=1326 audit(1755842540.150:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10380 comm="syz.4.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeff3cebe9 code=0x7ffc0000 [ 390.441280][T10415] overlayfs: failed to resolve './file0': -2 [ 390.537997][ T24] audit: type=1400 audit(1755842541.200:2646): avc: denied { write } for pid=10405 comm="syz.3.3637" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 390.687648][ T24] audit: type=1400 audit(1755842541.200:2647): avc: denied { add_name } for pid=10405 comm="syz.3.3637" name="cpuacct.usage_percpu_sys" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 391.015243][ T4106] Bluetooth: hci0: sending frame failed (-49) [ 392.372358][T10453] 9pnet: Insufficient options for proto=fd [ 392.551865][T10462] overlayfs: failed to resolve './file0': -2 [ 393.046474][ T302] Bluetooth: hci0: command 0x1003 tx timeout [ 393.070712][ T4106] Bluetooth: hci0: sending frame failed (-49) [ 394.190528][T10479] binfmt_misc: register: failed to install interpreter file ./file0 [ 394.536216][T10493] overlayfs: failed to resolve './file0': -2 [ 394.665262][T10490] 9pnet: Insufficient options for proto=fd [ 394.694698][ T24] kauditd_printk_skb: 13 callbacks suppressed [ 394.694709][ T24] audit: type=1400 audit(1755842545.360:2661): avc: denied { block_suspend } for pid=10492 comm="syz.2.3665" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 395.356316][ T5] Bluetooth: hci0: command 0x1001 tx timeout [ 395.362648][ T4106] Bluetooth: hci0: sending frame failed (-49) [ 395.605717][T10528] 9pnet: Insufficient options for proto=fd [ 395.625498][ T24] audit: type=1326 audit(1755842546.290:2662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10531 comm="syz.3.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0dd4abe9 code=0x7ffc0000 [ 395.650769][ T24] audit: type=1326 audit(1755842546.290:2663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10531 comm="syz.3.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0dd4abe9 code=0x7ffc0000 [ 395.681973][ T24] audit: type=1326 audit(1755842546.300:2664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10531 comm="syz.3.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fcc0dd4abe9 code=0x7ffc0000 [ 395.707517][ T24] audit: type=1326 audit(1755842546.300:2665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10531 comm="syz.3.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0dd4abe9 code=0x7ffc0000 [ 395.734188][ T24] audit: type=1326 audit(1755842546.300:2666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10531 comm="syz.3.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0dd4abe9 code=0x7ffc0000 [ 395.758396][ T24] audit: type=1326 audit(1755842546.300:2667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10531 comm="syz.3.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fcc0dd4abe9 code=0x7ffc0000 [ 395.783009][ T24] audit: type=1326 audit(1755842546.300:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10531 comm="syz.3.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0dd4abe9 code=0x7ffc0000 [ 395.811105][ T24] audit: type=1326 audit(1755842546.300:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10531 comm="syz.3.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0dd4abe9 code=0x7ffc0000 [ 395.822713][T10535] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 395.844344][T10535] ext4 filesystem being mounted at /248/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.860086][ T24] audit: type=1400 audit(1755842546.530:2670): avc: denied { create } for pid=10533 comm="syz.3.3682" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 397.579281][ T5] Bluetooth: hci0: command 0x1009 tx timeout [ 397.953588][T10597] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 399.925541][T10662] netlink: 'syz.3.3729': attribute type 15 has an invalid length. [ 399.933609][T10662] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3729'. [ 400.583190][T10665] loop3: p2 [ 400.586577][T10665] loop3: p2 start 150994947 is beyond EOD, truncated [ 400.607958][ T24] kauditd_printk_skb: 77 callbacks suppressed [ 400.607969][ T24] audit: type=1326 audit(1755842551.280:2748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10670 comm="syz.0.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd443bbe9 code=0x7ffc0000 [ 400.643206][ T24] audit: type=1326 audit(1755842551.280:2749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10670 comm="syz.0.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd443bbe9 code=0x7ffc0000 [ 400.668386][ T24] audit: type=1326 audit(1755842551.310:2750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10670 comm="syz.0.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f5dd443bbe9 code=0x7ffc0000 [ 400.693611][ T24] audit: type=1326 audit(1755842551.310:2751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10672 comm="syz.2.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cc757be9 code=0x7ffc0000 [ 400.717389][ T24] audit: type=1326 audit(1755842551.310:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10670 comm="syz.0.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd443bbe9 code=0x7ffc0000 [ 400.741528][ T24] audit: type=1326 audit(1755842551.310:2753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10670 comm="syz.0.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd443bbe9 code=0x7ffc0000 [ 400.765562][ T24] audit: type=1326 audit(1755842551.340:2754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10672 comm="syz.2.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cc757be9 code=0x7ffc0000 [ 400.789219][ T24] audit: type=1326 audit(1755842551.340:2755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10672 comm="syz.2.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81cc757be9 code=0x7ffc0000 [ 400.813399][ T24] audit: type=1326 audit(1755842551.340:2756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10672 comm="syz.2.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cc757be9 code=0x7ffc0000 [ 400.876205][T10676] loop: Write error at byte offset 4, length 3584. [ 400.881471][ T24] audit: type=1326 audit(1755842551.340:2757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10672 comm="syz.2.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cc757be9 code=0x7ffc0000 [ 400.882916][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 400.917759][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 401.048944][T10691] hub 8-0:1.0: USB hub found [ 401.054047][T10691] hub 8-0:1.0: 1 port detected [ 402.343138][T10707] netlink: 'syz.3.3745': attribute type 15 has an invalid length. [ 402.595488][T10707] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3745'. [ 403.927444][T10735] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 404.660662][T10735] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 404.671144][T10735] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 404.805004][T10754] netlink: 'syz.2.3761': attribute type 15 has an invalid length. [ 404.885738][T10754] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3761'. [ 405.033346][T10760] netlink: 'syz.4.3763': attribute type 12 has an invalid length. [ 405.697703][T10779] exfat: Deprecated parameter 'utf8' [ 405.774576][T10779] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 406.771090][T10808] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 406.782202][T10808] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 406.792534][T10808] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 407.032125][ T24] kauditd_printk_skb: 12 callbacks suppressed [ 407.032143][ T24] audit: type=1400 audit(1755842557.700:2770): avc: denied { create } for pid=10815 comm="syz.0.3781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 407.411521][ T24] audit: type=1326 audit(1755842558.060:2771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10820 comm="syz.0.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd443bbe9 code=0x7ffc0000 [ 407.696599][ T24] audit: type=1326 audit(1755842558.110:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10820 comm="syz.0.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5dd443bbe9 code=0x7ffc0000 [ 407.720148][ T24] audit: type=1326 audit(1755842558.110:2773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10820 comm="syz.0.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd443bbe9 code=0x7ffc0000 [ 407.743640][ T24] audit: type=1326 audit(1755842558.110:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10820 comm="syz.0.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5dd443bbe9 code=0x7ffc0000 [ 407.768428][ T24] audit: type=1326 audit(1755842558.120:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10820 comm="syz.0.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd443bbe9 code=0x7ffc0000 [ 407.812390][ T24] audit: type=1326 audit(1755842558.120:2776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10820 comm="syz.0.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5dd443bbe9 code=0x7ffc0000 [ 407.843596][ T24] audit: type=1326 audit(1755842558.120:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10820 comm="syz.0.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd443bbe9 code=0x7ffc0000 [ 407.867758][ T24] audit: type=1326 audit(1755842558.130:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10820 comm="syz.0.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd443bbe9 code=0x7ffc0000 [ 407.926265][ T24] audit: type=1326 audit(1755842558.130:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10820 comm="syz.0.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5dd443bbe9 code=0x7ffc0000 [ 407.973555][T10838] device pim6reg1 entered promiscuous mode [ 409.423738][T10856] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 409.545735][T10873] device pim6reg1 entered promiscuous mode [ 410.228630][T10900] device bridge0 entered promiscuous mode [ 410.235236][T10900] device macsec1 entered promiscuous mode [ 410.248958][T10900] bridge0: port 3(macsec1) entered blocking state [ 410.256780][T10900] bridge0: port 3(macsec1) entered disabled state [ 410.295409][T10900] device bridge0 left promiscuous mode [ 410.471414][T10908] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 410.482414][T10908] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 410.492636][T10908] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 411.841013][T10944] 9pnet: Insufficient options for proto=fd [ 412.787134][T10962] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 412.816117][T10962] ext4 filesystem being mounted at /271/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.795447][T10985] device pim6reg1 entered promiscuous mode [ 415.103388][ T24] kauditd_printk_skb: 27 callbacks suppressed [ 415.103398][ T24] audit: type=1400 audit(1755842565.770:2807): avc: denied { bind } for pid=11013 comm="syz.4.3850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 415.173225][ T24] audit: type=1400 audit(1755842565.770:2808): avc: denied { name_bind } for pid=11013 comm="syz.4.3850" src=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 415.198306][ T24] audit: type=1400 audit(1755842565.800:2809): avc: denied { node_bind } for pid=11013 comm="syz.4.3850" src=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 415.219649][ T24] audit: type=1400 audit(1755842565.860:2810): avc: denied { ioctl } for pid=11013 comm="syz.4.3850" path="socket:[49684]" dev="sockfs" ino=49684 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 415.220892][T11014] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 415.252971][T11014] IPv6: NLM_F_CREATE should be set when creating new route [ 415.386712][T11036] binfmt_misc: register: failed to install interpreter file ./file2 [ 415.509885][T11058] netlink: 'syz.2.3868': attribute type 15 has an invalid length. [ 415.518540][T11058] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3868'. [ 416.057797][ T24] audit: type=1326 audit(1755842566.720:2811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11059 comm="syz.1.3869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2989900be9 code=0x7ffc0000 [ 416.088690][ T24] audit: type=1326 audit(1755842566.750:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11059 comm="syz.1.3869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2989900be9 code=0x7ffc0000 [ 416.113829][ T24] audit: type=1326 audit(1755842566.750:2813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11059 comm="syz.1.3869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f2989900be9 code=0x7ffc0000 [ 416.154327][ T24] audit: type=1326 audit(1755842566.750:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11059 comm="syz.1.3869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2989900be9 code=0x7ffc0000 [ 416.179925][ T24] audit: type=1326 audit(1755842566.750:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11059 comm="syz.1.3869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2989900be9 code=0x7ffc0000 [ 416.430875][T11082] FAT-fs (loop3): Directory bread(block 64) failed [ 416.437458][T11082] FAT-fs (loop3): Directory bread(block 65) failed [ 416.444028][T11082] FAT-fs (loop3): Directory bread(block 66) failed [ 416.450615][T11082] FAT-fs (loop3): Directory bread(block 67) failed [ 416.457336][T11082] FAT-fs (loop3): Directory bread(block 68) failed [ 416.463903][T11082] FAT-fs (loop3): Directory bread(block 69) failed [ 416.470482][T11082] FAT-fs (loop3): Directory bread(block 70) failed [ 416.477119][T11082] FAT-fs (loop3): Directory bread(block 71) failed [ 416.483776][T11082] FAT-fs (loop3): Directory bread(block 72) failed [ 416.490340][T11082] FAT-fs (loop3): Directory bread(block 73) failed [ 416.502466][T11082] FAT-fs (loop3): error, invalid access to FAT (entry 0x00006c61) [ 416.954506][T11093] device syzkaller0 entered promiscuous mode [ 417.537406][T11114] netlink: 'syz.0.3887': attribute type 15 has an invalid length. [ 417.601821][T11114] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3887'. [ 417.676814][T11118] syz.3.3888[11118] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 417.676874][T11118] syz.3.3888[11118] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 418.011292][ T24] audit: type=1326 audit(1755842568.680:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11127 comm="syz.2.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cc757be9 code=0x7ffc0000 [ 420.844275][T11167] tipc: Started in network mode [ 420.858635][T11167] tipc: Own node identity ac14140f, cluster identity 4711 [ 420.873138][T11167] tipc: New replicast peer: 255.255.255.255 [ 420.881512][T11167] tipc: Enabled bearer , priority 10 [ 420.945821][T11176] tipc: Started in network mode [ 421.013664][T11176] tipc: Own node identity fe2047de5478, cluster identity 4711 [ 421.021734][T11176] tipc: Enabled bearer , priority 0 [ 421.073111][T11183] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 421.087430][ T24] kauditd_printk_skb: 14 callbacks suppressed [ 421.087441][ T24] audit: type=1400 audit(1755842571.760:2831): avc: denied { mounton } for pid=11182 comm="syz.3.3914" path="/syzcgroup/unified/syz3" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 421.163876][T11176] tipc: Disabling bearer [ 421.186356][T11192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3915'. [ 421.330640][T11199] capability: warning: `syz.2.3919' uses deprecated v2 capabilities in a way that may be insecure [ 421.667912][T11212] hub 8-0:1.0: USB hub found [ 421.673573][T11212] hub 8-0:1.0: 1 port detected [ 423.378874][ T318] tipc: 32-bit node address hash set to f1414ac [ 423.807577][T11231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3930'. [ 424.630736][ T24] audit: type=1400 audit(1755842575.300:2832): avc: denied { mount } for pid=11240 comm="syz.3.3934" name="/" dev="ramfs" ino=50683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 424.758114][T11247] 9pnet: Insufficient options for proto=fd [ 425.543465][T11260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3942'. [ 425.577193][T11262] netlink: 324 bytes leftover after parsing attributes in process `syz.1.3943'. [ 426.062365][T11282] 9pnet: Insufficient options for proto=fd [ 426.225527][T11294] device veth1_macvtap entered promiscuous mode [ 426.251366][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 426.266596][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 426.279371][ T49] bridge1: port 1(veth3) entered blocking state [ 426.285651][ T49] bridge1: port 1(veth3) entered forwarding state [ 426.300923][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 426.689589][T11305] ================================================================== [ 426.697738][T11305] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x842/0x3280 [ 426.706237][T11305] Read of size 8 at addr ffff8881191919c0 by task syz.4.3959/11305 [ 426.714446][T11305] [ 426.716780][T11305] CPU: 0 PID: 11305 Comm: syz.4.3959 Not tainted 5.10.240-syzkaller #0 [ 426.724987][T11305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 426.735033][T11305] Call Trace: [ 426.738314][T11305] __dump_stack+0x21/0x24 [ 426.742631][T11305] dump_stack_lvl+0x169/0x1d8 [ 426.747467][T11305] ? show_regs_print_info+0x18/0x18 [ 426.752662][T11305] ? thaw_kernel_threads+0x220/0x220 [ 426.757967][T11305] print_address_description+0x7f/0x2c0 [ 426.763493][T11305] ? tc_setup_flow_action+0x842/0x3280 [ 426.768925][T11305] kasan_report+0xe2/0x130 [ 426.773379][T11305] ? flow_action_cookie_create+0x28/0x90 [ 426.778995][T11305] ? tc_setup_flow_action+0x842/0x3280 [ 426.784534][T11305] __asan_report_load8_noabort+0x14/0x20 [ 426.790246][T11305] tc_setup_flow_action+0x842/0x3280 [ 426.795517][T11305] ? __kmalloc+0x1a7/0x330 [ 426.800010][T11305] ? flow_rule_alloc+0x32/0x2c0 [ 426.804837][T11305] mall_replace_hw_filter+0x293/0x810 [ 426.810204][T11305] ? pcpu_block_update_hint_alloc+0x8bc/0xc50 [ 426.816284][T11305] ? mall_set_parms+0x410/0x410 [ 426.821152][T11305] ? tcf_exts_destroy+0xb0/0xb0 [ 426.826040][T11305] ? pcpu_alloc+0xf8a/0x16b0 [ 426.830641][T11305] ? mall_set_parms+0x19d/0x410 [ 426.835668][T11305] mall_change+0x528/0x750 [ 426.840079][T11305] ? __kasan_check_write+0x14/0x20 [ 426.845179][T11305] ? mall_get+0xa0/0xa0 [ 426.849314][T11305] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 426.855223][T11305] ? nla_strcmp+0xf4/0x140 [ 426.859616][T11305] tc_new_tfilter+0x13f6/0x1a10 [ 426.864534][T11305] ? mall_get+0xa0/0xa0 [ 426.868698][T11305] ? tcf_gate_entry_destructor+0x20/0x20 [ 426.874323][T11305] ? security_capable+0x87/0xb0 [ 426.879154][T11305] ? ns_capable+0x8c/0xf0 [ 426.883470][T11305] ? netlink_net_capable+0x125/0x160 [ 426.888775][T11305] ? tcf_gate_entry_destructor+0x20/0x20 [ 426.894383][T11305] rtnetlink_rcv_msg+0x800/0xb90 [ 426.899323][T11305] ? rtnetlink_bind+0x80/0x80 [ 426.904069][T11305] ? arch_stack_walk+0xee/0x140 [ 426.908892][T11305] ? stack_trace_save+0x98/0xe0 [ 426.913715][T11305] ? stack_trace_snprint+0xf0/0xf0 [ 426.918807][T11305] ? memcpy+0x56/0x70 [ 426.922949][T11305] ? avc_has_perm+0x234/0x360 [ 426.927612][T11305] ? __kasan_slab_alloc+0xbd/0xf0 [ 426.932635][T11305] ? slab_post_alloc_hook+0x5d/0x2f0 [ 426.938018][T11305] ? ___sys_sendmsg+0x1f0/0x260 [ 426.942944][T11305] ? avc_has_perm_noaudit+0x240/0x240 [ 426.948295][T11305] ? selinux_nlmsg_lookup+0x3fb/0x4a0 [ 426.953645][T11305] netlink_rcv_skb+0x1e0/0x430 [ 426.958389][T11305] ? rtnetlink_bind+0x80/0x80 [ 426.963039][T11305] ? netlink_ack+0xb80/0xb80 [ 426.967607][T11305] ? __netlink_lookup+0x387/0x3b0 [ 426.972607][T11305] rtnetlink_rcv+0x1c/0x20 [ 426.976998][T11305] netlink_unicast+0x876/0xa40 [ 426.981768][T11305] netlink_sendmsg+0x88d/0xb30 [ 426.986509][T11305] ? schedule_preempt_disabled+0x20/0x20 [ 426.992117][T11305] ? netlink_getsockopt+0x530/0x530 [ 426.997304][T11305] ? security_socket_sendmsg+0x82/0xa0 [ 427.002833][T11305] ? netlink_getsockopt+0x530/0x530 [ 427.008008][T11305] ____sys_sendmsg+0x5a2/0x8c0 [ 427.012838][T11305] ? __sys_sendmsg_sock+0x40/0x40 [ 427.017882][T11305] ? import_iovec+0x7c/0xb0 [ 427.022384][T11305] ___sys_sendmsg+0x1f0/0x260 [ 427.027045][T11305] ? __sys_sendmsg+0x250/0x250 [ 427.031789][T11305] ? __fdget+0x1a1/0x230 [ 427.036024][T11305] __x64_sys_sendmsg+0x1e2/0x2a0 [ 427.040941][T11305] ? ___sys_sendmsg+0x260/0x260 [ 427.045883][T11305] ? switch_fpu_return+0x197/0x340 [ 427.050998][T11305] do_syscall_64+0x31/0x40 [ 427.055407][T11305] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 427.061274][T11305] RIP: 0033:0x7fdeff3cebe9 [ 427.065724][T11305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.085776][T11305] RSP: 002b:00007fdefde37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 427.094263][T11305] RAX: ffffffffffffffda RBX: 00007fdeff5f5fa0 RCX: 00007fdeff3cebe9 [ 427.102220][T11305] RDX: 0000000004000000 RSI: 00002000000006c0 RDI: 0000000000000006 [ 427.110175][T11305] RBP: 00007fdeff451e19 R08: 0000000000000000 R09: 0000000000000000 [ 427.118126][T11305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.126080][T11305] R13: 00007fdeff5f6038 R14: 00007fdeff5f5fa0 R15: 00007ffc25b98d88 [ 427.134501][T11305] [ 427.136813][T11305] Allocated by task 11305: [ 427.141211][T11305] __kasan_kmalloc+0xda/0x110 [ 427.145970][T11305] __kmalloc+0x1a7/0x330 [ 427.150191][T11305] tcf_idr_create+0x5f/0x790 [ 427.154933][T11305] tcf_idr_create_from_flags+0x61/0x70 [ 427.160364][T11305] tcf_gact_init+0x2b4/0x520 [ 427.165061][T11305] tcf_action_init_1+0x3e1/0x670 [ 427.170090][T11305] tcf_action_init+0x1e6/0x700 [ 427.174828][T11305] tcf_exts_validate+0x215/0x510 [ 427.179742][T11305] mall_set_parms+0x4b/0x410 [ 427.184477][T11305] mall_change+0x45c/0x750 [ 427.188956][T11305] tc_new_tfilter+0x13f6/0x1a10 [ 427.193781][T11305] rtnetlink_rcv_msg+0x800/0xb90 [ 427.198695][T11305] netlink_rcv_skb+0x1e0/0x430 [ 427.203435][T11305] rtnetlink_rcv+0x1c/0x20 [ 427.207846][T11305] netlink_unicast+0x876/0xa40 [ 427.212616][T11305] netlink_sendmsg+0x88d/0xb30 [ 427.217476][T11305] ____sys_sendmsg+0x5a2/0x8c0 [ 427.222217][T11305] ___sys_sendmsg+0x1f0/0x260 [ 427.226899][T11305] __x64_sys_sendmsg+0x1e2/0x2a0 [ 427.231826][T11305] do_syscall_64+0x31/0x40 [ 427.236254][T11305] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 427.242208][T11305] [ 427.244511][T11305] Last potentially related work creation: [ 427.250202][T11305] kasan_save_stack+0x3a/0x60 [ 427.254850][T11305] __kasan_record_aux_stack+0xd2/0x100 [ 427.260288][T11305] kasan_record_aux_stack_noalloc+0xb/0x10 [ 427.266065][T11305] call_rcu+0x10e/0x1050 [ 427.270292][T11305] neigh_parms_release+0x1cb/0x200 [ 427.275552][T11305] addrconf_ifdown+0x15bb/0x1800 [ 427.280634][T11305] addrconf_notify+0x3bd/0xe90 [ 427.285381][T11305] raw_notifier_call_chain+0x90/0x100 [ 427.290756][T11305] unregister_netdevice_many+0xf8b/0x1980 [ 427.296462][T11305] unregister_netdevice_queue+0x31c/0x360 [ 427.302156][T11305] __tun_detach+0xca6/0x1450 [ 427.306722][T11305] tun_chr_close+0x92/0x140 [ 427.311230][T11305] __fput+0x2fb/0x770 [ 427.315182][T11305] ____fput+0x15/0x20 [ 427.319138][T11305] task_work_run+0x127/0x190 [ 427.323703][T11305] exit_to_user_mode_loop+0xcb/0xe0 [ 427.328877][T11305] syscall_exit_to_user_mode+0x68/0x90 [ 427.334317][T11305] do_syscall_64+0x3d/0x40 [ 427.338830][T11305] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 427.344865][T11305] [ 427.347341][T11305] Second to last potentially related work creation: [ 427.354162][T11305] kasan_save_stack+0x3a/0x60 [ 427.358830][T11305] __kasan_record_aux_stack+0xd2/0x100 [ 427.364261][T11305] kasan_record_aux_stack_noalloc+0xb/0x10 [ 427.370216][T11305] call_rcu+0x10e/0x1050 [ 427.374431][T11305] neigh_parms_release+0x1cb/0x200 [ 427.379750][T11305] addrconf_ifdown+0x15bb/0x1800 [ 427.384947][T11305] addrconf_notify+0x3bd/0xe90 [ 427.389696][T11305] raw_notifier_call_chain+0x90/0x100 [ 427.395068][T11305] unregister_netdevice_many+0xf8b/0x1980 [ 427.400832][T11305] unregister_netdevice_queue+0x31c/0x360 [ 427.406540][T11305] __tun_detach+0xca6/0x1450 [ 427.411227][T11305] tun_chr_close+0x92/0x140 [ 427.415720][T11305] __fput+0x2fb/0x770 [ 427.419803][T11305] ____fput+0x15/0x20 [ 427.423864][T11305] task_work_run+0x127/0x190 [ 427.428435][T11305] exit_to_user_mode_loop+0xcb/0xe0 [ 427.433626][T11305] syscall_exit_to_user_mode+0x68/0x90 [ 427.439134][T11305] do_syscall_64+0x3d/0x40 [ 427.443532][T11305] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 427.449564][T11305] [ 427.451985][T11305] The buggy address belongs to the object at ffff888119191900 [ 427.451985][T11305] which belongs to the cache kmalloc-192 of size 192 [ 427.466016][T11305] The buggy address is located 0 bytes to the right of [ 427.466016][T11305] 192-byte region [ffff888119191900, ffff8881191919c0) [ 427.479615][T11305] The buggy address belongs to the page: [ 427.485260][T11305] page:ffffea0004646440 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x119191 [ 427.495503][T11305] flags: 0x4000000000000200(slab) [ 427.500517][T11305] raw: 4000000000000200 0000000000000000 0000000100000001 ffff888100043380 [ 427.509094][T11305] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 427.517656][T11305] page dumped because: kasan: bad access detected [ 427.524315][T11305] page_owner tracks the page as allocated [ 427.530027][T11305] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 108, ts 4789392766, free_ts 0 [ 427.545197][T11305] prep_new_page+0x179/0x180 [ 427.549784][T11305] get_page_from_freelist+0x2235/0x23d0 [ 427.555610][T11305] __alloc_pages_nodemask+0x268/0x5f0 [ 427.561210][T11305] new_slab+0x84/0x3f0 [ 427.565263][T11305] ___slab_alloc+0x2a6/0x450 [ 427.570175][T11305] __slab_alloc+0x63/0xa0 [ 427.574521][T11305] kmem_cache_alloc_trace+0x1b3/0x2e0 [ 427.579981][T11305] kernfs_fop_open+0x343/0xb30 [ 427.584785][T11305] do_dentry_open+0x793/0x1090 [ 427.589562][T11305] vfs_open+0x73/0x80 [ 427.593611][T11305] path_openat+0x27ad/0x3160 [ 427.598199][T11305] do_filp_open+0x1b3/0x3e0 [ 427.602858][T11305] do_sys_openat2+0x14c/0x6d0 [ 427.607743][T11305] __x64_sys_openat+0x136/0x160 [ 427.612575][T11305] do_syscall_64+0x31/0x40 [ 427.617650][T11305] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 427.623640][T11305] page_owner free stack trace missing [ 427.629036][T11305] [ 427.631686][T11305] Memory state around the buggy address: [ 427.637666][T11305] ffff888119191880: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 427.646061][T11305] ffff888119191900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 427.654377][T11305] >ffff888119191980: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 427.662410][T11305] ^ [ 427.668542][T11305] ffff888119191a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 427.676589][T11305] ffff888119191a80: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 427.685420][T11305] ================================================================== [ 427.693638][T11305] Disabling lock debugging due to kernel taint [ 427.715899][ T24] audit: type=1400 audit(1755842578.380:2833): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 427.760218][ T24] audit: type=1400 audit(1755842578.410:2834): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 427.782832][ T24] audit: type=1400 audit(1755842578.410:2835): avc: denied { write } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 427.804785][ T24] audit: type=1400 audit(1755842578.410:2836): avc: denied { add_name } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 427.825849][ T24] audit: type=1400 audit(1755842578.410:2837): avc: denied { create } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 427.847402][ T24] audit: type=1400 audit(1755842578.410:2838): avc: denied { append open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 427.870683][ T24] audit: type=1400 audit(1755842578.410:2839): avc: denied { getattr } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1