last executing test programs: 24.017800265s ago: executing program 0 (id=690): openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b208850000007b00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000340)='9p_protocol_dump\x00', r0}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x40db, 0x0, 0x4, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000440)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffff7}, 0x18) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r3, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x80181}], 0x1, 0x10000, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1}}], 0x1, 0x40854) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 23.850560637s ago: executing program 0 (id=694): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff60, 0x0, 0x0, 0x0, 0x423, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsopen(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1398, 0x0, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x23, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) (fail_nth: 2) 23.559283711s ago: executing program 0 (id=696): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x5c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x2, 0x13, 0x0, 0x9, 0x4, 0x0, 0x70bd25, 0x0, [@sadb_sa={0x2, 0x1b, 0x4d4, 0x7b, 0x12, 0x3f, 0x2, 0x40000001}]}, 0x20}}, 0x4) 23.400010223s ago: executing program 0 (id=700): socket$unix(0x1, 0x1, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x8006}]}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$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") syz_clone(0x2a8000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x242, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close_range(r0, 0xffffffffffffffff, 0x0) 22.928321359s ago: executing program 0 (id=706): symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x60, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) 21.887858013s ago: executing program 0 (id=720): gettid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r4, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) 21.812120464s ago: executing program 32 (id=720): gettid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r4, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) 1.582849639s ago: executing program 2 (id=1062): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x13, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newtfilter={0x6c, 0x2c, 0xd29, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r9, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xa, 0x3, 0x6}, {0x9, 0xaece, 0x3, 0x5}}}, @TCF_EM_IPT={0xc, 0x2, 0x0, 0x0, {{0x0, 0x9, 0xffc0}}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) 1.4725711s ago: executing program 3 (id=1065): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) socket$can_bcm(0x1d, 0x2, 0x2) quotactl_fd$Q_SYNC(r1, 0xffffffff80000101, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1e, 0x1b, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4f73}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xc}, @call={0x85, 0x0, 0x0, 0x58}, @ldst={0x1, 0x0, 0x0, 0x7, 0x3, 0x50, 0xffffffffffffffff}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xf}, @ldst={0x1, 0x0, 0x1, 0x7, 0x5, 0x4, 0xfffffffffffffff0}]}, &(0x7f00000004c0)='GPL\x00', 0x2, 0xe5, &(0x7f0000000bc0)=""/229, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000d40)=[{0x5, 0x1, 0x10, 0x1}, {0x1, 0x3, 0x1, 0x3}], 0x10, 0x800000, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2210886, &(0x7f00000001c0)={[{}, {@dioread_nolock}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000400)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000240)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r2}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x1, r2}, 0x38) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) read$char_usb(r3, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e23, 0xb, @rand_addr=' \x01\x00', 0x772d9530}, 0x1c) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000002d28e13e5b3fc53d90ad2834a526c15ec0876a2a58f6cc8fcb00db16cbd97ee09fc356ac1600787847eb808c6dd285b8f14118aae79fb7a539e3e6705921b6bbce72394dea622d0851a4d5903472f5283afd13febdd91521c25040f662194ce51c0bac0b149b7d3568"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000001000000000000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000090000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095000052000000003d47b54798833ae0a2e8beff0c714357178ffefd1dc54453730e23436d01"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r10 = dup(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r7}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB='trafs=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB=',k']) 1.263962663s ago: executing program 2 (id=1069): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000004788efcb7da883e120941bc51d71a0d2bcd0043f385f8f6327c17e4adb3ff783eda51e712be06874ed5bfe85266fa62c9791e1be5251996a39fb70196477d6b2ee80f8d65c02457afc14349eb4c8222d20f16224798649bb530e42c79c44cfc5e16714391e512722b7f38d6d038473be5dc9d55364f83efe4291a4d929bfb3818a83e44f1ad149745b460076b4f1fc5f37ca37e22ddf4e4cc9fcc524baf6d87bd65cf882ef150afb5e2eb436e579cf7eedb04537e4038527f57d32b992e9d4e20b66a1ef13926a0366a36039f34239d9e19e3f8f7d4be7ec963fcc5ebd86913ee26504ba453287e9a6a1368cf0", @ANYRES16=r4, @ANYBLOB="01002ebd70000000000014000000"], 0x14}, 0x1, 0x0, 0x0, 0x104}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = syz_io_uring_setup(0x3bbd, &(0x7f0000000780)={0x0, 0x942e, 0x10100, 0x6, 0x289}, &(0x7f0000000540)=0x0, &(0x7f0000000040)=0x0) syz_emit_ethernet(0xf4, &(0x7f0000000100)=ANY=[@ANYBLOB="856b1200ff00aaaaaaaaaaaa86dd60381f3400be2f01fc000000000000000000000000000000ff0200000000000000000000000000011d0b0000000000000710000000030208070008000000000000000000000000000000000400bba9392315a977d9b2436c803150f4413b8b71638c9cc45d73a69264307d2d492a28e9dbafb1b63e16908d9a3d8b5dc1e867a3700b4d3dccf2fcd04b002e000000000000000600020900000000042088a80000000200000800000086ddae65080088be00000003100000000100000000000000089422eb00000000200000000200000000000000000000000800655800"/244], 0x0) sched_setscheduler(0x0, 0x1, 0x0) r9 = getpid() sched_setscheduler(r9, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}, {0x0}], 0x2}) io_uring_enter(r6, 0x567, 0x72, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r10}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r11}, 0x18) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='.\x00') 1.114303395s ago: executing program 2 (id=1071): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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") mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0x6d9, 0x6, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xc, &(0x7f0000001080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1b) 1.105900005s ago: executing program 3 (id=1073): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000200)={0x1, 0x8, 0x3, 0x7, @vifc_lcl_ifindex, @empty}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc}, {0xfff3}}}, 0x24}}, 0x20040000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000000)=0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044080}, 0x8840) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c00000001010102"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040834) 972.665357ms ago: executing program 5 (id=1074): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000200)={0x1, 0x8, 0x3, 0x7, @vifc_lcl_ifindex, @empty}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000000)=0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x45, 0x3ff, 0x10000, 0x8, 0x8, 0x4, 0x9fffd, 0x6, 0x9fffffff, 0x59bc9fd6, 0x2, 0x2, 0x8000, 0x8, 0x6, 0x4, 0x6, 0x114b6000, 0xfffffffe, 0x2a70, 0xffff73cc, 0x81, 0x4, 0x0, 0x100a, 0x400045, 0x20, 0x8, 0xd29a, 0x9, 0x7, 0xe, 0xa, 0x2, 0x7, 0x5, 0x0, 0xffff, 0x6, 0xffffdff8, 0x4, 0xa2, 0x1a0055ee, 0x401, 0x1, 0x4503, 0x200000, 0x0, 0x22cc, 0x101, 0x4, 0x1, 0x1, 0x800, 0xf9, 0xa, 0x8, 0x2, 0x8, 0x1a8d, 0x4000006, 0x5, 0x107, 0x9, 0x7, 0xc5, 0x4, 0x2, 0xffffffff, 0x6, 0x5, 0x5, 0x5, 0x2, 0x9b58, 0x0, 0xb, 0x4be, 0x4, 0x100, 0xa, 0x2, 0x9fa7, 0x7, 0x38, 0x22, 0xb, 0x7, 0x4d, 0x7, 0x200, 0x2, 0x401, 0x7, 0x45, 0x2ed0, 0x9, 0x0, 0x7, 0x46, 0x9, 0x3, 0x7, 0x4, 0xc, 0x7, 0x8001, 0x7, 0x7, 0x1902, 0xc3c, 0x3, 0x28000000, 0x4000000, 0x30c7, 0xfad, 0x5, 0x8, 0x0, 0x5, 0x10, 0x400, 0xd58, 0x5, 0x2, 0x4, 0x2, 0x2, 0x5, 0x8, 0xea, 0x0, 0x45ba, 0x9, 0x864b, 0xfffffffa, 0x7, 0x9, 0x8001, 0x7, 0xfffffffe, 0x3, 0x9, 0x7, 0xffffff80, 0x43, 0x80000001, 0x1, 0x6, 0x5, 0x9, 0x7fffffff, 0x4, 0x324f035, 0x6, 0x380, 0x7c1, 0x136, 0x2, 0x5, 0x1, 0x3ff, 0x4, 0x0, 0x2, 0x10001, 0xfffffffd, 0x5, 0x4, 0x400, 0x101, 0x5, 0x574c, 0xd589, 0xffffff81, 0x0, 0x4, 0x0, 0x300, 0x8, 0x60000000, 0xb, 0x0, 0xfffffffe, 0x1, 0x81, 0x2, 0x55, 0x4000004, 0xbc6, 0xffff, 0x8, 0x28a6a52, 0x405ff, 0xb, 0x7fff, 0x9, 0x2e4c20b6, 0x1, 0x2004, 0x9, 0x7, 0x4, 0x8, 0x0, 0x1, 0x8, 0x3, 0x7, 0x4, 0xa7e1, 0x4, 0xfffffffa, 0x76e8e800, 0x800, 0x400, 0x6, 0x0, 0xcc6, 0xfffffffb, 0x8000, 0xfffffeff, 0x894, 0x7, 0x7, 0xa, 0x6, 0xfffffffe, 0x9, 0x10001, 0x1, 0x4, 0x8, 0x5d, 0x1000003, 0x7, 0x656, 0x8008, 0x80000001, 0x384, 0x9, 0x58b, 0x80000000, 0xe08, 0x0, 0x1, 0x2c821159, 0x0, 0x9, 0xfff, 0x0, 0x7, 0x0, 0x7f]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x0, 0x40, 0x5, 0x6, 0x2}, {0x7, 0x2, 0x5, 0x6, 0x52bc, 0x9}, 0x4, 0x4, 0x2301}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x20044080}, 0x8840) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c00000001010102"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040834) 881.686198ms ago: executing program 1 (id=1075): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r2, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) 880.853168ms ago: executing program 1 (id=1076): ftruncate(0xffffffffffffffff, 0xc17a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x3c, 0x2, [@TCA_FLOW_EMATCHES={0x38, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x28, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 868.732368ms ago: executing program 4 (id=1077): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x480, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)='B', 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="95c2918a0e74a823f1d617c4f537714dd0df74f08245ebb352f170cd084ea82968d97d3ff88a736bb3c478") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00'}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r1, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) 747.55898ms ago: executing program 5 (id=1078): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_pidfd_open(r0, 0x0) unshare(0x24020400) pidfd_send_signal(r2, 0x2, 0x0, 0x0) 743.36918ms ago: executing program 2 (id=1079): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a0000000500"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 715.92369ms ago: executing program 3 (id=1080): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x573, &(0x7f0000000ec0)="$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") mmap(&(0x7f0000148000/0x2000)=nil, 0x2000, 0xb, 0x4008032, r0, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x2804, 0x0, 0x0, 0x0, 0x400, 0x10001, 0x1, 0x0, 0x0, 0x0, 0x1c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000380)={&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, &(0x7f0000000300)=[{&(0x7f00000002c0)="f5230777c81035a0e3893f62c0317e3e26c951244dcf", 0x16}], 0x1}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRESDEC=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0xfffffffffffffffa}, 0x18) r6 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = dup(r8) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) fsconfig$FSCONFIG_CMD_RECONFIGURE(r9, 0x7, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r10 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108) r11 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040)={0x280}, 0x18) mknodat$null(r11, &(0x7f0000000080)='./file1\x00', 0x4, 0x103) ioctl$EXT4_IOC_SETFSUUID(r10, 0x4008662c, 0xfffffffffffffffe) 700.89254ms ago: executing program 2 (id=1081): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x8}, 0x109100, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000480)="b0", 0x1}], 0x1, 0x0, 0x0, 0x20000851}, 0x0) recvmmsg(r1, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/195, 0xc3}], 0x1, &(0x7f00000000c0)=""/75, 0x4b}, 0x9}], 0x1, 0x40010000, 0x0) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xc, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x10000, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) eventfd2(0x0, 0x80800) 675.13673ms ago: executing program 5 (id=1082): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)}], 0x1}, 0x48005) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0x2}, {0x7, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000)=0x9, 0x60b70677) 665.87619ms ago: executing program 4 (id=1083): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) socket$can_bcm(0x1d, 0x2, 0x2) quotactl_fd$Q_SYNC(r1, 0xffffffff80000101, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1e, 0x1b, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4f73}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xc}, @call={0x85, 0x0, 0x0, 0x58}, @ldst={0x1, 0x0, 0x0, 0x7, 0x3, 0x50, 0xffffffffffffffff}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xf}, @ldst={0x1, 0x0, 0x1, 0x7, 0x5, 0x4, 0xfffffffffffffff0}]}, &(0x7f00000004c0)='GPL\x00', 0x2, 0xe5, &(0x7f0000000bc0)=""/229, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000d40)=[{0x5, 0x1, 0x10, 0x1}, {0x1, 0x3, 0x1, 0x3}], 0x10, 0x800000, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2210886, &(0x7f00000001c0)={[{}, {@dioread_nolock}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000400)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000240)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r2}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x1, r2}, 0x38) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) read$char_usb(r3, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e23, 0xb, @rand_addr=' \x01\x00', 0x772d9530}, 0x1c) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000002d28e13e5b3fc53d90ad2834a526c15ec0876a2a58f6cc8fcb00db16cbd97ee09fc356ac1600787847eb808c6dd285b8f14118aae79fb7a539e3e6705921b6bbce72394dea622d0851a4d5903472f5283afd13febdd91521c25040f662194ce51c0bac0b149b7d3568"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000001000000000000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000090000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095000052000000003d47b54798833ae0a2e8beff0c714357178ffefd1dc54453730e23436d01"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r10 = dup(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r7}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB='trafs=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB=',k']) 635.268061ms ago: executing program 1 (id=1084): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x2000000000000000}, 0x18) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x610300) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x243, @tick=0xf, 0xe, {0xfb, 0xd}, 0x6, 0x2, 0x40}) r3 = socket$kcm(0x11, 0x2, 0x0) r4 = getuid() r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) write$cgroup_subtree(r6, 0x0, 0x32600) write$binfmt_aout(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="03070000b5", @ANYRES32=r4, @ANYRES64], 0xc8) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000280)={&(0x7f0000000300)="93edfcd6b7fed1022123a3abe481b291245cd15eb2491f0de32ec9bcc4e0142ddb0448692cf4d52b4747a89484e5cac95de6ae5706cf7e05d8b33d35bc9eb805d65bc1fda78e1210a68e9dd278b21f2529a7661b49b8c3887f6f16a661217bf6", &(0x7f00000007c0)=""/141, &(0x7f0000000540)="6c5130c7e8664e88b2094b6ff1a81a873c194ffb201245bb03e30360b584a6ef7a8ae796ea6de98ac642d9d4f17c23649db0fdee290b6711248378989ae9de770ab3b0d577b6c6961fc3c480e05aae03ca1871c4ac965ab3d9e3081a8e7f92ab44ed3c05", &(0x7f00000005c0)="abe8cda565e945a87b77dcf84dc24e837771ce2839fa94cdcaf4ef21e3ccc8b63f5fceb5ba511f77dd10758278ac96fe94b9ce93612b7a2a306461564371b34b4dcd37db27b7b9575a69acc5e686932e0c7435fb6004a846", 0x5}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, &(0x7f0000000200)={{0xffffffff, 0xa2df}, {0x5, 0x101}, 0x2, 0x1}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000ac0)={0x0, @adiantum, 0x0, @desc2}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) r12 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r12, 0x11, 0x65, &(0x7f0000002100)=0x7, 0x4) getegid() bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000a80)={0x1, &(0x7f00000009c0)="d38eac1f1ab793b12484bfe01b39fd1c4cb1565745008faab2273e2737e11b061db09540ed7a6b2c97b1fabb0fe3b207d07f51bbbc250090e675482671383564315cb85f93758cf045d1e9909ac382546b6ac999dcf1857d7c1d8f54fa3784d2454737a2951cb6fa2aae870a4457c96730dc2425cf508ccc8ff8c81f54b95588759a725c3f2813a80b4ddb474654", &(0x7f0000000640)=""/76}, 0x20) sendmsg$kcm(r3, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x15, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="a5", 0x1}], 0x1}, 0x0) 559.693232ms ago: executing program 2 (id=1085): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 487.089233ms ago: executing program 1 (id=1086): ftruncate(0xffffffffffffffff, 0xc17a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x3c, 0x2, [@TCA_FLOW_EMATCHES={0x38, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x28, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 486.751043ms ago: executing program 5 (id=1087): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r2, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) 416.982724ms ago: executing program 4 (id=1088): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], &(0x7f0000001500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000040)=""/44) getresgid(&(0x7f00000013c0), &(0x7f0000001400), &(0x7f0000001440)) mq_timedsend(r0, &(0x7f0000001600)="adcead892d40c27b016771156d11123ae50655f0f2eb1dba7a1fdca7db449d783eb285cf1a9f976f948ed24f5b7cecfb62bac41d36e2c780a8092922b3d0b52be5ef981351e48ba0c82c3c15ff787eaeb34d3c35dc89fe86d963f7b13a3502199ac59c082cedc8b94d970c2d29160daa4128f1d6d34707792bcd3638186b445ba93dbeff2e7689f2718b247c739bd8227828133a9068d7b17cf6e3a9f9bdb4c98f82f44d63c78d9344a1e90bdb40e0277a28d00c50503177eaae2a67da7861a5b2566eaff27957620d7cba221cfe3cca979a", 0xd2, 0x800, &(0x7f0000001700)) 397.654694ms ago: executing program 5 (id=1089): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000200)={0x1, 0x8, 0x3, 0x7, @vifc_lcl_ifindex, @empty}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc}, {0xfff3}}}, 0x24}}, 0x20040000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000000)=0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x45, 0x3ff, 0x10000, 0x8, 0x8, 0x4, 0x9fffd, 0x6, 0x9fffffff, 0x59bc9fd6, 0x2, 0x2, 0x8000, 0x8, 0x6, 0x4, 0x6, 0x114b6000, 0xfffffffe, 0x2a70, 0xffff73cc, 0x81, 0x4, 0x0, 0x100a, 0x400045, 0x20, 0x8, 0xd29a, 0x9, 0x7, 0xe, 0xa, 0x2, 0x7, 0x5, 0x0, 0xffff, 0x6, 0xffffdff8, 0x4, 0xa2, 0x1a0055ee, 0x401, 0x1, 0x4503, 0x200000, 0x0, 0x22cc, 0x101, 0x4, 0x1, 0x1, 0x800, 0xf9, 0xa, 0x8, 0x2, 0x8, 0x1a8d, 0x4000006, 0x5, 0x107, 0x9, 0x7, 0xc5, 0x4, 0x2, 0xffffffff, 0x6, 0x5, 0x5, 0x5, 0x2, 0x9b58, 0x0, 0xb, 0x4be, 0x4, 0x100, 0xa, 0x2, 0x9fa7, 0x7, 0x38, 0x22, 0xb, 0x7, 0x4d, 0x7, 0x200, 0x2, 0x401, 0x7, 0x45, 0x2ed0, 0x9, 0x0, 0x7, 0x46, 0x9, 0x3, 0x7, 0x4, 0xc, 0x7, 0x8001, 0x7, 0x7, 0x1902, 0xc3c, 0x3, 0x28000000, 0x4000000, 0x30c7, 0xfad, 0x5, 0x8, 0x0, 0x5, 0x10, 0x400, 0xd58, 0x5, 0x2, 0x4, 0x2, 0x2, 0x5, 0x8, 0xea, 0x0, 0x45ba, 0x9, 0x864b, 0xfffffffa, 0x7, 0x9, 0x8001, 0x7, 0xfffffffe, 0x3, 0x9, 0x7, 0xffffff80, 0x43, 0x80000001, 0x1, 0x6, 0x5, 0x9, 0x7fffffff, 0x4, 0x324f035, 0x6, 0x380, 0x7c1, 0x136, 0x2, 0x5, 0x1, 0x3ff, 0x4, 0x0, 0x2, 0x10001, 0xfffffffd, 0x5, 0x4, 0x400, 0x101, 0x5, 0x574c, 0xd589, 0xffffff81, 0x0, 0x4, 0x0, 0x300, 0x8, 0x60000000, 0xb, 0x0, 0xfffffffe, 0x1, 0x81, 0x2, 0x55, 0x4000004, 0xbc6, 0xffff, 0x8, 0x28a6a52, 0x405ff, 0xb, 0x7fff, 0x9, 0x2e4c20b6, 0x1, 0x2004, 0x9, 0x7, 0x4, 0x8, 0x0, 0x1, 0x8, 0x3, 0x7, 0x4, 0xa7e1, 0x4, 0xfffffffa, 0x76e8e800, 0x800, 0x400, 0x6, 0x0, 0xcc6, 0xfffffffb, 0x8000, 0xfffffeff, 0x894, 0x7, 0x7, 0xa, 0x6, 0xfffffffe, 0x9, 0x10001, 0x1, 0x4, 0x8, 0x5d, 0x1000003, 0x7, 0x656, 0x8008, 0x80000001, 0x384, 0x9, 0x58b, 0x80000000, 0xe08, 0x0, 0x1, 0x2c821159, 0x0, 0x9, 0xfff, 0x0, 0x7, 0x0, 0x7f]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x0, 0x40, 0x5, 0x6, 0x2}, {0x7, 0x2, 0x5, 0x6, 0x52bc, 0x9}, 0x4, 0x4, 0x2301}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x20044080}, 0x8840) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c00000001010102"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040834) 394.608075ms ago: executing program 3 (id=1090): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000200)={0x1, 0x8, 0x3, 0x7, @vifc_lcl_ifindex, @empty}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc}, {0xfff3}}}, 0x24}}, 0x20040000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000000)=0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x20044080}, 0x8840) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c00000001010102"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040834) 362.463245ms ago: executing program 1 (id=1091): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a0000000500"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 331.300005ms ago: executing program 4 (id=1092): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00'}, 0x10) listen(0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r2, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x7, 0x2, 0x3, 0x6, 0x309, 0x38, 0x0, 0xe, 0x0, 0x20, 0x1, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x4, 0x200004, 0xc, 0x400}]}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) close(r2) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r2, 0xc0104811, &(0x7f00000013c0)={0x81, 0x0, 0x3, 0x9}) 243.428456ms ago: executing program 4 (id=1093): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_pidfd_open(r0, 0x0) unshare(0x24020400) pidfd_send_signal(r2, 0x2, 0x0, 0x0) 110.189978ms ago: executing program 1 (id=1094): ftruncate(0xffffffffffffffff, 0xc17a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x3c, 0x2, [@TCA_FLOW_EMATCHES={0x38, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x28, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 109.661658ms ago: executing program 4 (id=1095): symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r0 = socket$key(0xf, 0x3, 0x2) recvfrom(r0, &(0x7f00000005c0)=""/166, 0xa6, 0x10023, &(0x7f0000000240)=@in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0xf}, 0x101}, 0x80) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46100) write$cgroup_type(r1, &(0x7f0000000200), 0x175d9003) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x60, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000190b985a00000000ff000000850000006d000000181100", @ANYRES32=r4, @ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = io_uring_setup(0x322b, &(0x7f0000000500)={0x0, 0xfeb1, 0x4, 0x3, 0x174}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x12, r5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x80000, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) 87.276588ms ago: executing program 5 (id=1096): r0 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') readlinkat(r1, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/204, 0xcc) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000140)={0x3, &(0x7f00000000c0)=[{}, {}, {}]}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x15) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x100000000}, 0x2, 0xffffffff, 0x2, 0x9, 0x4, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000080c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 80.423888ms ago: executing program 3 (id=1097): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x0) 0s ago: executing program 3 (id=1098): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x802) r3 = dup(r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000000)={0x80, 0x17, 0xf00, 0xe0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.586: mark_inode_dirty error [ 79.634329][ T5447] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 79.649592][ T5447] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 79.755625][ T5464] loop2: detected capacity change from 0 to 256 [ 79.787045][ T5464] FAT-fs (loop2): codepage cp862 not found [ 80.311812][ T5474] loop3: detected capacity change from 0 to 128 [ 80.368338][ T5351] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.376566][ T5351] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.656330][ T5351] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.664601][ T5351] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.716778][ T5351] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.725079][ T5351] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.759417][ T5351] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.767681][ T5351] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.810275][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 80.817739][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 80.825342][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 80.837765][ T5480] netlink: 'syz.0.595': attribute type 2 has an invalid length. [ 80.886553][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 80.894069][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 80.901492][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 80.908957][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 80.916334][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 80.923731][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 80.931141][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 80.938561][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 80.945943][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 80.953339][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 81.004475][ T5484] __nla_validate_parse: 7 callbacks suppressed [ 81.004504][ T5484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.596'. [ 81.043626][ T5484] netlink: 24 bytes leftover after parsing attributes in process `syz.1.596'. [ 81.184700][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 81.192151][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 81.199602][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 81.206983][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 81.214386][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 81.221810][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 81.229267][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 81.236657][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 81.244125][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 81.251567][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 81.259059][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 81.266430][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 81.273834][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 81.281419][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 81.288835][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 81.316458][ T10] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 81.337756][ T5496] loop2: detected capacity change from 0 to 1024 [ 81.344715][ T5495] loop0: detected capacity change from 0 to 512 [ 81.372969][ T29] kauditd_printk_skb: 1180 callbacks suppressed [ 81.372980][ T29] audit: type=1400 audit(1746327147.978:12337): avc: denied { map_create } for pid=5499 comm="syz.1.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 81.398430][ T29] audit: type=1400 audit(1746327147.978:12338): avc: denied { bpf } for pid=5499 comm="syz.1.601" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 81.420529][ T5496] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.441850][ T5500] loop1: detected capacity change from 0 to 512 [ 81.448821][ T5495] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.457860][ T5505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.602'. [ 81.462698][ T29] audit: type=1400 audit(1746327148.008:12339): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 81.492298][ T29] audit: type=1400 audit(1746327148.008:12340): avc: denied { open } for pid=3317 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 81.494283][ T5495] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm syz.0.599: corrupted inode contents [ 81.516521][ T29] audit: type=1400 audit(1746327148.008:12341): avc: denied { ioctl } for pid=3317 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 81.516551][ T29] audit: type=1400 audit(1746327148.028:12342): avc: denied { map_read map_write } for pid=5499 comm="syz.1.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 81.533482][ T5507] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, [ 81.553868][ T29] audit: type=1400 audit(1746327148.028:12343): avc: denied { mount } for pid=5494 comm="syz.2.600" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 81.553901][ T29] audit: type=1400 audit(1746327148.028:12344): avc: denied { prog_load } for pid=5499 comm="syz.1.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 81.573745][ T5507] block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 81.581997][ T29] audit: type=1400 audit(1746327148.028:12345): avc: denied { bpf } for pid=5499 comm="syz.1.601" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 81.625915][ T5495] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #2: comm syz.0.599: mark_inode_dirty error [ 81.631566][ T29] audit: type=1400 audit(1746327148.028:12346): avc: denied { perfmon } for pid=5499 comm="syz.1.601" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 81.653606][ T5495] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm syz.0.599: corrupted inode contents [ 81.686327][ T5500] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.696369][ T5495] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.599: mark_inode_dirty error [ 81.813035][ T5513] SELinux: ebitmap: truncated map [ 81.834272][ T5513] SELinux: failed to load policy [ 81.834926][ T5515] loop3: detected capacity change from 0 to 128 [ 81.877724][ T5517] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.921289][ T5517] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.933029][ T5522] loop1: detected capacity change from 0 to 1024 [ 81.941000][ T5522] EXT4-fs: Ignoring removed oldalloc option [ 81.953435][ T5523] netlink: 24 bytes leftover after parsing attributes in process `syz.0.606'. [ 81.969233][ T5519] can0: slcan on ttyS3. [ 81.974575][ T5522] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 81.991728][ T5517] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.001455][ T5526] SELinux: ebitmap: truncated map [ 82.010035][ T5526] SELinux: failed to load policy [ 82.028370][ T5518] can0 (unregistered): slcan off ttyS3. [ 82.049823][ T5517] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.123667][ T5537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.611'. [ 82.141807][ T5537] netlink: 24 bytes leftover after parsing attributes in process `syz.3.611'. [ 82.177030][ T5538] can0: slcan on ttyS3. [ 82.278113][ T5517] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.299797][ T5517] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.313239][ T5517] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.324588][ T5517] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.325783][ T5544] loop3: detected capacity change from 0 to 512 [ 82.355533][ T5544] ext4 filesystem being mounted at /128/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.368418][ T5536] can0 (unregistered): slcan off ttyS3. [ 82.375051][ T5544] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.614: corrupted inode contents [ 82.389082][ T5549] netlink: 'syz.1.615': attribute type 2 has an invalid length. [ 82.407723][ T5550] loop0: detected capacity change from 0 to 1024 [ 82.415608][ T5550] EXT4-fs: Ignoring removed orlov option [ 82.421877][ T5544] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #2: comm syz.3.614: mark_inode_dirty error [ 82.422791][ T5550] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 82.448348][ T5544] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.614: corrupted inode contents [ 82.468272][ T5544] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.614: mark_inode_dirty error [ 82.483614][ T5556] loop1: detected capacity change from 0 to 128 [ 82.494601][ T5550] EXT4-fs error (device loop0): ext4_check_all_de:659: inode #12: block 7: comm syz.0.616: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 82.518460][ T5550] EXT4-fs (loop0): Remounting filesystem read-only [ 82.610870][ T5569] netlink: 'syz.0.621': attribute type 2 has an invalid length. [ 82.635872][ T5568] loop2: detected capacity change from 0 to 1024 [ 82.681286][ T5571] vhci_hcd: invalid port number 96 [ 82.686547][ T5571] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 82.704127][ T5563] vhci_hcd: invalid port number 224 [ 82.709402][ T5563] vhci_hcd: default hub control req: 8017 v0f00 i00e0 l0 [ 82.751165][ T5580] loop3: detected capacity change from 0 to 1024 [ 82.800919][ T5580] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.869754][ T1040] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 82.877188][ T1040] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 82.884653][ T1040] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 82.895428][ T5580] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 82.932640][ T1040] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 82.940054][ T1040] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 82.943456][ T5599] loop0: detected capacity change from 0 to 1024 [ 82.947441][ T1040] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 82.954937][ T5599] EXT4-fs: Ignoring removed oldalloc option [ 82.961190][ T1040] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 82.961209][ T1040] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 82.961228][ T1040] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 82.969662][ T5599] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 82.974583][ T1040] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 83.006461][ T1040] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 83.013925][ T1040] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 83.021343][ T1040] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 83.028963][ T1040] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 83.036465][ T1040] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 83.043879][ T1040] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 83.051296][ T1040] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 83.058721][ T1040] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 83.066142][ T1040] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 83.067091][ T5599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.630'. [ 83.073565][ T1040] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 83.073591][ T1040] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 83.097090][ T1040] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 83.104508][ T1040] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 83.111893][ T1040] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 83.119324][ T1040] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 83.126770][ T1040] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 83.134155][ T1040] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 83.141592][ T1040] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 83.149127][ T5604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.630'. [ 83.151080][ T1040] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 83.206309][ T5606] loop3: detected capacity change from 0 to 512 [ 83.224570][ T5608] loop1: detected capacity change from 0 to 128 [ 83.232699][ T5606] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.244638][ T5612] loop0: detected capacity change from 0 to 1024 [ 83.253760][ T5612] EXT4-fs: Ignoring removed orlov option [ 83.261344][ T5612] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 83.277856][ T5606] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.631: corrupted inode contents [ 83.296163][ T5612] EXT4-fs error (device loop0): ext4_check_all_de:659: inode #12: block 7: comm syz.0.632: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 83.317001][ T5606] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #2: comm syz.3.631: mark_inode_dirty error [ 83.328503][ T5606] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.631: corrupted inode contents [ 83.330905][ T5612] EXT4-fs (loop0): Remounting filesystem read-only [ 83.344043][ T5606] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.631: mark_inode_dirty error [ 83.453148][ T5626] can0: slcan on ttyS3. [ 83.518802][ T5625] can0 (unregistered): slcan off ttyS3. [ 83.570963][ T5637] loop4: detected capacity change from 0 to 1024 [ 83.587013][ T5637] EXT4-fs: Ignoring removed oldalloc option [ 83.594666][ T5637] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 83.655067][ T5644] loop2: detected capacity change from 0 to 256 [ 83.763981][ T5646] netlink: 28 bytes leftover after parsing attributes in process `syz.3.642'. [ 83.773043][ T5646] netlink: 28 bytes leftover after parsing attributes in process `syz.3.642'. [ 83.853798][ T5644] FAT-fs (loop2): codepage cp862 not found [ 84.796499][ T5664] loop0: detected capacity change from 0 to 512 [ 84.835520][ T5664] ext4 filesystem being mounted at /141/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.854644][ T5664] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm syz.0.648: corrupted inode contents [ 84.891186][ T5664] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #2: comm syz.0.648: mark_inode_dirty error [ 84.913125][ T5664] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm syz.0.648: corrupted inode contents [ 84.964042][ T5673] loop4: detected capacity change from 0 to 1024 [ 85.001368][ T5675] vhci_hcd: invalid port number 96 [ 85.006554][ T5675] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 85.142090][ T5687] netlink: 'syz.1.654': attribute type 2 has an invalid length. [ 85.195921][ T5664] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.648: mark_inode_dirty error [ 85.273052][ T5692] SELinux: ebitmap: truncated map [ 85.279778][ T5692] SELinux: failed to load policy [ 85.375501][ T5702] loop0: detected capacity change from 0 to 128 [ 85.392756][ T5702] vfat: Unknown parameter 'iocha ' [ 85.483654][ T5718] loop2: detected capacity change from 0 to 128 [ 85.495588][ T5720] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 85.539567][ T5721] vhci_hcd: invalid port number 96 [ 85.544744][ T5721] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 85.629129][ T5729] loop3: detected capacity change from 0 to 512 [ 85.644212][ T5733] loop0: detected capacity change from 0 to 1024 [ 85.659361][ T5729] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 85.689362][ T5729] EXT4-fs (loop3): 1 truncate cleaned up [ 85.697941][ T5733] EXT4-fs: Ignoring removed oldalloc option [ 85.710563][ T5736] loop2: detected capacity change from 0 to 1024 [ 85.729888][ T5733] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 85.748853][ T5736] EXT4-fs: Ignoring removed oldalloc option [ 85.820310][ T5736] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 85.889131][ T5746] loop1: detected capacity change from 0 to 1024 [ 85.895129][ T5736] FAULT_INJECTION: forcing a failure. [ 85.895129][ T5736] name failslab, interval 1, probability 0, space 0, times 0 [ 85.896889][ T5746] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.908116][ T5736] CPU: 1 UID: 0 PID: 5736 Comm: syz.2.672 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(voluntary) [ 85.908145][ T5736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 85.908194][ T5736] Call Trace: [ 85.908201][ T5736] [ 85.908209][ T5736] __dump_stack+0x1d/0x30 [ 85.908234][ T5736] dump_stack_lvl+0xe8/0x140 [ 85.908336][ T5736] dump_stack+0x15/0x1b [ 85.908355][ T5736] should_fail_ex+0x265/0x280 [ 85.908390][ T5736] ? alloc_pipe_info+0xae/0x350 [ 85.908425][ T5736] should_failslab+0x8c/0xb0 [ 85.908536][ T5736] __kmalloc_cache_noprof+0x4c/0x320 [ 85.908560][ T5736] alloc_pipe_info+0xae/0x350 [ 85.908588][ T5736] splice_direct_to_actor+0x592/0x680 [ 85.908613][ T5736] ? kstrtouint_from_user+0x9f/0xf0 [ 85.908675][ T5736] ? __pfx_direct_splice_actor+0x10/0x10 [ 85.908698][ T5736] ? __rcu_read_unlock+0x4f/0x70 [ 85.908720][ T5736] ? copy_from_kernel_nofault_allowed+0x4a/0xa0 [ 85.908793][ T5736] ? avc_policy_seqno+0x15/0x30 [ 85.908830][ T5736] do_splice_direct+0xda/0x150 [ 85.908925][ T5736] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 85.908954][ T5736] do_sendfile+0x380/0x640 [ 85.908991][ T5736] __x64_sys_sendfile64+0x105/0x150 [ 85.909048][ T5736] x64_sys_call+0xb39/0x2fb0 [ 85.909070][ T5736] do_syscall_64+0xd0/0x1a0 [ 85.909113][ T5736] ? clear_bhb_loop+0x25/0x80 [ 85.909136][ T5736] ? clear_bhb_loop+0x25/0x80 [ 85.909194][ T5736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.909218][ T5736] RIP: 0033:0x7f73a181e969 [ 85.909233][ T5736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.909286][ T5736] RSP: 002b:00007f739fe87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 85.909306][ T5736] RAX: ffffffffffffffda RBX: 00007f73a1a45fa0 RCX: 00007f73a181e969 [ 85.909320][ T5736] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000004 [ 85.909333][ T5736] RBP: 00007f739fe87090 R08: 0000000000000000 R09: 0000000000000000 [ 85.909346][ T5736] R10: 0000000000100001 R11: 0000000000000246 R12: 0000000000000001 [ 85.909359][ T5736] R13: 0000000000000000 R14: 00007f73a1a45fa0 R15: 00007fffe20c6388 [ 85.909380][ T5736] [ 86.048032][ T5749] loop0: detected capacity change from 0 to 512 [ 86.221396][ T5749] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.397869][ T29] kauditd_printk_skb: 1683 callbacks suppressed [ 86.397883][ T29] audit: type=1400 audit(1746327152.998:14030): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 86.448291][ T29] audit: type=1400 audit(1746327153.008:14031): avc: denied { prog_load } for pid=5765 comm="syz.4.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 86.467385][ T29] audit: type=1400 audit(1746327153.008:14032): avc: denied { bpf } for pid=5765 comm="syz.4.681" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 86.488013][ T29] audit: type=1400 audit(1746327153.008:14033): avc: denied { perfmon } for pid=5765 comm="syz.4.681" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 86.508966][ T29] audit: type=1400 audit(1746327153.008:14034): avc: denied { prog_run } for pid=5765 comm="syz.4.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 86.527999][ T29] audit: type=1400 audit(1746327153.018:14035): avc: denied { open } for pid=5765 comm="syz.4.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 86.547830][ T29] audit: type=1400 audit(1746327153.018:14036): avc: denied { kernel } for pid=5765 comm="syz.4.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 86.561703][ T5769] netlink: 'syz.1.682': attribute type 2 has an invalid length. [ 86.571033][ T29] audit: type=1400 audit(1746327153.078:14037): avc: denied { write } for pid=5765 comm="syz.4.681" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 86.597738][ T29] audit: type=1400 audit(1746327153.078:14038): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.622318][ T29] audit: type=1400 audit(1746327153.078:14039): avc: denied { open } for pid=3303 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.665588][ T5771] loop2: detected capacity change from 0 to 1024 [ 86.677201][ T5771] EXT4-fs: Ignoring removed orlov option [ 86.685396][ T5771] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 86.722351][ T5771] EXT4-fs error (device loop2): ext4_check_all_de:659: inode #12: block 7: comm syz.2.683: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 86.748466][ T5771] EXT4-fs (loop2): Remounting filesystem read-only [ 86.763447][ T5776] __nla_validate_parse: 11 callbacks suppressed [ 86.763461][ T5776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.685'. [ 86.818312][ T5776] netlink: 24 bytes leftover after parsing attributes in process `syz.1.685'. [ 87.020376][ T5786] can0: slcan on ttyS3. [ 87.038057][ T5790] loop1: detected capacity change from 0 to 2048 [ 87.159173][ T5783] can0 (unregistered): slcan off ttyS3. [ 87.190211][ T5790] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 87.213076][ T5800] FAULT_INJECTION: forcing a failure. [ 87.213076][ T5800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.226391][ T5800] CPU: 0 UID: 0 PID: 5800 Comm: syz.0.694 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(voluntary) [ 87.226471][ T5800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 87.226485][ T5800] Call Trace: [ 87.226491][ T5800] [ 87.226499][ T5800] __dump_stack+0x1d/0x30 [ 87.226565][ T5800] dump_stack_lvl+0xe8/0x140 [ 87.226582][ T5800] dump_stack+0x15/0x1b [ 87.226600][ T5800] should_fail_ex+0x265/0x280 [ 87.226648][ T5800] should_fail+0xb/0x20 [ 87.226736][ T5800] should_fail_usercopy+0x1a/0x20 [ 87.226753][ T5800] _copy_from_user+0x1c/0xb0 [ 87.226776][ T5800] do_ipv6_setsockopt+0x220/0x22e0 [ 87.226870][ T5800] ? avc_has_perm_noaudit+0x156/0x200 [ 87.226900][ T5800] ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0 [ 87.226987][ T5800] ipv6_setsockopt+0x59/0x130 [ 87.227010][ T5800] tcp_setsockopt+0x95/0xb0 [ 87.227096][ T5800] sock_common_setsockopt+0x66/0x80 [ 87.227119][ T5800] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 87.227141][ T5800] __sys_setsockopt+0x181/0x200 [ 87.227221][ T5800] __x64_sys_setsockopt+0x64/0x80 [ 87.227247][ T5800] x64_sys_call+0x2bd5/0x2fb0 [ 87.227265][ T5800] do_syscall_64+0xd0/0x1a0 [ 87.227288][ T5800] ? clear_bhb_loop+0x25/0x80 [ 87.227358][ T5800] ? clear_bhb_loop+0x25/0x80 [ 87.227375][ T5800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.227406][ T5800] RIP: 0033:0x7f51026de969 [ 87.227418][ T5800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.227435][ T5800] RSP: 002b:00007f5100d47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 87.227530][ T5800] RAX: ffffffffffffffda RBX: 00007f5102905fa0 RCX: 00007f51026de969 [ 87.227540][ T5800] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 87.227550][ T5800] RBP: 00007f5100d47090 R08: 00000000000014c8 R09: 0000000000000000 [ 87.227559][ T5800] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.227716][ T5800] R13: 0000000000000000 R14: 00007f5102905fa0 R15: 00007ffe175faad8 [ 87.227755][ T5800] [ 87.278366][ T5790] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 87.321808][ T5802] netlink: 'syz.4.695': attribute type 2 has an invalid length. [ 87.325672][ T5790] EXT4-fs (loop1): This should not happen!! Data will be lost [ 87.325672][ T5790] [ 87.412771][ T5729] syz.3.670 (5729) used greatest stack depth: 6032 bytes left [ 87.416530][ T5790] EXT4-fs (loop1): Total free blocks count 0 [ 87.416549][ T5790] EXT4-fs (loop1): Free/Dirty block details [ 87.484734][ T5790] EXT4-fs (loop1): free_blocks=2415919104 [ 87.490486][ T5790] EXT4-fs (loop1): dirty_blocks=32 [ 87.495811][ T5790] EXT4-fs (loop1): Block reservation details [ 87.501902][ T5790] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 87.530930][ T5807] loop2: detected capacity change from 0 to 128 [ 87.564946][ T5809] loop4: detected capacity change from 0 to 512 [ 87.644126][ T5814] loop4: detected capacity change from 0 to 1024 [ 87.651969][ T5814] EXT4-fs: Ignoring removed oldalloc option [ 87.672427][ T5814] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 87.686202][ T5816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.702'. [ 87.727812][ T5816] netlink: 24 bytes leftover after parsing attributes in process `syz.2.702'. [ 87.879135][ T5811] loop0: detected capacity change from 0 to 8192 [ 87.896226][ T5803] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 87.908846][ T5803] EXT4-fs (loop1): This should not happen!! Data will be lost [ 87.908846][ T5803] [ 87.929885][ T5817] xt_CT: You must specify a L4 protocol and not use inversions on it [ 87.969024][ T5811] pim6reg1: entered promiscuous mode [ 87.974327][ T5811] pim6reg1: entered allmulticast mode [ 88.132666][ T5830] netlink: 44 bytes leftover after parsing attributes in process `syz.4.707'. [ 88.182550][ T5833] loop1: detected capacity change from 0 to 1024 [ 88.184837][ T5833] EXT4-fs: Ignoring removed i_version option [ 88.195951][ T5833] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.395216][ T5845] loop1: detected capacity change from 0 to 1024 [ 88.399708][ T5847] netlink: 'syz.4.711': attribute type 2 has an invalid length. [ 88.428157][ T5845] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 88.453107][ T5846] vhci_hcd: invalid port number 224 [ 88.458347][ T5846] vhci_hcd: default hub control req: 8017 v0f00 i00e0 l0 [ 88.478284][ T5845] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 88.496543][ T5845] EXT4-fs (loop1): orphan cleanup on readonly fs [ 88.517556][ T5845] EXT4-fs error (device loop1): ext4_map_blocks:709: inode #3: block 3: comm syz.1.712: lblock 3 mapped to illegal pblock 3 (length 1) [ 88.540968][ T5845] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.712: Failed to acquire dquot type 0 [ 88.567524][ T5845] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 3: comm syz.1.712: lblock 3 mapped to illegal pblock 3 (length 1) [ 88.633683][ T5845] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.712: Failed to acquire dquot type 0 [ 88.668406][ T5845] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.712: Freeing blocks not in datazone - block = 0, count = 4096 [ 88.708570][ T5845] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 3: comm syz.1.712: lblock 3 mapped to illegal pblock 3 (length 1) [ 88.730585][ T5845] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.712: Failed to acquire dquot type 0 [ 88.742413][ T5845] EXT4-fs (loop1): 1 orphan inode deleted [ 88.753635][ T5851] loop3: detected capacity change from 0 to 2048 [ 88.766231][ T5845] SELinux: failed to load policy [ 88.809087][ T5851] loop3: p1 < > [ 88.815186][ T5855] netlink: 24 bytes leftover after parsing attributes in process `syz.4.715'. [ 88.970818][ T5860] loop2: detected capacity change from 0 to 1024 [ 88.980589][ T5860] EXT4-fs: Ignoring removed oldalloc option [ 88.993952][ T5858] loop1: detected capacity change from 0 to 1024 [ 89.002208][ T5860] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 89.012982][ T5858] EXT4-fs: Ignoring removed orlov option [ 89.021591][ T5858] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 89.091751][ T51] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.139662][ T5858] EXT4-fs error (device loop1): ext4_check_all_de:659: inode #12: block 7: comm syz.1.718: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 89.178349][ T5858] EXT4-fs (loop1): Remounting filesystem read-only [ 89.185975][ T51] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.233173][ T51] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.299973][ T51] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.374482][ T5881] loop1: detected capacity change from 0 to 512 [ 89.386370][ T51] bridge_slave_1: left allmulticast mode [ 89.392192][ T51] bridge_slave_1: left promiscuous mode [ 89.397814][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.414849][ T5889] loop2: detected capacity change from 0 to 128 [ 89.421749][ T51] bridge_slave_0: left allmulticast mode [ 89.427392][ T51] bridge_slave_0: left promiscuous mode [ 89.432110][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 89.433045][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.440309][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 89.454800][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 89.462612][ T5881] EXT4-fs (loop1): orphan cleanup on readonly fs [ 89.471266][ T5881] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.724: bg 0: block 248: padding at end of block bitmap is not set [ 89.472743][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 89.492961][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 89.499615][ T5881] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.724: Failed to acquire dquot type 1 [ 89.500358][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 89.518869][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 89.526272][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 89.528852][ T5881] EXT4-fs (loop1): 1 truncate cleaned up [ 89.533707][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 89.546687][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 89.554220][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 89.561653][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 89.569112][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 89.576743][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 89.584178][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 89.591617][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 89.599078][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 89.606465][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 89.613909][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 89.621324][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 89.628874][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 89.636365][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 89.643856][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 89.651250][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 89.658719][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 89.666167][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 89.673595][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 89.681074][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 89.690453][ T3381] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz1 [ 89.700295][ T5881] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 89.720475][ T5881] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 89.821104][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.830742][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.840092][ T51] bond0 (unregistering): Released all slaves [ 89.887741][ T51] hsr_slave_0: left promiscuous mode [ 89.894683][ T51] hsr_slave_1: left promiscuous mode [ 89.900385][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.907891][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.916757][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.924319][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.934778][ T51] veth1_macvtap: left promiscuous mode [ 89.940418][ T51] veth0_macvtap: left promiscuous mode [ 89.945971][ T51] veth1_vlan: left promiscuous mode [ 89.951985][ T51] veth0_vlan: left promiscuous mode [ 90.010277][ T5912] netlink: 24 bytes leftover after parsing attributes in process `syz.1.728'. [ 90.022559][ T5910] loop2: detected capacity change from 0 to 512 [ 90.048023][ T5914] loop4: detected capacity change from 0 to 1024 [ 90.055077][ T5914] EXT4-fs: Ignoring removed oldalloc option [ 90.061679][ T5914] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 90.063932][ T5910] ext4 filesystem being mounted at /148/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.074424][ T51] team0 (unregistering): Port device team_slave_1 removed [ 90.092728][ T51] team0 (unregistering): Port device team_slave_0 removed [ 90.150464][ T5904] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.160291][ T5904] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.238257][ T5904] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.248067][ T5904] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.296896][ T5926] loop3: detected capacity change from 0 to 512 [ 90.304409][ T5904] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.314201][ T5904] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.324643][ T5928] vhci_hcd: invalid port number 224 [ 90.329950][ T5928] vhci_hcd: default hub control req: 8017 v0f00 i00e0 l0 [ 90.340985][ T5926] ext4 filesystem being mounted at /148/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.403007][ T5936] loop2: detected capacity change from 0 to 1024 [ 90.414583][ T5937] loop4: detected capacity change from 0 to 1024 [ 90.423950][ T5937] EXT4-fs: Ignoring removed orlov option [ 90.424753][ T5904] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.439489][ T5904] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.450066][ T5937] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 90.474373][ T5878] chnl_net:caif_netlink_parms(): no params data found [ 90.495249][ T5904] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.500765][ T5937] EXT4-fs error (device loop4): ext4_check_all_de:659: inode #12: block 7: comm syz.4.737: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 90.503723][ T5904] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.532234][ T5937] EXT4-fs (loop4): Remounting filesystem read-only [ 90.553674][ T5904] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.562059][ T5904] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.595025][ T5904] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.603348][ T5904] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.626728][ T5948] loop4: detected capacity change from 0 to 1024 [ 90.634541][ T5948] EXT4-fs: Ignoring removed i_version option [ 90.640640][ T5948] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.647997][ T5904] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.656202][ T5904] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.710011][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.717194][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.729224][ T5878] bridge_slave_0: entered allmulticast mode [ 90.735734][ T5878] bridge_slave_0: entered promiscuous mode [ 90.743713][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.750978][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.758142][ T5878] bridge_slave_1: entered allmulticast mode [ 90.768769][ T5878] bridge_slave_1: entered promiscuous mode [ 90.801674][ T5878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.822550][ T5878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.833482][ T5959] can0: slcan on ttyS3. [ 90.861996][ T5963] loop4: detected capacity change from 0 to 512 [ 90.871666][ T5878] team0: Port device team_slave_0 added [ 90.878349][ T5878] team0: Port device team_slave_1 added [ 90.893517][ T5963] ext4 filesystem being mounted at /143/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.904107][ T5958] can0 (unregistered): slcan off ttyS3. [ 90.920087][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.927128][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.953195][ T5878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.966149][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.973105][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.999171][ T5878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.037780][ T10] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 91.040099][ T5971] loop3: detected capacity change from 0 to 128 [ 91.045251][ T10] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 91.058951][ T10] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 91.067379][ T10] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 91.073184][ T5878] hsr_slave_0: entered promiscuous mode [ 91.074794][ T10] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 91.082933][ T5878] hsr_slave_1: entered promiscuous mode [ 91.087664][ T10] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 91.093659][ T5878] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.100671][ T10] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 91.109321][ T5878] Cannot create hsr debugfs directory [ 91.115666][ T10] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 91.115697][ T10] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 91.135954][ T10] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 91.144109][ T10] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 91.151967][ T10] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 91.159365][ T10] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 91.166991][ T10] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 91.174541][ T10] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 91.181974][ T10] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 91.189524][ T10] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 91.196987][ T10] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 91.204461][ T10] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 91.211919][ T10] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 91.219322][ T10] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 91.226683][ T10] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 91.234059][ T10] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 91.241462][ T10] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 91.248890][ T10] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 91.256267][ T10] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 91.263721][ T10] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 91.271255][ T10] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 91.280424][ T10] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz1 [ 91.371771][ T5980] loop3: detected capacity change from 0 to 1024 [ 91.371957][ T5982] loop4: detected capacity change from 0 to 1024 [ 91.386393][ T5981] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.391186][ T5982] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.407588][ T29] kauditd_printk_skb: 1356 callbacks suppressed [ 91.407603][ T29] audit: type=1400 audit(1746327158.018:15388): avc: denied { read write } for pid=5977 comm="syz.4.746" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 91.428891][ T5980] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.439830][ T29] audit: type=1400 audit(1746327158.018:15389): avc: denied { open } for pid=5977 comm="syz.4.746" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 91.472464][ T29] audit: type=1400 audit(1746327158.018:15390): avc: denied { open } for pid=5977 comm="syz.4.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 91.491701][ T29] audit: type=1400 audit(1746327158.018:15391): avc: denied { perfmon } for pid=5977 comm="syz.4.746" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 91.495344][ T5988] netlink: 24 bytes leftover after parsing attributes in process `syz.2.748'. [ 91.512625][ T29] audit: type=1400 audit(1746327158.018:15392): avc: denied { kernel } for pid=5977 comm="syz.4.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 91.526191][ T5989] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, [ 91.540938][ T29] audit: type=1400 audit(1746327158.038:15393): avc: denied { mount } for pid=5979 comm="syz.3.747" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 91.541178][ T29] audit: type=1400 audit(1746327158.058:15394): avc: denied { perfmon } for pid=5977 comm="syz.4.746" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 91.549208][ T5989] block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 91.563354][ T5990] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, [ 91.570888][ T29] audit: type=1400 audit(1746327158.058:15395): avc: denied { create } for pid=5977 comm="syz.4.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 91.570917][ T29] audit: type=1400 audit(1746327158.058:15396): avc: denied { write } for pid=5977 comm="syz.4.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 91.591776][ T5990] block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 91.600559][ T29] audit: type=1400 audit(1746327158.058:15397): avc: denied { prog_load } for pid=5977 comm="syz.4.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 91.682325][ T5981] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.722985][ T5981] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.748250][ T5878] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 91.759521][ T5878] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 91.771906][ T5981] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.804529][ T5878] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 91.825578][ T5878] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 91.833438][ T5994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.749'. [ 91.849477][ T5994] ip6gre1: entered allmulticast mode [ 91.887036][ T6002] loop4: detected capacity change from 0 to 128 [ 91.914736][ T6002] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 91.931446][ T6002] System zones: 1-3, 19-19, 35-36 [ 91.939431][ T6002] ext4 filesystem being mounted at /146/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 91.950800][ T5981] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.049488][ T6011] loop1: detected capacity change from 0 to 1024 [ 92.056914][ T6011] EXT4-fs: Ignoring removed oldalloc option [ 92.099152][ T5981] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.101162][ T3659] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.114917][ T3659] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.122340][ T3659] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.133943][ T6011] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 92.155069][ T3659] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.162501][ T5981] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.170791][ T3659] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.178235][ T3659] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.185631][ T3659] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.187153][ T5981] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.193035][ T3659] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.193063][ T3659] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.215979][ T3659] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.223493][ T3659] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.231019][ T3659] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.238475][ T3659] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.315387][ T5878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.332207][ T5878] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.358285][ T3659] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.364925][ T1712] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.365747][ T3659] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.372739][ T1712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.387442][ T3659] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.394932][ T3659] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.395012][ T3659] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.395042][ T1712] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.395058][ T3659] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.395075][ T1712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.395085][ T3659] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.395109][ T3659] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.395129][ T3659] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.395151][ T3659] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.395177][ T3659] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.395252][ T3659] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.395278][ T3659] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.395301][ T3659] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.395321][ T3659] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 92.410038][ T3659] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz1 [ 92.455631][ T6026] loop1: detected capacity change from 0 to 1024 [ 92.630234][ T6026] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.674910][ T6037] can0: slcan on ttyS3. [ 92.703900][ T5878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.756944][ T6026] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 92.779346][ T6032] can0 (unregistered): slcan off ttyS3. [ 92.862810][ T6045] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 92.937442][ T6055] netlink: 'syz.1.767': attribute type 2 has an invalid length. [ 92.957276][ T6045] netlink: 'syz.3.765': attribute type 10 has an invalid length. [ 92.997188][ T6045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.028438][ T6045] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 93.069760][ T6057] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.084158][ T6064] loop2: detected capacity change from 0 to 1024 [ 93.098950][ T6064] EXT4-fs: Ignoring removed orlov option [ 93.118500][ T6064] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 93.153527][ T6067] loop1: detected capacity change from 0 to 1024 [ 93.169030][ T6067] EXT4-fs: Ignoring removed oldalloc option [ 93.179837][ T6064] EXT4-fs error (device loop2): ext4_check_all_de:659: inode #12: block 7: comm syz.2.769: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 93.202810][ T6067] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 93.216449][ T5878] veth0_vlan: entered promiscuous mode [ 93.229332][ T5878] veth1_vlan: entered promiscuous mode [ 93.245805][ T6064] EXT4-fs (loop2): Remounting filesystem read-only [ 93.256275][ T6057] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.299239][ T5878] veth0_macvtap: entered promiscuous mode [ 93.308630][ T41] nci: nci_rsp_packet: unknown rsp opcode 0x10e [ 93.366282][ T6057] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.391385][ T5878] veth1_macvtap: entered promiscuous mode [ 93.412438][ T6070] hub 2-0:1.0: USB hub found [ 93.417179][ T6070] hub 2-0:1.0: 8 ports detected [ 93.429862][ T6057] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.448992][ T6077] loop1: detected capacity change from 0 to 512 [ 93.474298][ T6077] EXT4-fs (loop1): orphan cleanup on readonly fs [ 93.482596][ T6077] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.772: bg 0: block 248: padding at end of block bitmap is not set [ 93.497122][ T6077] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.772: Failed to acquire dquot type 1 [ 93.515032][ T6077] EXT4-fs (loop1): 1 truncate cleaned up [ 93.529106][ T5878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.539566][ T5878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.549396][ T5878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.559878][ T5878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.569704][ T5878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.580148][ T5878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.590068][ T5878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.600516][ T5878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.611203][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.611940][ T6077] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 93.620761][ T5878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.638245][ T5878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.648050][ T5878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.650420][ T6077] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 93.658543][ T5878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.658555][ T5878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.687131][ T5878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.696952][ T5878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.707701][ T5878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.721747][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.735000][ T5878] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.743850][ T5878] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.752686][ T5878] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.761495][ T5878] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.801731][ T6057] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.852452][ T6057] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.875937][ T6093] loop1: detected capacity change from 0 to 1024 [ 93.907529][ T6057] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.924544][ T6057] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.963637][ T6099] netlink: 'syz.2.777': attribute type 2 has an invalid length. [ 94.037214][ T6102] loop4: detected capacity change from 0 to 1024 [ 94.054207][ T6108] loop3: detected capacity change from 0 to 1024 [ 94.062853][ T6102] EXT4-fs: Ignoring removed oldalloc option [ 94.090942][ T6108] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.122706][ T6102] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 94.251774][ T6108] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 94.327293][ T6123] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.345673][ T6124] loop4: detected capacity change from 0 to 512 [ 94.360871][ T6124] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.381271][ T6127] netlink: 24 bytes leftover after parsing attributes in process `syz.5.783'. [ 94.455373][ T6115] netlink: 'syz.2.778': attribute type 2 has an invalid length. [ 94.485215][ T6130] loop3: detected capacity change from 0 to 512 [ 94.500488][ T6133] loop4: detected capacity change from 0 to 1024 [ 94.507518][ T6133] EXT4-fs: Ignoring removed i_version option [ 94.513630][ T6133] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.541119][ T6130] EXT4-fs (loop3): orphan cleanup on readonly fs [ 94.548601][ T6130] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.784: bg 0: block 248: padding at end of block bitmap is not set [ 94.564308][ T6130] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.784: Failed to acquire dquot type 1 [ 94.576267][ T6130] EXT4-fs (loop3): 1 truncate cleaned up [ 94.596325][ T6130] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 94.609896][ T6130] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 94.680337][ T6139] loop4: detected capacity change from 0 to 1024 [ 94.687205][ T6139] EXT4-fs: Ignoring removed orlov option [ 94.712740][ T6139] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 94.796460][ T6146] netlink: 28 bytes leftover after parsing attributes in process `syz.1.789'. [ 94.805413][ T6146] netlink: 28 bytes leftover after parsing attributes in process `syz.1.789'. [ 94.834027][ T6149] loop3: detected capacity change from 0 to 512 [ 94.842127][ T6150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.792'. [ 94.871052][ T6149] ext4 filesystem being mounted at /163/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.880275][ T6154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.791'. [ 94.894591][ T6149] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.790: corrupted inode contents [ 94.908803][ T6149] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #2: comm syz.3.790: mark_inode_dirty error [ 94.920647][ T6154] netlink: 24 bytes leftover after parsing attributes in process `syz.2.791'. [ 94.929720][ T6149] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.790: corrupted inode contents [ 94.942033][ T6149] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.790: mark_inode_dirty error [ 95.117878][ T6160] loop3: detected capacity change from 0 to 1024 [ 95.125892][ T6160] EXT4-fs: Ignoring removed oldalloc option [ 95.141794][ T6160] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 95.262473][ T6169] loop2: detected capacity change from 0 to 512 [ 95.292268][ T6169] ext4 filesystem being mounted at /161/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.304460][ T6172] loop3: detected capacity change from 0 to 1024 [ 95.309434][ T6169] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.797: corrupted inode contents [ 95.312047][ T6172] EXT4-fs: Ignoring removed i_version option [ 95.323850][ T6169] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #2: comm syz.2.797: mark_inode_dirty error [ 95.328560][ T6172] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.340487][ T6169] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.797: corrupted inode contents [ 95.359469][ T6169] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.797: mark_inode_dirty error [ 95.428047][ T6182] loop3: detected capacity change from 0 to 1024 [ 95.479110][ T6186] SELinux: ebitmap: truncated map [ 95.487127][ T6186] SELinux: failed to load policy [ 95.590672][ T6194] loop2: detected capacity change from 0 to 2048 [ 95.645619][ T6194] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 95.662187][ T6194] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 95.674457][ T6194] EXT4-fs (loop2): This should not happen!! Data will be lost [ 95.674457][ T6194] [ 95.684535][ T6194] EXT4-fs (loop2): Total free blocks count 0 [ 95.690565][ T6194] EXT4-fs (loop2): Free/Dirty block details [ 95.696484][ T6194] EXT4-fs (loop2): free_blocks=2415919104 [ 95.702261][ T6194] EXT4-fs (loop2): dirty_blocks=16 [ 95.707392][ T6194] EXT4-fs (loop2): Block reservation details [ 95.713453][ T6194] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 95.805414][ T6199] loop4: detected capacity change from 0 to 1024 [ 95.849787][ T6199] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.863173][ T6123] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.055376][ T6202] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 96.110072][ T6194] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 96.122684][ T6194] EXT4-fs (loop2): This should not happen!! Data will be lost [ 96.122684][ T6194] [ 96.333393][ T6206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.805'. [ 96.351125][ T6206] netlink: 24 bytes leftover after parsing attributes in process `syz.4.805'. [ 96.389847][ T6208] loop3: detected capacity change from 0 to 1024 [ 96.397647][ T6208] EXT4-fs: Ignoring removed i_version option [ 96.403725][ T6208] EXT4-fs: Ignoring removed nomblk_io_submit option [ 96.442428][ T29] kauditd_printk_skb: 1510 callbacks suppressed [ 96.442478][ T29] audit: type=1400 audit(1746327163.048:16902): avc: denied { mount } for pid=6207 comm="syz.3.808" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 96.476114][ T29] audit: type=1400 audit(1746327163.078:16903): avc: denied { read write } for pid=6207 comm="syz.3.808" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 96.500226][ T29] audit: type=1400 audit(1746327163.078:16904): avc: denied { open } for pid=6207 comm="syz.3.808" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 96.524302][ T29] audit: type=1400 audit(1746327163.078:16905): avc: denied { setattr } for pid=6207 comm="syz.3.808" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 96.546644][ T29] audit: type=1400 audit(1746327163.078:16906): avc: denied { prog_load } for pid=6207 comm="syz.3.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 96.565781][ T29] audit: type=1400 audit(1746327163.078:16907): avc: denied { map_create } for pid=6207 comm="syz.3.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 96.585021][ T29] audit: type=1400 audit(1746327163.078:16908): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 96.609257][ T29] audit: type=1400 audit(1746327163.078:16909): avc: denied { open } for pid=3304 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 96.633513][ T29] audit: type=1400 audit(1746327163.078:16910): avc: denied { ioctl } for pid=3304 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 96.659330][ T29] audit: type=1400 audit(1746327163.078:16911): avc: denied { bpf } for pid=6207 comm="syz.3.808" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 96.801882][ T6216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.810'. [ 96.824938][ T6223] loop2: detected capacity change from 0 to 1024 [ 96.840817][ T6225] loop4: detected capacity change from 0 to 1024 [ 96.848612][ T6225] EXT4-fs: Ignoring removed oldalloc option [ 96.855642][ T6227] loop3: detected capacity change from 0 to 1024 [ 96.855943][ T6225] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 96.863691][ T6227] EXT4-fs: Ignoring removed oldalloc option [ 96.874199][ T6223] EXT4-fs mount: 151 callbacks suppressed [ 96.874215][ T6223] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.878414][ T6227] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 96.912380][ T6225] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.912427][ T6227] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.024708][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.065909][ T6227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.814'. [ 97.088945][ T6240] loop4: detected capacity change from 0 to 1024 [ 97.110746][ T6240] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.123448][ T6240] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.153618][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.163736][ T6123] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.232096][ T6240] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 97.259556][ T6249] vhci_hcd: invalid port number 224 [ 97.264780][ T6249] vhci_hcd: default hub control req: 8017 v0f00 i00e0 l0 [ 97.266182][ T6252] loop3: detected capacity change from 0 to 512 [ 97.282000][ T6123] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.295072][ T6252] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.308544][ T6252] ext4 filesystem being mounted at /174/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.330085][ T6123] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.343601][ T6123] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.357807][ T6123] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.367170][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.370437][ T6123] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.401490][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.431994][ T6261] netlink: 'syz.3.822': attribute type 2 has an invalid length. [ 97.461963][ T6265] loop4: detected capacity change from 0 to 128 [ 97.477572][ T6263] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 97.485526][ T6263] FAT-fs (loop4): Filesystem has been set read-only [ 97.509847][ T6267] loop3: detected capacity change from 0 to 512 [ 97.511710][ T6263] bio_check_eod: 33 callbacks suppressed [ 97.511729][ T6263] syz.4.824: attempt to access beyond end of device [ 97.511729][ T6263] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 97.536777][ T6263] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 97.545123][ T6263] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 97.564925][ T6269] netlink: 28 bytes leftover after parsing attributes in process `syz.1.827'. [ 97.573873][ T6269] netlink: 28 bytes leftover after parsing attributes in process `syz.1.827'. [ 97.586912][ T6267] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.599856][ T6267] ext4 filesystem being mounted at /176/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.616692][ T6267] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.826: corrupted inode contents [ 97.650435][ T6267] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #2: comm syz.3.826: mark_inode_dirty error [ 97.652048][ T6263] syz.4.824: attempt to access beyond end of device [ 97.652048][ T6263] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 97.676253][ T6267] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.826: corrupted inode contents [ 97.679035][ T6223] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.704145][ T6263] syz.4.824: attempt to access beyond end of device [ 97.704145][ T6263] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 97.719167][ T6267] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.826: mark_inode_dirty error [ 97.730891][ T6263] syz.4.824: attempt to access beyond end of device [ 97.730891][ T6263] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 97.749245][ T6275] netlink: 'syz.5.828': attribute type 2 has an invalid length. [ 97.778403][ T6263] syz.4.824: attempt to access beyond end of device [ 97.778403][ T6263] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 97.794629][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.813878][ T6263] syz.4.824: attempt to access beyond end of device [ 97.813878][ T6263] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 97.841938][ T6263] syz.4.824: attempt to access beyond end of device [ 97.841938][ T6263] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 97.868024][ T6263] syz.4.824: attempt to access beyond end of device [ 97.868024][ T6263] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 97.891704][ T6282] loop1: detected capacity change from 0 to 512 [ 97.915203][ T6263] syz.4.824: attempt to access beyond end of device [ 97.915203][ T6263] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 97.919762][ T6282] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.928632][ T6263] syz.4.824: attempt to access beyond end of device [ 97.928632][ T6263] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 97.955222][ T6282] ext4 filesystem being mounted at /159/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.972055][ T6290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.834'. [ 97.974096][ T6286] can0: slcan on ttyS3. [ 97.992581][ T6265] buffer_io_error: 6 callbacks suppressed [ 97.992596][ T6265] Buffer I/O error on dev loop4, logical block 2065, async page read [ 98.006737][ T6265] Buffer I/O error on dev loop4, logical block 2066, async page read [ 98.016264][ T6265] Buffer I/O error on dev loop4, logical block 2067, async page read [ 98.024981][ T6265] Buffer I/O error on dev loop4, logical block 2068, async page read [ 98.034382][ T6265] Buffer I/O error on dev loop4, logical block 2069, async page read [ 98.035332][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.042663][ T6265] Buffer I/O error on dev loop4, logical block 2070, async page read [ 98.076117][ T6265] Buffer I/O error on dev loop4, logical block 2071, async page read [ 98.078701][ T6285] can0 (unregistered): slcan off ttyS3. [ 98.085507][ T6265] Buffer I/O error on dev loop4, logical block 2072, async page read [ 98.119226][ T6265] Buffer I/O error on dev loop4, logical block 2065, async page read [ 98.129953][ T6292] vhci_hcd: invalid port number 224 [ 98.135181][ T6292] vhci_hcd: default hub control req: 8017 v0f00 i00e0 l0 [ 98.142350][ T6265] Buffer I/O error on dev loop4, logical block 2066, async page read [ 98.162682][ T6297] netlink: 'syz.5.836': attribute type 2 has an invalid length. [ 98.175654][ T6295] loop1: detected capacity change from 0 to 1024 [ 98.224807][ T6301] netlink: 'syz.2.839': attribute type 1 has an invalid length. [ 98.242973][ T6298] loop3: detected capacity change from 0 to 512 [ 98.250394][ T6295] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.269285][ T6301] SELinux: syz.2.839 (6301) set checkreqprot to 1. This is no longer supported. [ 98.271009][ T6295] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.279790][ T6298] EXT4-fs (loop3): orphan cleanup on readonly fs [ 98.312196][ T6298] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.838: bg 0: block 248: padding at end of block bitmap is not set [ 98.328456][ T6298] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.838: Failed to acquire dquot type 1 [ 98.346804][ T6301] No such timeout policy "syz1" [ 98.360824][ T6310] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 98.376151][ T6298] EXT4-fs (loop3): 1 truncate cleaned up [ 98.391887][ T6298] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 98.445509][ T6298] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 98.481247][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.491778][ T6298] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 98.548705][ T6322] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.556339][ T6327] loop2: detected capacity change from 0 to 1024 [ 98.566196][ T6327] EXT4-fs: Ignoring removed oldalloc option [ 98.573073][ T6327] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 98.595089][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.605416][ T6328] loop1: detected capacity change from 0 to 1024 [ 98.611009][ T6331] netlink: 24 bytes leftover after parsing attributes in process `syz.4.848'. [ 98.612376][ T6327] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.635126][ T6328] EXT4-fs: Ignoring removed oldalloc option [ 98.652610][ T6322] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.666068][ T6328] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 98.679482][ T6333] netlink: 'syz.5.850': attribute type 2 has an invalid length. [ 98.690859][ T6335] loop3: detected capacity change from 0 to 128 [ 98.714822][ T6328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.736114][ T6322] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.751376][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.781520][ T6322] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.813399][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.883868][ T6322] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.897951][ T6348] loop5: detected capacity change from 0 to 512 [ 98.911227][ T6322] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.921368][ T6348] EXT4-fs (loop5): orphan cleanup on readonly fs [ 98.929407][ T6348] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.855: bg 0: block 248: padding at end of block bitmap is not set [ 98.944027][ T6348] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.855: Failed to acquire dquot type 1 [ 98.957086][ T6348] EXT4-fs (loop5): 1 truncate cleaned up [ 98.958377][ T6322] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.975219][ T6322] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.981597][ T6348] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 99.033468][ T6355] netlink: 28 bytes leftover after parsing attributes in process `syz.1.854'. [ 99.042462][ T6355] netlink: 28 bytes leftover after parsing attributes in process `syz.1.854'. [ 99.055744][ T6348] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 99.075005][ T6359] loop3: detected capacity change from 0 to 1024 [ 99.090954][ T6348] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 99.100612][ T6359] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.114951][ T6359] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.148006][ T5878] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.210100][ T6372] loop4: detected capacity change from 0 to 128 [ 99.220784][ T6375] loop5: detected capacity change from 0 to 2048 [ 99.231197][ T6376] netlink: 'syz.1.863': attribute type 2 has an invalid length. [ 99.235982][ T6359] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 99.262057][ T6375] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.300048][ T6375] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 99.316825][ T6375] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 99.329196][ T6375] EXT4-fs (loop5): This should not happen!! Data will be lost [ 99.329196][ T6375] [ 99.338929][ T6375] EXT4-fs (loop5): Total free blocks count 0 [ 99.344933][ T6375] EXT4-fs (loop5): Free/Dirty block details [ 99.350880][ T6375] EXT4-fs (loop5): free_blocks=2415919104 [ 99.356633][ T6375] EXT4-fs (loop5): dirty_blocks=16 [ 99.361775][ T6375] EXT4-fs (loop5): Block reservation details [ 99.367809][ T6375] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 99.391907][ T5878] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.418330][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.480837][ T6398] loop4: detected capacity change from 0 to 128 [ 99.551439][ T6402] can0: slcan on ttyS3. [ 99.564455][ T6405] loop1: detected capacity change from 0 to 128 [ 99.608224][ T6401] can0 (unregistered): slcan off ttyS3. [ 99.639953][ T6414] netlink: 28 bytes leftover after parsing attributes in process `syz.5.872'. [ 99.648868][ T6414] netlink: 28 bytes leftover after parsing attributes in process `syz.5.872'. [ 99.685986][ T6417] loop1: detected capacity change from 0 to 2048 [ 99.721793][ T6422] netlink: 'syz.2.880': attribute type 1 has an invalid length. [ 99.729954][ T6423] loop4: detected capacity change from 0 to 1024 [ 99.738010][ T6417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.764564][ T6422] SELinux: syz.2.880 (6422) set checkreqprot to 1. This is no longer supported. [ 99.799697][ T6417] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 99.819873][ T6423] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.837302][ T6417] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 99.849601][ T6417] EXT4-fs (loop1): This should not happen!! Data will be lost [ 99.849601][ T6417] [ 99.858769][ T6422] No such timeout policy "syz1" [ 99.859271][ T6417] EXT4-fs (loop1): Total free blocks count 0 [ 99.870129][ T6417] EXT4-fs (loop1): Free/Dirty block details [ 99.876026][ T6417] EXT4-fs (loop1): free_blocks=2415919104 [ 99.881781][ T6417] EXT4-fs (loop1): dirty_blocks=16 [ 99.886978][ T6417] EXT4-fs (loop1): Block reservation details [ 99.893397][ T6417] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 99.897043][ T6423] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.915278][ T6439] loop5: detected capacity change from 0 to 128 [ 99.971702][ T6445] loop3: detected capacity change from 0 to 128 [ 99.976257][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.023470][ T6423] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 100.050638][ T6449] loop5: detected capacity change from 0 to 1024 [ 100.058902][ T6449] EXT4-fs: Ignoring removed oldalloc option [ 100.088319][ T6449] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 100.117048][ T6449] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.177175][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.200188][ T6457] loop1: detected capacity change from 0 to 512 [ 100.215716][ T6457] EXT4-fs (loop1): orphan cleanup on readonly fs [ 100.225953][ T6457] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.891: bg 0: block 248: padding at end of block bitmap is not set [ 100.241409][ T6457] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.891: Failed to acquire dquot type 1 [ 100.243836][ T6449] netlink: 4 bytes leftover after parsing attributes in process `syz.5.890'. [ 100.253132][ T6462] loop3: detected capacity change from 0 to 1024 [ 100.263816][ T6457] EXT4-fs (loop1): 1 truncate cleaned up [ 100.269810][ T6462] EXT4-fs: Ignoring removed orlov option [ 100.285621][ T6457] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.289391][ T6462] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 100.310224][ T6457] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 100.324988][ T6466] loop4: detected capacity change from 0 to 128 [ 100.337776][ T5878] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.358482][ T6462] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.372679][ T6457] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 100.429854][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.443991][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.473185][ T6479] netlink: 'syz.4.898': attribute type 1 has an invalid length. [ 100.510923][ T6481] loop3: detected capacity change from 0 to 128 [ 100.511658][ T6482] netlink: 'syz.2.897': attribute type 2 has an invalid length. [ 100.526578][ T6479] SELinux: syz.4.898 (6479) set checkreqprot to 1. This is no longer supported. [ 100.546799][ T6479] No such timeout policy "syz1" [ 100.611746][ T6488] netlink: 'syz.3.904': attribute type 2 has an invalid length. [ 100.632859][ T6493] loop5: detected capacity change from 0 to 1024 [ 100.652481][ T6491] loop4: detected capacity change from 0 to 1024 [ 100.659783][ T6491] EXT4-fs: Ignoring removed i_version option [ 100.665839][ T6491] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.691468][ T6491] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.739055][ T6493] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.766076][ T6493] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.783659][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.853168][ T6504] loop3: detected capacity change from 0 to 128 [ 100.864521][ T6493] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 100.905349][ T6506] loop4: detected capacity change from 0 to 1024 [ 100.930240][ T6506] EXT4-fs: Ignoring removed oldalloc option [ 100.939741][ T5878] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.954367][ T6506] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 100.979229][ T6510] loop2: detected capacity change from 0 to 1024 [ 101.001251][ T6506] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.058022][ T6510] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.077782][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.156493][ T6520] loop1: detected capacity change from 0 to 128 [ 101.254264][ T6527] loop3: detected capacity change from 0 to 1024 [ 101.289310][ T6527] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.330363][ T6541] netlink: 'syz.1.922': attribute type 1 has an invalid length. [ 101.341960][ T6541] SELinux: syz.1.922 (6541) set checkreqprot to 1. This is no longer supported. [ 101.355314][ T6541] No such timeout policy "syz1" [ 101.378827][ T6543] netlink: 'syz.4.921': attribute type 2 has an invalid length. [ 101.435724][ T6546] loop1: detected capacity change from 0 to 1024 [ 101.451050][ T6546] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.463591][ T6546] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.474290][ T29] kauditd_printk_skb: 2278 callbacks suppressed [ 101.474303][ T29] audit: type=1400 audit(1746327168.068:19181): avc: denied { mount } for pid=6545 comm="syz.1.923" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 101.502899][ T29] audit: type=1400 audit(1746327168.088:19182): avc: denied { read write } for pid=6545 comm="syz.1.923" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 101.527121][ T29] audit: type=1400 audit(1746327168.108:19183): avc: denied { open } for pid=6545 comm="syz.1.923" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 101.551240][ T29] audit: type=1400 audit(1746327168.108:19184): avc: denied { open } for pid=6545 comm="syz.1.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 101.570490][ T29] audit: type=1400 audit(1746327168.108:19185): avc: denied { perfmon } for pid=6545 comm="syz.1.923" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 101.591432][ T29] audit: type=1400 audit(1746327168.108:19186): avc: denied { kernel } for pid=6545 comm="syz.1.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 101.610853][ T29] audit: type=1400 audit(1746327168.158:19187): avc: denied { create } for pid=6545 comm="syz.1.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 101.618584][ T6550] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 101.630360][ T29] audit: type=1400 audit(1746327168.158:19188): avc: denied { write } for pid=6545 comm="syz.1.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 101.664270][ T29] audit: type=1400 audit(1746327168.168:19189): avc: denied { prog_load } for pid=6545 comm="syz.1.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 101.683357][ T29] audit: type=1400 audit(1746327168.168:19190): avc: denied { bpf } for pid=6545 comm="syz.1.923" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 101.771169][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.781596][ T6552] loop4: detected capacity change from 0 to 1024 [ 101.788693][ T6552] EXT4-fs: Ignoring removed oldalloc option [ 101.795752][ T6552] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 101.807306][ T6510] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.833612][ T6552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.988580][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.033136][ T6527] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.140114][ T6575] loop3: detected capacity change from 0 to 512 [ 102.162595][ T6582] loop2: detected capacity change from 0 to 1024 [ 102.162616][ T6580] loop1: detected capacity change from 0 to 1024 [ 102.189104][ T6575] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.203608][ T6580] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.216339][ T6575] ext4 filesystem being mounted at /199/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.227831][ T6582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.233683][ T6580] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.256130][ T6575] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.933: corrupted inode contents [ 102.311733][ T6575] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #2: comm syz.3.933: mark_inode_dirty error [ 102.318538][ T6597] loop4: detected capacity change from 0 to 1024 [ 102.330189][ T6597] EXT4-fs: Ignoring removed oldalloc option [ 102.333466][ T6590] loop5: detected capacity change from 0 to 512 [ 102.343402][ T6597] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 102.353515][ T6575] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.933: corrupted inode contents [ 102.354576][ T6580] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 102.380358][ T6575] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.933: mark_inode_dirty error [ 102.408100][ T6590] EXT4-fs (loop5): orphan cleanup on readonly fs [ 102.422753][ T6590] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.938: bg 0: block 248: padding at end of block bitmap is not set [ 102.444277][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.454022][ T6597] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.480227][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.508085][ T6590] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.938: Failed to acquire dquot type 1 [ 102.569387][ T6590] EXT4-fs (loop5): 1 truncate cleaned up [ 102.581109][ T6590] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.617721][ T6610] loop3: detected capacity change from 0 to 2048 [ 102.658116][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.667240][ T6590] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 102.670380][ T6610] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.690535][ T6590] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 102.704639][ T6610] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 102.721133][ T6610] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 102.733427][ T6610] EXT4-fs (loop3): This should not happen!! Data will be lost [ 102.733427][ T6610] [ 102.743098][ T6610] EXT4-fs (loop3): Total free blocks count 0 [ 102.749126][ T6610] EXT4-fs (loop3): Free/Dirty block details [ 102.755024][ T6610] EXT4-fs (loop3): free_blocks=2415919104 [ 102.760784][ T6610] EXT4-fs (loop3): dirty_blocks=16 [ 102.765903][ T6610] EXT4-fs (loop3): Block reservation details [ 102.771926][ T6610] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 102.806779][ T5878] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.833817][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.018030][ T6582] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.039826][ T6639] __nla_validate_parse: 7 callbacks suppressed [ 103.039920][ T6639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.948'. [ 103.092322][ T6642] loop5: detected capacity change from 0 to 1024 [ 103.114204][ T6642] EXT4-fs: Ignoring removed orlov option [ 103.121304][ T6642] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 103.152923][ T6650] loop3: detected capacity change from 0 to 2048 [ 103.174860][ T6647] can0: slcan on ttyS3. [ 103.215176][ T6650] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 103.231056][ T6650] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 103.243275][ T6650] EXT4-fs (loop3): This should not happen!! Data will be lost [ 103.243275][ T6650] [ 103.253014][ T6650] EXT4-fs (loop3): Total free blocks count 0 [ 103.259073][ T6650] EXT4-fs (loop3): Free/Dirty block details [ 103.265013][ T6650] EXT4-fs (loop3): free_blocks=2415919104 [ 103.270824][ T6650] EXT4-fs (loop3): dirty_blocks=16 [ 103.275934][ T6650] EXT4-fs (loop3): Block reservation details [ 103.281949][ T6650] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 103.287990][ T6643] can0 (unregistered): slcan off ttyS3. [ 103.312486][ T6662] netlink: 'syz.2.956': attribute type 2 has an invalid length. [ 103.334517][ T6654] netlink: 28 bytes leftover after parsing attributes in process `syz.4.953'. [ 103.343510][ T6654] netlink: 28 bytes leftover after parsing attributes in process `syz.4.953'. [ 103.363696][ T6664] loop1: detected capacity change from 0 to 128 [ 103.408065][ T6666] loop5: detected capacity change from 0 to 2048 [ 103.430958][ T6668] loop2: detected capacity change from 0 to 1024 [ 103.448999][ T6668] EXT4-fs: Ignoring removed oldalloc option [ 103.468380][ T6668] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 103.582702][ T6666] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 103.637542][ T6666] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 103.649748][ T6666] EXT4-fs (loop5): This should not happen!! Data will be lost [ 103.649748][ T6666] [ 103.659394][ T6666] EXT4-fs (loop5): Total free blocks count 0 [ 103.665382][ T6666] EXT4-fs (loop5): Free/Dirty block details [ 103.671316][ T6666] EXT4-fs (loop5): free_blocks=2415919104 [ 103.677084][ T6666] EXT4-fs (loop5): dirty_blocks=16 [ 103.682259][ T6666] EXT4-fs (loop5): Block reservation details [ 103.688324][ T6666] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 103.750532][ T6659] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 103.750779][ T6680] loop2: detected capacity change from 0 to 1024 [ 103.763119][ T6659] EXT4-fs (loop3): This should not happen!! Data will be lost [ 103.763119][ T6659] [ 103.803098][ T6686] loop4: detected capacity change from 0 to 1024 [ 103.822754][ T6687] loop1: detected capacity change from 0 to 128 [ 103.830929][ T6680] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.925550][ T6694] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 104.083156][ T6698] loop1: detected capacity change from 0 to 512 [ 104.100503][ T6701] can0: slcan on ttyS3. [ 104.112727][ T6698] ext4 filesystem being mounted at /192/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.148519][ T6700] can0 (unregistered): slcan off ttyS3. [ 104.211426][ T6706] loop3: detected capacity change from 0 to 2048 [ 104.247089][ T6681] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 104.259743][ T6681] EXT4-fs (loop5): This should not happen!! Data will be lost [ 104.259743][ T6681] [ 104.319929][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.327472][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.334896][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.376291][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.383766][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.391222][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.398735][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.406114][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.407268][ T6706] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, [ 104.413499][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.413525][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.421775][ T6706] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 104.429172][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.448828][ T6714] loop1: detected capacity change from 0 to 128 [ 104.452694][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.466474][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.474067][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.481527][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.488960][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.496346][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.503868][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.506418][ T6706] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 104.511257][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.523446][ T6706] EXT4-fs (loop3): This should not happen!! Data will be lost [ 104.523446][ T6706] [ 104.523472][ T6706] EXT4-fs (loop3): Total free blocks count 0 [ 104.523483][ T6706] EXT4-fs (loop3): Free/Dirty block details [ 104.523492][ T6706] EXT4-fs (loop3): free_blocks=2415919104 [ 104.523502][ T6706] EXT4-fs (loop3): dirty_blocks=16 [ 104.530888][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.540490][ T6706] EXT4-fs (loop3): Block reservation details [ 104.546453][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.552331][ T6706] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 104.558045][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.597486][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.604897][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.612343][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.619772][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.627155][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.634564][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 104.685236][ T10] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz1 [ 104.725649][ T6720] loop4: detected capacity change from 0 to 1024 [ 104.733298][ T6720] EXT4-fs: Ignoring removed i_version option [ 104.739349][ T6720] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.829789][ T6729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.976'. [ 104.874218][ T6731] netlink: 'syz.1.977': attribute type 2 has an invalid length. [ 104.876649][ T6733] loop5: detected capacity change from 0 to 1024 [ 104.899495][ T6729] netlink: 24 bytes leftover after parsing attributes in process `syz.2.976'. [ 105.024052][ T6733] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.095433][ T6741] can0: slcan on ttyS3. [ 105.106116][ T6706] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 105.118700][ T6706] EXT4-fs (loop3): This should not happen!! Data will be lost [ 105.118700][ T6706] [ 105.137250][ T6744] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 105.188265][ T6739] can0 (unregistered): slcan off ttyS3. [ 105.279021][ T6749] vhci_hcd: invalid port number 224 [ 105.284244][ T6749] vhci_hcd: default hub control req: 8017 v0f00 i00e0 l0 [ 105.321203][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 105.328766][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 105.336163][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 105.355905][ T6747] netlink: 'syz.2.982': attribute type 2 has an invalid length. [ 105.384127][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 105.391577][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 105.399062][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 105.406481][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 105.413892][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 105.421311][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 105.428738][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 105.436205][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 105.443726][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 105.451211][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 105.527817][ T3380] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 105.535362][ T3380] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 105.542871][ T3380] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 105.568160][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 105.575737][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 105.583176][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 105.590623][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 105.598019][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 105.605507][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 105.613076][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 105.620708][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 105.628101][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 105.635508][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 105.642905][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 105.643257][ T6770] netlink: 'syz.5.989': attribute type 2 has an invalid length. [ 105.650327][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 105.665465][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 105.672867][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 105.680270][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 105.688606][ T3380] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 105.696011][ T3380] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 105.703589][ T3380] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 105.711086][ T3380] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 105.718503][ T3380] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 105.725895][ T3380] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 105.733316][ T3380] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 105.740749][ T3380] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 105.748254][ T3380] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 105.755720][ T3380] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 105.773463][ T3380] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 105.780890][ T3380] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 105.788335][ T3380] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 105.795862][ T3380] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 105.803295][ T3380] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 105.810731][ T3380] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 105.818160][ T3380] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 105.825566][ T3380] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 105.833037][ T3380] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 105.840767][ T3380] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 105.848211][ T3380] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 105.855619][ T3380] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 105.863352][ T3380] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 105.870942][ T3380] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 105.878391][ T3380] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 105.885940][ T6772] loop1: detected capacity change from 0 to 2048 [ 105.895892][ T10] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz1 [ 105.907306][ T3380] hid-generic 0000:0000:0000.0015: hidraw1: HID v0.00 Device [syz0] on syz1 [ 105.940880][ T6779] loop2: detected capacity change from 0 to 512 [ 105.956249][ T6772] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 105.972468][ T6772] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 105.984744][ T6772] EXT4-fs (loop1): This should not happen!! Data will be lost [ 105.984744][ T6772] [ 105.994463][ T6772] EXT4-fs (loop1): Total free blocks count 0 [ 106.000480][ T6772] EXT4-fs (loop1): Free/Dirty block details [ 106.006545][ T6772] EXT4-fs (loop1): free_blocks=2415919104 [ 106.012281][ T6772] EXT4-fs (loop1): dirty_blocks=16 [ 106.017474][ T6772] EXT4-fs (loop1): Block reservation details [ 106.023484][ T6772] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 106.072023][ T6785] loop3: detected capacity change from 0 to 128 [ 106.086598][ T6779] ext4 filesystem being mounted at /192/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.099838][ T6785] bio_check_eod: 32 callbacks suppressed [ 106.099850][ T6785] syz.3.995: attempt to access beyond end of device [ 106.099850][ T6785] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 106.118692][ T6785] buffer_io_error: 6 callbacks suppressed [ 106.118704][ T6785] Buffer I/O error on dev loop3, logical block 2065, async page read [ 106.132560][ T6785] syz.3.995: attempt to access beyond end of device [ 106.132560][ T6785] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 106.145741][ T6785] Buffer I/O error on dev loop3, logical block 2066, async page read [ 106.153869][ T6785] syz.3.995: attempt to access beyond end of device [ 106.153869][ T6785] loop3: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 106.166998][ T6785] Buffer I/O error on dev loop3, logical block 2067, async page read [ 106.175203][ T6785] syz.3.995: attempt to access beyond end of device [ 106.175203][ T6785] loop3: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 106.188475][ T6785] Buffer I/O error on dev loop3, logical block 2068, async page read [ 106.196627][ T6785] syz.3.995: attempt to access beyond end of device [ 106.196627][ T6785] loop3: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 106.209813][ T6785] Buffer I/O error on dev loop3, logical block 2069, async page read [ 106.217959][ T6785] syz.3.995: attempt to access beyond end of device [ 106.217959][ T6785] loop3: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 106.231186][ T6785] Buffer I/O error on dev loop3, logical block 2070, async page read [ 106.248264][ T6785] syz.3.995: attempt to access beyond end of device [ 106.248264][ T6785] loop3: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 106.261458][ T6785] Buffer I/O error on dev loop3, logical block 2071, async page read [ 106.291447][ T6785] syz.3.995: attempt to access beyond end of device [ 106.291447][ T6785] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 106.300659][ T6787] netlink: 24 bytes leftover after parsing attributes in process `syz.4.994'. [ 106.304688][ T6785] Buffer I/O error on dev loop3, logical block 2072, async page read [ 106.363678][ T6785] syz.3.995: attempt to access beyond end of device [ 106.363678][ T6785] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 106.376835][ T6785] Buffer I/O error on dev loop3, logical block 2065, async page read [ 106.408306][ T6785] syz.3.995: attempt to access beyond end of device [ 106.408306][ T6785] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 106.421521][ T6785] Buffer I/O error on dev loop3, logical block 2066, async page read [ 106.457308][ T6790] netlink: 24 bytes leftover after parsing attributes in process `syz.5.996'. [ 106.520114][ T29] kauditd_printk_skb: 1597 callbacks suppressed [ 106.520128][ T29] audit: type=1400 audit(1746327173.128:20785): avc: denied { prog_load } for pid=6789 comm="syz.2.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 106.545498][ T29] audit: type=1400 audit(1746327173.128:20786): avc: denied { bpf } for pid=6789 comm="syz.2.997" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 106.587121][ T29] audit: type=1400 audit(1746327173.168:20787): avc: denied { prog_run } for pid=6789 comm="syz.2.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 106.606290][ T29] audit: type=1400 audit(1746327173.168:20788): avc: denied { write } for pid=6789 comm="syz.2.997" name="001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 106.609982][ T6772] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 106.629131][ T29] audit: type=1400 audit(1746327173.188:20789): avc: denied { prog_load } for pid=6789 comm="syz.2.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 106.641581][ T6772] EXT4-fs (loop1): This should not happen!! Data will be lost [ 106.641581][ T6772] [ 106.670441][ T29] audit: type=1400 audit(1746327173.188:20790): avc: denied { bpf } for pid=6789 comm="syz.2.997" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 106.691180][ T29] audit: type=1400 audit(1746327173.188:20791): avc: denied { perfmon } for pid=6789 comm="syz.2.997" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 106.712226][ T29] audit: type=1400 audit(1746327173.188:20792): avc: denied { prog_run } for pid=6789 comm="syz.2.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 106.750563][ T29] audit: type=1400 audit(1746327173.268:20793): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 106.774955][ T29] audit: type=1400 audit(1746327173.268:20794): avc: denied { open } for pid=3314 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 106.877292][ T6797] loop4: detected capacity change from 0 to 512 [ 106.906298][ T6803] loop3: detected capacity change from 0 to 512 [ 106.916254][ T6797] EXT4-fs (loop4): orphan cleanup on readonly fs [ 106.923755][ T6808] netlink: 'syz.2.1005': attribute type 2 has an invalid length. [ 106.935289][ T6797] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.999: bg 0: block 248: padding at end of block bitmap is not set [ 106.952802][ T6803] ext4 filesystem being mounted at /208/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.964521][ T6807] loop5: detected capacity change from 0 to 1024 [ 106.972774][ T6807] EXT4-fs: Ignoring removed oldalloc option [ 106.984534][ T6807] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 106.996021][ T6797] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.999: Failed to acquire dquot type 1 [ 107.020492][ T6797] EXT4-fs (loop4): 1 truncate cleaned up [ 107.044026][ T6797] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 107.072094][ T6815] loop2: detected capacity change from 0 to 512 [ 107.100021][ T6797] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 107.119869][ T6815] ext4 filesystem being mounted at /196/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.224372][ T6835] loop4: detected capacity change from 0 to 1024 [ 107.231685][ T6835] EXT4-fs: Ignoring removed oldalloc option [ 107.246474][ T6835] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 107.291870][ T6838] loop5: detected capacity change from 0 to 2048 [ 107.325281][ T6844] loop2: detected capacity change from 0 to 512 [ 107.347038][ T6845] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1011'. [ 107.356254][ T6845] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1011'. [ 107.367738][ T6839] loop1: detected capacity change from 0 to 512 [ 107.416482][ T6839] EXT4-fs (loop1): orphan cleanup on readonly fs [ 107.424063][ T6844] ext4 filesystem being mounted at /197/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.447832][ T6839] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1014: bg 0: block 248: padding at end of block bitmap is not set [ 107.475013][ T6839] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.1014: Failed to acquire dquot type 1 [ 107.490888][ T6839] EXT4-fs (loop1): 1 truncate cleaned up [ 107.516242][ T6839] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 107.545044][ T6855] netlink: 'syz.4.1016': attribute type 2 has an invalid length. [ 107.607034][ T6839] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 107.628768][ T6857] loop2: detected capacity change from 0 to 1024 [ 107.661190][ T6864] loop4: detected capacity change from 0 to 512 [ 107.677374][ T6838] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 107.692317][ T6838] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 107.704909][ T6838] EXT4-fs (loop5): This should not happen!! Data will be lost [ 107.704909][ T6838] [ 107.714643][ T6838] EXT4-fs (loop5): Total free blocks count 0 [ 107.720677][ T6838] EXT4-fs (loop5): Free/Dirty block details [ 107.726573][ T6838] EXT4-fs (loop5): free_blocks=2415919104 [ 107.732411][ T6838] EXT4-fs (loop5): dirty_blocks=8224 [ 107.734948][ T6864] ext4 filesystem being mounted at /205/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.737702][ T6838] EXT4-fs (loop5): Block reservation details [ 107.754007][ T6838] EXT4-fs (loop5): i_reserved_data_blocks=514 [ 107.787126][ T6868] loop3: detected capacity change from 0 to 1024 [ 107.844001][ T6868] EXT4-fs: Ignoring removed oldalloc option [ 107.850127][ T146] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 107.862396][ T146] EXT4-fs (loop5): This should not happen!! Data will be lost [ 107.862396][ T146] [ 107.873564][ T6868] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 108.048028][ T6887] loop1: detected capacity change from 0 to 128 [ 108.086548][ T6890] loop3: detected capacity change from 0 to 128 [ 108.107844][ T6888] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 108.115855][ T6888] FAT-fs (loop3): Filesystem has been set read-only [ 108.141021][ T6896] loop4: detected capacity change from 0 to 128 [ 108.142930][ T6888] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 108.155262][ T6888] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 108.181013][ T6899] loop5: detected capacity change from 0 to 2048 [ 108.194437][ T6894] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 108.202421][ T6894] FAT-fs (loop4): Filesystem has been set read-only [ 108.205003][ T6901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1033'. [ 108.212589][ T6894] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 108.225937][ T6894] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 108.235168][ T6901] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1033'. [ 108.430795][ T6908] loop1: detected capacity change from 0 to 128 [ 108.677168][ T6929] loop3: detected capacity change from 0 to 512 [ 108.788306][ T6925] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1043'. [ 108.797437][ T6925] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1043'. [ 108.814176][ T6929] ext4 filesystem being mounted at /217/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.820614][ T6899] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 108.841531][ T6899] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 108.854140][ T6899] EXT4-fs (loop5): This should not happen!! Data will be lost [ 108.854140][ T6899] [ 108.863834][ T6899] EXT4-fs (loop5): Total free blocks count 0 [ 108.869841][ T6899] EXT4-fs (loop5): Free/Dirty block details [ 108.875796][ T6899] EXT4-fs (loop5): free_blocks=2415919104 [ 108.881577][ T6899] EXT4-fs (loop5): dirty_blocks=8224 [ 108.886945][ T6899] EXT4-fs (loop5): Block reservation details [ 108.893028][ T6899] EXT4-fs (loop5): i_reserved_data_blocks=514 [ 108.951449][ T52] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 108.963676][ T52] EXT4-fs (loop5): This should not happen!! Data will be lost [ 108.963676][ T52] [ 109.039851][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1047'. [ 109.113827][ T6951] loop2: detected capacity change from 0 to 128 [ 109.227353][ T6964] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1054'. [ 109.266571][ T6958] loop5: detected capacity change from 0 to 128 [ 109.381439][ T6974] loop4: detected capacity change from 0 to 2048 [ 109.460923][ T6986] loop2: detected capacity change from 0 to 128 [ 109.487497][ T6980] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 109.495476][ T6980] FAT-fs (loop2): Filesystem has been set read-only [ 109.521295][ T6980] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 109.529240][ T6980] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 109.577418][ T6990] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1063'. [ 109.614416][ T6996] loop3: detected capacity change from 0 to 512 [ 109.632206][ T6997] loop1: detected capacity change from 0 to 128 [ 109.667535][ T6996] ext4 filesystem being mounted at /220/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.845698][ T7010] loop5: detected capacity change from 0 to 128 [ 109.853257][ T6974] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 109.886949][ T6974] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 109.899519][ T6974] EXT4-fs (loop4): This should not happen!! Data will be lost [ 109.899519][ T6974] [ 109.909192][ T6974] EXT4-fs (loop4): Total free blocks count 0 [ 109.914523][ T7013] loop2: detected capacity change from 0 to 1024 [ 109.915229][ T6974] EXT4-fs (loop4): Free/Dirty block details [ 109.915241][ T6974] EXT4-fs (loop4): free_blocks=2415919104 [ 109.933291][ T6974] EXT4-fs (loop4): dirty_blocks=8224 [ 109.934141][ T7013] EXT4-fs: Ignoring removed oldalloc option [ 109.938616][ T6974] EXT4-fs (loop4): Block reservation details [ 109.950541][ T6974] EXT4-fs (loop4): i_reserved_data_blocks=514 [ 109.957479][ T7013] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 110.007034][ T7020] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1074'. [ 110.024078][ T7021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1073'. [ 110.059717][ T7021] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1073'. [ 110.130482][ T3414] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 110.142814][ T3414] EXT4-fs (loop4): This should not happen!! Data will be lost [ 110.142814][ T3414] [ 110.305778][ T7037] loop3: detected capacity change from 0 to 1024 [ 110.324330][ T7037] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.367623][ T7043] loop4: detected capacity change from 0 to 512 [ 110.397870][ T7048] loop1: detected capacity change from 0 to 128 [ 110.402674][ T7043] ext4 filesystem being mounted at /217/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.485688][ T7037] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 110.958265][ T7055] ================================================================== [ 110.966455][ T7055] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 110.976295][ T7055] [ 110.978635][ T7055] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 0: [ 110.986738][ T7055] tick_do_update_jiffies64+0x113/0x1c0 [ 110.992347][ T7055] tick_nohz_handler+0x7f/0x2d0 [ 110.997223][ T7055] __hrtimer_run_queues+0x20c/0x5a0 [ 111.002430][ T7055] hrtimer_interrupt+0x21a/0x460 [ 111.007386][ T7055] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 111.013287][ T7055] sysvec_apic_timer_interrupt+0x6f/0x80 [ 111.018936][ T7055] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 111.024921][ T7055] _raw_spin_unlock_irqrestore+0x3c/0x60 [ 111.030566][ T7055] folio_batch_move_lru+0x1e5/0x230 [ 111.035780][ T7055] folio_add_lru+0x14a/0x1f0 [ 111.040383][ T7055] shmem_get_folio_gfp+0x7ab/0xd40 [ 111.045500][ T7055] shmem_write_begin+0xa8/0x190 [ 111.050361][ T7055] generic_perform_write+0x181/0x490 [ 111.055664][ T7055] shmem_file_write_iter+0xc5/0xf0 [ 111.060807][ T7055] vfs_write+0x49d/0x8d0 [ 111.065062][ T7055] ksys_write+0xda/0x1a0 [ 111.069315][ T7055] __x64_sys_write+0x40/0x50 [ 111.073910][ T7055] x64_sys_call+0x2cdd/0x2fb0 [ 111.078603][ T7055] do_syscall_64+0xd0/0x1a0 [ 111.083114][ T7055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.089010][ T7055] [ 111.091343][ T7055] read to 0xffffffff868099c0 of 8 bytes by task 7055 on cpu 1: [ 111.098887][ T7055] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 111.105141][ T7055] count_shadow_nodes+0x6a/0x230 [ 111.110093][ T7055] do_shrink_slab+0x60/0x680 [ 111.114702][ T7055] shrink_slab+0x448/0x760 [ 111.119121][ T7055] shrink_node+0x6c3/0x2110 [ 111.123636][ T7055] do_try_to_free_pages+0x3f6/0xcd0 [ 111.128848][ T7055] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 111.134758][ T7055] try_charge_memcg+0x3ab/0x870 [ 111.139621][ T7055] obj_cgroup_charge_pages+0xb7/0x1a0 [ 111.144999][ T7055] __memcg_kmem_charge_page+0x9f/0x170 [ 111.150471][ T7055] __alloc_frozen_pages_noprof+0x188/0x360 [ 111.156287][ T7055] alloc_pages_mpol+0xb3/0x250 [ 111.161072][ T7055] alloc_pages_noprof+0x90/0x130 [ 111.166025][ T7055] __vmalloc_node_range_noprof+0x6a4/0xdf0 [ 111.171861][ T7055] __kvmalloc_node_noprof+0x2f3/0x4d0 [ 111.177239][ T7055] ip_set_alloc+0x1f/0x30 [ 111.181583][ T7055] hash_netiface_create+0x282/0x740 [ 111.186810][ T7055] ip_set_create+0x3c9/0x960 [ 111.191420][ T7055] nfnetlink_rcv_msg+0x4c3/0x590 [ 111.196368][ T7055] netlink_rcv_skb+0x120/0x220 [ 111.201170][ T7055] nfnetlink_rcv+0x16b/0x1690 [ 111.205849][ T7055] netlink_unicast+0x59e/0x670 [ 111.210618][ T7055] netlink_sendmsg+0x58b/0x6b0 [ 111.215396][ T7055] __sock_sendmsg+0x142/0x180 [ 111.220076][ T7055] ____sys_sendmsg+0x31e/0x4e0 [ 111.224837][ T7055] ___sys_sendmsg+0x17b/0x1d0 [ 111.229513][ T7055] __x64_sys_sendmsg+0xd4/0x160 [ 111.234362][ T7055] x64_sys_call+0x2999/0x2fb0 [ 111.239041][ T7055] do_syscall_64+0xd0/0x1a0 [ 111.243543][ T7055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.249436][ T7055] [ 111.251760][ T7055] value changed: 0x00000000ffffb5fd -> 0x00000000ffffb5fe [ 111.258869][ T7055] [ 111.261185][ T7055] Reported by Kernel Concurrency Sanitizer on: [ 111.267344][ T7055] CPU: 1 UID: 0 PID: 7055 Comm: syz.2.1085 Not tainted 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(voluntary) [ 111.279764][ T7055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 111.289818][ T7055] ================================================================== [ 111.303746][ T7087] loop5: detected capacity change from 0 to 512 SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 111.439635][ T7087] EXT4-fs (loop5): orphan cleanup on readonly fs [ 111.458010][ T7087] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1096: bg 0: block 248: padding at end of block bitmap is not set [ 111.474792][ T7087] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.1096: Failed to acquire dquot type 1 [ 111.488126][ T7087] EXT4-fs (loop5): 1 truncate cleaned up [ 111.700287][ T3414] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.710104][ T3414] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.790566][ T3414] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.800415][ T3414] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.859980][ T3414] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.869835][ T3414] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.920102][ T3414] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.929891][ T3414] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.002158][ T3414] bridge_slave_1: left allmulticast mode [ 112.007810][ T3414] bridge_slave_1: left promiscuous mode [ 112.013452][ T3414] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.021226][ T3414] bridge_slave_0: left allmulticast mode [ 112.026860][ T3414] bridge_slave_0: left promiscuous mode [ 112.032553][ T3414] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.141548][ T3414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.151622][ T3414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.161904][ T3414] bond0 (unregistering): Released all slaves [ 112.231309][ T3414] hsr_slave_0: left promiscuous mode [ 112.236962][ T3414] hsr_slave_1: left promiscuous mode [ 112.242666][ T3414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.250204][ T3414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.257658][ T3414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.265073][ T3414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.274862][ T3414] veth1_macvtap: left promiscuous mode [ 112.280393][ T3414] veth0_macvtap: left promiscuous mode [ 112.285871][ T3414] veth1_vlan: left promiscuous mode [ 112.291097][ T3414] veth0_vlan: left promiscuous mode [ 112.355046][ T3414] team0 (unregistering): Port device team_slave_1 removed [ 112.364289][ T3414] team0 (unregistering): Port device team_slave_0 removed [ 112.681688][ T3414] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.729765][ T3414] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.799618][ T3414] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.839259][ T3414] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.911889][ T3414] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.939624][ T3414] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.989601][ T3414] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.049320][ T3414] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.101104][ T3414] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.139255][ T3414] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.199433][ T3414] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.269479][ T3414] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.330816][ T3414] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.379687][ T3414] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.419597][ T3414] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.459812][ T3414] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.520996][ T3414] bridge_slave_1: left allmulticast mode [ 113.526637][ T3414] bridge_slave_1: left promiscuous mode [ 113.532296][ T3414] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.540155][ T3414] bridge_slave_0: left allmulticast mode [ 113.545794][ T3414] bridge_slave_0: left promiscuous mode [ 113.551474][ T3414] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.559716][ T3414] bridge_slave_1: left promiscuous mode [ 113.565333][ T3414] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.572841][ T3414] bridge_slave_0: left allmulticast mode [ 113.578566][ T3414] bridge_slave_0: left promiscuous mode [ 113.584213][ T3414] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.592253][ T3414] bridge_slave_1: left allmulticast mode [ 113.597890][ T3414] bridge_slave_1: left promiscuous mode [ 113.603495][ T3414] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.611130][ T3414] bridge_slave_0: left allmulticast mode [ 113.616878][ T3414] bridge_slave_0: left promiscuous mode [ 113.622584][ T3414] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.630531][ T3414] bridge_slave_1: left allmulticast mode [ 113.636178][ T3414] bridge_slave_1: left promiscuous mode [ 113.641881][ T3414] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.649377][ T3414] bridge_slave_0: left allmulticast mode [ 113.655084][ T3414] bridge_slave_0: left promiscuous mode [ 113.660740][ T3414] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.070188][ T3414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.079747][ T3414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.088983][ T3414] bond0 (unregistering): Released all slaves [ 114.097554][ T3414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.106973][ T3414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.116238][ T3414] bond0 (unregistering): Released all slaves [ 114.125474][ T3414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.135031][ T3414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.144350][ T3414] bond0 (unregistering): Released all slaves [ 114.153123][ T3414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.162756][ T3414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.172385][ T3414] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 114.181171][ T3414] bond0 (unregistering): Released all slaves [ 114.224948][ T3414] hsr_slave_0: left promiscuous mode [ 114.230477][ T3414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.237917][ T3414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.245647][ T3414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.253071][ T3414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.262431][ T3414] hsr_slave_0: left promiscuous mode [ 114.267954][ T3414] hsr_slave_1: left promiscuous mode [ 114.273528][ T3414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.280975][ T3414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.288468][ T3414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.295848][ T3414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.304633][ T3414] hsr_slave_0: left promiscuous mode [ 114.310225][ T3414] hsr_slave_1: left promiscuous mode [ 114.315739][ T3414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.323133][ T3414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.330739][ T3414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.338107][ T3414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.346990][ T3414] hsr_slave_0: left promiscuous mode [ 114.352698][ T3414] hsr_slave_1: left promiscuous mode [ 114.358227][ T3414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.365677][ T3414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.373077][ T3414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.380478][ T3414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.396287][ T3414] veth1_macvtap: left promiscuous mode [ 114.401823][ T3414] veth0_macvtap: left promiscuous mode [ 114.407433][ T3414] veth1_vlan: left promiscuous mode [ 114.412702][ T3414] veth0_vlan: left promiscuous mode [ 114.419064][ T3414] veth1_macvtap: left promiscuous mode [ 114.424521][ T3414] veth0_macvtap: left promiscuous mode [ 114.430276][ T3414] veth1_vlan: left promiscuous mode [ 114.435521][ T3414] veth0_vlan: left promiscuous mode [ 114.441012][ T3414] veth1_macvtap: left promiscuous mode [ 114.446487][ T3414] veth0_macvtap: left promiscuous mode [ 114.452027][ T3414] veth1_vlan: left promiscuous mode [ 114.457323][ T3414] veth0_vlan: left promiscuous mode [ 114.463003][ T3414] veth1_macvtap: left promiscuous mode [ 114.468485][ T3414] veth0_macvtap: left promiscuous mode [ 114.474067][ T3414] veth1_vlan: left promiscuous mode [ 114.479281][ T3414] veth0_vlan: left promiscuous mode [ 114.617897][ T3414] team0 (unregistering): Port device team_slave_1 removed [ 114.627224][ T3414] team0 (unregistering): Port device team_slave_0 removed [ 114.720151][ T3414] team0 (unregistering): Port device team_slave_1 removed [ 114.729213][ T3414] team0 (unregistering): Port device team_slave_0 removed [ 114.780000][ T3414] team0 (unregistering): Port device team_slave_1 removed [ 114.789228][ T3414] team0 (unregistering): Port device team_slave_0 removed