last executing test programs: 2m58.198987541s ago: executing program 32 (id=507): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r0}, &(0x7f00000014c0), &(0x7f0000001500)=r1}, 0x20) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000001180)='!', 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0xc}, 0x1c) 2m58.071421553s ago: executing program 2 (id=512): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f00000001c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10) r3 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x1000, 0x0, 0x4000000}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 2m57.885621085s ago: executing program 2 (id=516): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737908320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005900)=ANY=[@ANYBLOB="1c000000150a0102"], 0x1c}}, 0x0) 2m57.790843056s ago: executing program 2 (id=518): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) connect$inet(r0, &(0x7f0000002f00)={0x2, 0x4e20, @dev}, 0x10) close(r0) 2m57.740950877s ago: executing program 2 (id=521): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1) 2m57.695275067s ago: executing program 2 (id=523): r0 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x441, 0x14a) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, 0x0) 2m57.406852351s ago: executing program 2 (id=533): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x80}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}]}, 0x4c}}, 0x0) 2m57.379234431s ago: executing program 33 (id=533): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x80}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}]}, 0x4c}}, 0x0) 2m32.161931964s ago: executing program 6 (id=1389): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000000)=0x7ffd, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2m32.080160955s ago: executing program 6 (id=1392): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001300)="d3", 0x1}], 0x1}, 0x0) r1 = semget$private(0x0, 0x2, 0x10) semctl$IPC_RMID(r1, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000001c0), 0x0, &(0x7f00000004c0)=ANY=[]) 2m31.986094826s ago: executing program 6 (id=1393): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2m31.964013326s ago: executing program 6 (id=1394): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1) 2m31.949662256s ago: executing program 6 (id=1395): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x3ff) fcntl$setstatus(r0, 0x4, 0x7c00) dup3(r1, r0, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) 2m31.755523939s ago: executing program 6 (id=1397): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) listen(r0, 0x40000000) sendmsg$sock(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4) 2m31.753558039s ago: executing program 5 (id=1407): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x3ff) fcntl$setstatus(r0, 0x4, 0x7c00) dup3(r1, r0, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) 2m31.717148839s ago: executing program 34 (id=1397): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) listen(r0, 0x40000000) sendmsg$sock(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4) 2m31.507133422s ago: executing program 5 (id=1411): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() 2m31.083249927s ago: executing program 5 (id=1403): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001300)="d3", 0x1}], 0x1}, 0x0) r1 = semget$private(0x0, 0x2, 0x10) semctl$IPC_RMID(r1, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000001c0), 0x0, &(0x7f00000004c0)=ANY=[]) 2m31.049585037s ago: executing program 5 (id=1406): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1) 2m31.017009598s ago: executing program 5 (id=1408): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe2}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000005c0)='lp\x00', 0x3) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000180)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340eb3de6f89a6272ddc63ce532e270bc6cba3d229a96e108026bf64d48efc0435d52b40c578d3deb33677cf2ec5fadf9a784f2b2bdc8d978e9e1a788494631d094", 0xe3}, {&(0x7f0000000740)="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", 0x12e}, {&(0x7f0000000480)="4068745fc217775e9fca3477d3c929c1231d710ed7", 0x15}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000900)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb306c7f77c8a00000000000000d037280699ca67e7143e46e026", 0x44}, {&(0x7f0000002700)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d7677", 0x1e}], 0x2}}], 0x2, 0x0) 2m30.780032841s ago: executing program 5 (id=1409): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4200, 0x1) write$9p(r1, &(0x7f0000000040)=';', 0x1) sendfile(r1, r2, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000001c0)='mm_page_free\x00', r0, 0x0, 0x6}, 0x18) 2m30.779705921s ago: executing program 35 (id=1409): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4200, 0x1) write$9p(r1, &(0x7f0000000040)=';', 0x1) sendfile(r1, r2, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000001c0)='mm_page_free\x00', r0, 0x0, 0x6}, 0x18) 1m48.998238029s ago: executing program 8 (id=2665): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2a, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@FRA_FLOW={0x8, 0xb, 0x40}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x28}}, 0x0) 1m48.92335314s ago: executing program 8 (id=2670): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_RMID(r2, 0x0) 1m48.865017441s ago: executing program 8 (id=2671): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r0}, &(0x7f00000006c0), &(0x7f0000000700)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = dup(r2) ioctl$PTP_EXTTS_REQUEST2(r3, 0x43403d05, 0x0) 1m48.804116461s ago: executing program 8 (id=2673): socket$kcm(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) 1m48.576161184s ago: executing program 8 (id=2684): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r1 = dup(r0) setsockopt$inet_buf(r1, 0x0, 0x29, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d1) 1m47.702887065s ago: executing program 8 (id=2700): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='stack\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) read$hiddev(r0, 0x0, 0x0) 1m47.679157235s ago: executing program 36 (id=2700): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='stack\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) read$hiddev(r0, 0x0, 0x0) 1m9.293331351s ago: executing program 4 (id=3849): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 1m8.430047462s ago: executing program 4 (id=3900): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x221081e, &(0x7f0000000340)={[{@grpid}, {@journal_dev={'journal_dev', 0x3d, 0x7fff}}, {@mb_optimize_scan}, {@dioread_lock}]}, 0x1, 0x4fc, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPDvOHHipNlNdtkDINgtuwsFVXUSdzda7QEtJ4TQSog9gtQNiRtFseModpZN6CE9c0WiEic48gdw7ok7FwQ3LuWAxI8I1CBxMJrxJHVTu42axI7iz0cazXvzpv5+X9N5r35J/AIYWdcjYj8iJiLi04iYza8n+REfdY70vscH91YOD+6tJNFuf/LPJGtPr0XXn0ldy1+zFBE//G7ET5Jn4zZ39zaWa7Xqdl6fb9W35pu7e7fW68tr1bXqZqWytLi08MHt9yvn1te36hN56auP/rD/rZ+lac3kV7r7cZ46XS8ex0mNR8T3LyLYEIzl/ZkYdiK8lEJEvB4Rb2fP/2yMZV9NAOAqa7dnoz3bXQcArrpCtgaWFMr5WsBMFArlcmcN742YLtQazdbNu42dzdXOWtlcFAt312vVhXytcC6KSVpfzMpP6pUT9dsR8VpE/GJyKquXVxq11WH+xwcARti1E/P/fyY78z8AcMWVhp0AADBw5n8AGD3mfwAYPeZ/ABg9nfl/athpAAAD5P0/AIwe8z8AjJQffPxxerQP88+/Xv1sd2ej8dmt1Wpzo1zfWSmvNLa3ymuNxlr2mT313q9SPC7VGo2txfdi5/O5b281W/PN3b079cbOZutO9rned6qdO/cH1DsAoJfX3nr45ySdkT+cyo7o2suhONTMgItWGHYCwNCMDTsBYGjs9gWj6wzv8S0PwBXRY4vep5R6/YJQu91uX1xKwAW78SXr/zCqutb//RQwjBjr/zC6rP/D6Gq3k9Pu+R+nvREAuNys8QN9vv//en7+bf7NgR+vnrzjwUVmBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJfb0f6/5Xwv8JkoFMrliFciYi6Kyd31WnUhIl6NiD9NFifT+uKQcwYAzqrwtyTf/+vG7LszTzW9ee24OBERP/3VJ7/8fLnV2v5jxETyr8mj660H+fXK4LMHAF7saJ7Ozl1v5B8f3Fs5OgaZz9+/ExGlTvzDg4k4PI4/HuPZuRTFiJj+d5LXO5KutYuz2L8fEV/s1f8kZrI1kM7Opyfjp7FfGWj8wlPxC1lb55z+XXzhHHKBUfMwHX8+6vX8FeJ6du79/JeyEers8vEvfamVw2wMfBL/aPwb6zP+XT9tjPd+/71OaerZtvsRXx6POIp92DX+HMVP+sR/95Tx//KVN9/u19b+dcSN6B2/O9Z8q74139zdu7VeX16rrlU3K5WlxaWFD26/X5nP1qjn+88G//jw5qv92tL+T/eJX3pB/79+yv7/5n+f/uhrz4n/zXd6xS/EG8+Jn86J3zhl/OXp35X6taXxV/v0/0Vf/5unjP/or3vPbBsOAAxPc3dvY7lWq24rKFz+QvpP9hKk0auQDCyxiejd9PN3Os/0iaZ2+6Vi9RsxzmPVDbgMjh/6iPjvsJMBAAAAAAAAAAAAAAB6GsRvLA27jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFxd/w8AAP//0fvOfg==") lchown(&(0x7f00000017c0)='./file0\x00', 0xee00, 0xee01) 1m8.344733023s ago: executing program 4 (id=3903): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newtclass={0x24, 0x28, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa}, {0xffff, 0x4}, {0x0, 0x9}}}, 0x24}}, 0x4000004) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m8.283010964s ago: executing program 4 (id=3905): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000000), 0x1, 0x4bb, &(0x7f0000000580)="$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") mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) mkdir(&(0x7f00000000c0)='./control\x00', 0x10) 1m8.072281306s ago: executing program 4 (id=3914): r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m7.283649106s ago: executing program 4 (id=3932): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x28, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce231633"}, @NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 1m7.283252256s ago: executing program 37 (id=3932): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x28, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce231633"}, @NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 1.174172145s ago: executing program 9 (id=6413): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = inotify_init() r2 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r3 = inotify_add_watch(r1, &(0x7f00000004c0)='./file0\x00', 0x8c7) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYRES64=r3], 0x69) syz_usb_connect(0x2, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x5a, 0xe4, 0xc4, 0x10, 0x596, 0x1, 0x5f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd6, 0x0, 0x0, 0xb5, 0xe1, 0x45}}]}}]}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.173621025s ago: executing program 0 (id=6402): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14010000", @ANYRES16=r3, @ANYBLOB="cd3c000000000200000001000000ce00010043ecf8a077157cd8bc73e1b93314cdcbb6b9bb84e5bcdb7f9af2eacc913a7640e8332d1daa67516c7f094b740c631f175dd5d0f0a8ebd2679204020b006f64e62cd3404917f3be657330adc6bf2f2ab6286f91741293554bf4406edcdc8a3779814659bebb63d2c301a5e2568cb3696d7ed256da47bd6246c86e86ac9cfbdae22622b43a13e9096385b4cb17bf6d8436e77f709e436462ad3ba28f73bf36e8e32e548029e220d60a9d3d7e3de5dc9007f04d9c3c932faf89062b965db52beeff385e442adbb8d87480d4000008000200"], 0x114}, 0x1, 0x0, 0x0, 0x20084880}, 0x0) 1.074179877s ago: executing program 0 (id=6404): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 628.668592ms ago: executing program 1 (id=6427): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x6, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) set_robust_list(0x0, 0x0) 612.345502ms ago: executing program 9 (id=6428): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='highspeed\x00', 0xa) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001600)="f5", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)="b141fb6163b8ed66bdd629", 0xb}, {&(0x7f0000001700)="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", 0x4fa}], 0x2}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="277c95d614838b156311e0995558fa591cc6f67a15a1c38100ef81f835306244f772cf1ff23bca6e0e35875cd21d4939aa61b5653acec4d15a6756f399ea3fa894623917796cbed39118ee42cb5a3e9d6b43d66659dd0124da5b0582a6c41d9566b675ec2d33ed176bc67fad7304b20b0a166eedde862fca1c484cb0c33d7d3db5dbfed6475341b33c7525d85ab9a7ed2a37f6eb5b99b4b4e105", 0x9a}, {&(0x7f00000002c0)="f2dc6bad178f6b1e3ede5684cc5384bd1848569ef93282592ac0da761d1fe776a2e25c1db5c614b5712069254a8ef2b8063960fb801f9aa833702c2fd405c3fbc146", 0x42}], 0x2}}], 0x3, 0xc0) 589.335073ms ago: executing program 1 (id=6430): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000005c0), &(0x7f0000000580)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000300)) 578.173713ms ago: executing program 9 (id=6432): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x42, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x2}, 0x1100, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xfffff000) 552.285233ms ago: executing program 1 (id=6433): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 411.878745ms ago: executing program 1 (id=6439): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) 411.053275ms ago: executing program 1 (id=6442): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000000}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32250000000900010073797a3000000000080005400000001f"], 0xec}, 0x1, 0x0, 0x0, 0x20048811}, 0x0) 377.807075ms ago: executing program 9 (id=6444): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 368.654005ms ago: executing program 1 (id=6445): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x90020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) sendfile(r0, r0, 0x0, 0x800000009) 368.276375ms ago: executing program 3 (id=6446): write$binfmt_elf32(0xffffffffffffffff, 0x0, 0xd8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) setgid(0x0) 313.486416ms ago: executing program 9 (id=6448): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000180)='./file2\x00', 0x4a0c, &(0x7f0000003240)=ANY=[], 0x6, 0x36b, &(0x7f0000000540)="$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") close_range(r1, 0xffffffffffffffff, 0x0) 313.202426ms ago: executing program 3 (id=6449): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) dup2(r1, r2) 312.854056ms ago: executing program 7 (id=6450): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x2b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x80400, 0x2004, 0x800}) 262.291817ms ago: executing program 0 (id=6451): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 184.169408ms ago: executing program 7 (id=6452): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) write$binfmt_misc(r2, &(0x7f0000001280), 0x6) 183.820768ms ago: executing program 3 (id=6453): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) readv(r2, &(0x7f0000001180)=[{&(0x7f0000000000)=""/186, 0xba}], 0x1) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f00000000c0)=0x32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) 178.827588ms ago: executing program 3 (id=6455): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 168.228747ms ago: executing program 0 (id=6456): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) modify_ldt$read(0x0, 0x0, 0x11) 167.878278ms ago: executing program 7 (id=6457): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002540)={{r0}, &(0x7f00000024c0), &(0x7f0000002500)}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000840), r2) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 80.081939ms ago: executing program 9 (id=6458): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) 79.834579ms ago: executing program 0 (id=6459): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) pipe2$9p(0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000001280), 0x6) 79.634629ms ago: executing program 7 (id=6460): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) close(r1) 79.511519ms ago: executing program 3 (id=6461): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x8}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000140)="24000000010006", 0x7) 71.651139ms ago: executing program 7 (id=6462): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x6894, &(0x7f0000000380)={0x0, 0x5f39, 0x0, 0x3, 0xfffffffd}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)='./file0\x00'}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 62.537889ms ago: executing program 0 (id=6463): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_io_uring_setup(0x1237, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0x2b9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r4, r0) 8.05574ms ago: executing program 3 (id=6464): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0xfffffffe, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r3}]}, 0x44}}, 0x40000c0) 0s ago: executing program 7 (id=6465): pause() r0 = open(&(0x7f00009e1000)='./file0\x00', 0x62940, 0x14) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x1000000) kernel console output (not intermixed with test programs): 856'. [ 151.825246][T14196] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3861'. [ 151.866957][T14198] syzkaller0: entered promiscuous mode [ 151.873863][T14198] syzkaller0: entered allmulticast mode [ 151.932827][T14206] loop0: detected capacity change from 0 to 164 [ 151.941853][T14206] syz.0.3866: attempt to access beyond end of device [ 151.941853][T14206] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 151.956119][T14206] syz.0.3866: attempt to access beyond end of device [ 151.956119][T14206] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 152.079671][T14225] loop7: detected capacity change from 0 to 512 [ 152.086401][T14221] loop0: detected capacity change from 0 to 164 [ 152.096126][T14221] syz.0.3873: attempt to access beyond end of device [ 152.096126][T14221] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 152.123114][T14221] syz.0.3873: attempt to access beyond end of device [ 152.123114][T14221] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 152.139035][T14225] EXT4-fs warning (device loop7): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 152.173694][T14225] EXT4-fs (loop7): mount failed [ 152.287207][T14250] netlink: 'syz.7.3886': attribute type 1 has an invalid length. [ 152.517000][T14283] loop9: detected capacity change from 0 to 164 [ 152.528840][T14285] loop4: detected capacity change from 0 to 512 [ 152.539766][T14283] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 152.557633][T14283] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 152.580040][T14291] loop7: detected capacity change from 0 to 512 [ 152.608125][T14291] EXT4-fs (loop7): orphan cleanup on readonly fs [ 152.615176][T14291] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3902: bg 0: block 248: padding at end of block bitmap is not set [ 152.630764][T14291] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.3902: Failed to acquire dquot type 1 [ 152.643019][T14291] EXT4-fs (loop7): 1 truncate cleaned up [ 152.663953][T14298] loop4: detected capacity change from 0 to 512 [ 152.729202][T14298] loop4: detected capacity change from 512 to 64 [ 152.737778][T14298] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5899: Out of memory [ 152.756022][T14309] loop7: detected capacity change from 0 to 128 [ 152.764131][T14298] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5899: Out of memory [ 152.774739][T14311] netlink: 4 bytes leftover after parsing attributes in process `wg1'. [ 152.790180][T14298] EXT4-fs error (device loop4): ext4_evict_inode:259: inode #19: comm syz.4.3905: mark_inode_dirty error [ 152.792413][T14309] FAT-fs (loop7): Directory bread(block 162) failed [ 152.804335][T14298] EXT4-fs warning (device loop4): ext4_evict_inode:262: couldn't mark inode dirty (err -12) [ 152.818209][T14309] FAT-fs (loop7): Directory bread(block 163) failed [ 152.824835][T14309] FAT-fs (loop7): Directory bread(block 164) failed [ 152.831476][T14309] FAT-fs (loop7): Directory bread(block 165) failed [ 152.838156][T14309] FAT-fs (loop7): Directory bread(block 166) failed [ 152.842596][T14311] team0 (unregistering): Port device team_slave_0 removed [ 152.846462][T14309] FAT-fs (loop7): Directory bread(block 167) failed [ 152.862693][ T3315] EXT4-fs error (device loop4): ext4_lookup:1786: inode #2: comm syz-executor: '.' linked to parent dir [ 152.877011][ T3315] EXT4-fs error (device loop4): ext4_lookup:1786: inode #2: comm syz-executor: '.' linked to parent dir [ 152.891246][T14309] FAT-fs (loop7): Directory bread(block 168) failed [ 152.893360][T14311] team0 (unregistering): Port device team_slave_1 removed [ 152.898357][T14309] FAT-fs (loop7): Directory bread(block 169) failed [ 152.912619][T14311] bond_slave_0: left promiscuous mode [ 152.916696][T14309] FAT-fs (loop7): Directory bread(block 162) failed [ 152.918115][T14311] bond_slave_1: left promiscuous mode [ 152.931463][T14309] FAT-fs (loop7): Directory bread(block 163) failed [ 152.933290][T14311] team0 (unregistering): Port device macvlan2 removed [ 152.938477][T14309] syz.7.3910: attempt to access beyond end of device [ 152.938477][T14309] loop7: rw=3, sector=226, nr_sectors = 6 limit=128 [ 152.959894][T14309] syz.7.3910: attempt to access beyond end of device [ 152.959894][T14309] loop7: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 153.026404][T14319] loop0: detected capacity change from 0 to 1024 [ 153.033673][T14321] SELinux: security policydb version 17 (MLS) not backwards compatible [ 153.034483][T14319] EXT4-fs: Ignoring removed orlov option [ 153.042008][T14321] SELinux: failed to load policy [ 153.048227][T14319] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 153.165770][ T8688] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.232236][ T8688] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.257836][T14333] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 153.293350][ T8688] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.352706][ T8688] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.457025][ T8688] team0: left allmulticast mode [ 153.463194][ T8688] team_slave_0: left allmulticast mode [ 153.468690][ T8688] team_slave_1: left allmulticast mode [ 153.475652][ T8688] bridge0: port 3(team0) entered disabled state [ 153.509516][ T8688] bridge_slave_1: left allmulticast mode [ 153.515271][ T8688] bridge_slave_1: left promiscuous mode [ 153.521087][ T8688] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.531576][T14344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.542342][T14344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.552558][ T8688] bridge_slave_0: left allmulticast mode [ 153.558413][ T8688] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.589000][T14352] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3931'. [ 153.597980][T14352] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3931'. [ 153.653356][ T8688] bond0 (unregistering): (slave ip6gretap1): Releasing active interface [ 153.661819][ T8688] ip6gretap1 (unregistering): left allmulticast mode [ 153.668674][T14352] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3931'. [ 153.677914][T14352] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3931'. [ 153.707293][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 153.707305][ T29] audit: type=1400 audit(154.163:3666): avc: denied { sys_module } for pid=14358 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 153.744764][T14352] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3931'. [ 153.753961][T14352] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3931'. [ 153.773632][ T8688]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.784838][ T8688]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.797963][ T8688]  (unregistering): Released all slaves [ 153.806880][ T8688] bond0 (unregistering): left allmulticast mode [ 153.813269][ T8688] bond0 (unregistering): left promiscuous mode [ 153.819563][ T29] audit: type=1400 audit(922.271:3667): avc: denied { append } for pid=14367 comm="syz.0.3936" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 153.849161][ T8688] macvlan2 (unregistering): left promiscuous mode [ 153.859656][ T29] audit: type=1400 audit(922.324:3668): avc: denied { create } for pid=14369 comm="syz.7.3937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 153.879830][ T29] audit: type=1400 audit(922.324:3669): avc: denied { ioctl } for pid=14369 comm="syz.7.3937" path="socket:[38822]" dev="sockfs" ino=38822 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 153.881032][ T8688] team0: Port device macvlan2 removed [ 153.912849][ T8688] bond0 (unregistering): Released all slaves [ 153.919153][ T29] audit: type=1400 audit(922.376:3670): avc: denied { create } for pid=14371 comm="syz.0.3938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 153.939878][ T29] audit: type=1400 audit(922.376:3671): avc: denied { write } for pid=14371 comm="syz.0.3938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 153.959887][ T29] audit: type=1400 audit(922.376:3672): avc: denied { read } for pid=14371 comm="syz.0.3938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 154.004340][T14348] vxcan1 speed is unknown, defaulting to 1000 [ 154.026600][ T29] audit: type=1400 audit(922.492:3673): avc: denied { create } for pid=14379 comm="syz.7.3940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 154.070599][ T29] audit: type=1400 audit(922.492:3674): avc: denied { create } for pid=14378 comm="syz.0.3941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 154.089993][ T29] audit: type=1400 audit(922.492:3675): avc: denied { setopt } for pid=14378 comm="syz.0.3941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 154.127107][T14358] vxcan1 speed is unknown, defaulting to 1000 [ 154.137100][T14388] Invalid ELF header magic: != ELF [ 154.269749][ T8688] hsr_slave_0: left promiscuous mode [ 154.282999][ T8688] hsr_slave_1: left promiscuous mode [ 154.303088][ T8688] veth1_macvtap: left promiscuous mode [ 154.314037][ T8688] veth0_macvtap: left promiscuous mode [ 154.326155][ T8688] veth1_vlan: left promiscuous mode [ 154.337023][ T8688] veth0_vlan: left promiscuous mode [ 154.474106][ T8688] team_slave_1 (unregistering): left promiscuous mode [ 154.485168][T14411] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3954'. [ 154.486601][ T8688] team0 (unregistering): Port device team_slave_1 removed [ 154.506224][ T8688] team_slave_0 (unregistering): left promiscuous mode [ 154.516690][ T8688] team0 (unregistering): Port device team_slave_0 removed [ 154.575933][T14421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3959'. [ 154.595406][T14421] bridge0: entered promiscuous mode [ 154.602361][T14421] macsec1: entered allmulticast mode [ 154.607716][T14421] bridge0: entered allmulticast mode [ 154.615340][T14421] bridge0: port 3(macsec1) entered blocking state [ 154.621974][T14421] bridge0: port 3(macsec1) entered disabled state [ 154.630893][T14421] bridge0: left allmulticast mode [ 154.635972][T14421] bridge0: left promiscuous mode [ 154.654078][T14425] netlink: 'syz.9.3960': attribute type 10 has an invalid length. [ 154.669269][T14425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.681317][T14425] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 154.761592][T14358] chnl_net:caif_netlink_parms(): no params data found [ 154.807309][T14358] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.814478][T14358] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.821727][T14358] bridge_slave_0: entered allmulticast mode [ 154.829529][T14358] bridge_slave_0: entered promiscuous mode [ 154.845394][T14358] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.852484][T14358] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.877571][T14358] bridge_slave_1: entered allmulticast mode [ 154.884341][T14358] bridge_slave_1: entered promiscuous mode [ 154.917434][T14358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.935753][T14458] loop9: detected capacity change from 0 to 512 [ 154.955902][T14358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.965284][T14458] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 154.974399][T14458] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 154.985131][T14460] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=38 sclass=netlink_audit_socket pid=14460 comm=syz.7.3976 [ 155.004194][T14458] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 155.012750][T14458] System zones: 0-2, 18-18, 34-34 [ 155.022776][T14458] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 155.045322][T14458] EXT4-fs (loop9): 1 truncate cleaned up [ 155.045898][T14358] team0: Port device team_slave_0 added [ 155.086715][T14358] team0: Port device team_slave_1 added [ 155.125488][T14476] loop7: detected capacity change from 0 to 512 [ 155.132256][T14480] loop0: detected capacity change from 0 to 1024 [ 155.140567][T14480] EXT4-fs: Ignoring removed nobh option [ 155.146163][T14480] EXT4-fs: Ignoring removed bh option [ 155.154323][T14358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.161426][T14358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.187526][T14358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.200455][T14358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.207456][T14358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.233461][T14358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.262278][T14476] EXT4-fs warning (device loop7): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 155.301469][T14358] hsr_slave_0: entered promiscuous mode [ 155.302052][T14358] hsr_slave_1: entered promiscuous mode [ 155.302402][T14476] EXT4-fs (loop7): mount failed [ 155.302476][T14358] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.302487][T14358] Cannot create hsr debugfs directory [ 155.485908][T14506] xt_hashlimit: size too large, truncated to 1048576 [ 155.946837][T14358] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 155.949503][T14358] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 155.965617][T14358] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 155.967719][T14358] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 156.010374][T14529] dvmrp5: entered allmulticast mode [ 156.014757][T14529] dvmrp5: left allmulticast mode [ 156.042293][T14358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.055809][T14358] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.065248][ T8688] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.072336][ T8688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.097014][ T8665] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.104142][ T8665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.144223][T14358] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 156.144299][T14358] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 156.194391][T14538] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4007'. [ 156.261828][T14358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.271164][T14548] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4011'. [ 156.292195][T14552] loop9: detected capacity change from 0 to 512 [ 156.358601][T14561] ipip0: entered promiscuous mode [ 156.371202][T14569] netlink: zone id is out of range [ 156.376517][T14569] netlink: zone id is out of range [ 156.381792][T14569] netlink: zone id is out of range [ 156.386955][T14569] netlink: zone id is out of range [ 156.392135][T14569] netlink: zone id is out of range [ 156.397361][T14569] netlink: zone id is out of range [ 156.402593][T14569] netlink: zone id is out of range [ 156.407746][T14569] netlink: zone id is out of range [ 156.412923][T14569] netlink: zone id is out of range [ 156.418102][T14569] netlink: zone id is out of range [ 156.429640][T14552] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 156.511788][T14358] veth0_vlan: entered promiscuous mode [ 156.527223][T14358] veth1_vlan: entered promiscuous mode [ 156.566604][T14358] veth0_macvtap: entered promiscuous mode [ 156.584928][T14358] veth1_macvtap: entered promiscuous mode [ 156.607826][T14358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.625814][T14358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.646622][T14600] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 156.659183][T14358] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.668069][T14358] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.676875][T14358] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.686364][T14358] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.707946][ T6826] IPVS: starting estimator thread 0... [ 156.726305][T14604] team0: Port device team_slave_0 removed [ 156.742991][T14609] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 156.798921][T14606] IPVS: using max 2400 ests per chain, 120000 per kthread [ 156.984155][T14648] loop7: detected capacity change from 0 to 2048 [ 157.051834][T14648] loop7: p1 < > p4 < > [ 157.104569][T14669] netlink: 'syz.3.4061': attribute type 5 has an invalid length. [ 157.509350][T14719] 9pnet_fd: Insufficient options for proto=fd [ 157.635532][T14737] loop1: detected capacity change from 0 to 512 [ 157.648224][T14737] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 157.663685][T14737] EXT4-fs (loop1): mount failed [ 157.848658][T14762] dvmrp5: entered allmulticast mode [ 157.856748][T14762] dvmrp5: left allmulticast mode [ 158.065142][T14781] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14781 comm=syz.0.4109 [ 158.078600][T14781] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14781 comm=syz.0.4109 [ 158.177234][T14787] loop9: detected capacity change from 0 to 2048 [ 158.203162][T14789] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 158.211162][T14787] loop9: p1 < > p4 [ 158.216467][T14787] loop9: p4 size 8388608 extends beyond EOD, truncated [ 158.298045][T14800] pimreg: entered allmulticast mode [ 158.306476][T14800] pimreg: left allmulticast mode [ 158.331463][T14803] netlink: 'syz.0.4120': attribute type 10 has an invalid length. [ 158.341850][T14803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.350272][T14803] batadv0: entered allmulticast mode [ 158.356862][T14803] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 158.406922][T14810] tmpfs: Bad value for 'mpol' [ 158.509460][T14821] syzkaller0: entered allmulticast mode [ 158.535712][ T29] kauditd_printk_skb: 296 callbacks suppressed [ 158.535727][ T29] audit: type=1326 audit(927.265:3970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14755 comm="syz.3.4097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd90deee969 code=0x7fc00000 [ 158.617186][ T29] audit: type=1400 audit(927.339:3971): avc: denied { read write } for pid=14830 comm="syz.0.4134" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 158.641034][ T29] audit: type=1400 audit(927.339:3972): avc: denied { open } for pid=14830 comm="syz.0.4134" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 158.657311][ T3388] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x4 [ 158.671721][ T3388] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x2 [ 158.685211][T14834] netlink: 'syz.3.4135': attribute type 10 has an invalid length. [ 158.708317][ T3388] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 158.716109][ T3388] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 158.723823][ T3388] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 158.731566][ T3388] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 158.739326][ T3388] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 158.747163][ T3388] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 158.754824][ T3388] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 158.762509][ T3388] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 158.770173][ T3388] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 158.777841][ T3388] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 158.785488][ T3388] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 158.793205][ T3388] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 158.800865][ T3388] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 158.808527][ T3388] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 158.817155][ T3388] hid-generic 0000:3000000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 158.828764][ T29] audit: type=1400 audit(927.561:3973): avc: denied { watch watch_reads } for pid=14837 comm="syz.3.4137" path="/593" dev="tmpfs" ino=3069 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 158.878243][ T29] audit: type=1400 audit(927.624:3974): avc: denied { read write } for pid=13772 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 158.902046][ T29] audit: type=1400 audit(927.624:3975): avc: denied { open } for pid=13772 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 158.925664][ T29] audit: type=1400 audit(927.624:3976): avc: denied { ioctl } for pid=13772 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 158.960807][ T29] audit: type=1400 audit(927.667:3977): avc: denied { open } for pid=14842 comm="syz.7.4141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 158.979690][ T29] audit: type=1400 audit(927.667:3978): avc: denied { perfmon } for pid=14842 comm="syz.7.4141" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 159.000071][ T29] audit: type=1400 audit(927.667:3979): avc: denied { kernel } for pid=14842 comm="syz.7.4141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 159.165859][T14863] netlink: 'syz.7.4148': attribute type 5 has an invalid length. [ 159.185447][T14866] vxcan1 speed is unknown, defaulting to 1000 [ 159.246100][T14875] veth0_macvtap: left promiscuous mode [ 159.286359][T14875] macvtap0: refused to change device tx_queue_len [ 159.523735][T14896] __nla_validate_parse: 4 callbacks suppressed [ 159.523755][T14896] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4161'. [ 159.617340][T14866] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4150'. [ 159.639904][T14866] netlink: 'syz.3.4150': attribute type 4 has an invalid length. [ 159.650518][T14908] loop7: detected capacity change from 0 to 128 [ 159.680157][T14908] EXT4-fs mount: 38 callbacks suppressed [ 159.680195][T14908] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 159.707374][T14904] SELinux: failed to load policy [ 159.766349][T14918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.774819][T14918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.858836][T14925] loop9: detected capacity change from 0 to 512 [ 159.880874][T14925] EXT4-fs: Ignoring removed mblk_io_submit option [ 159.890868][T14927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.900080][T14927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.909735][T14925] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.961118][T10880] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.246240][T14935] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4178'. [ 160.277129][T14937] loop9: detected capacity change from 0 to 512 [ 160.284083][T14937] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 160.297739][T14937] EXT4-fs (loop9): 1 truncate cleaned up [ 160.304024][T14937] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.342492][T10880] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.363274][T14940] loop9: detected capacity change from 0 to 128 [ 160.370433][T14940] FAT-fs (loop9): Directory bread(block 162) failed [ 160.377584][T14940] FAT-fs (loop9): Directory bread(block 163) failed [ 160.386073][T14940] FAT-fs (loop9): Directory bread(block 164) failed [ 160.392761][T14940] FAT-fs (loop9): Directory bread(block 165) failed [ 160.399501][T14940] FAT-fs (loop9): Directory bread(block 166) failed [ 160.406244][T14940] FAT-fs (loop9): Directory bread(block 167) failed [ 160.413016][T14940] FAT-fs (loop9): Directory bread(block 168) failed [ 160.419862][T14940] FAT-fs (loop9): Directory bread(block 169) failed [ 160.432948][T14940] FAT-fs (loop9): Directory bread(block 162) failed [ 160.441414][T14940] FAT-fs (loop9): Directory bread(block 163) failed [ 160.459381][T14940] syz.9.4180: attempt to access beyond end of device [ 160.459381][T14940] loop9: rw=3, sector=226, nr_sectors = 6 limit=128 [ 160.472988][T14940] syz.9.4180: attempt to access beyond end of device [ 160.472988][T14940] loop9: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 160.473442][T13772] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 160.501281][T14947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4183'. [ 160.701061][T14977] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 162.713487][T14990] SELinux: failed to load policy [ 162.756533][T14999] loop9: detected capacity change from 0 to 128 [ 162.765584][T14999] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 162.830413][T10880] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 162.850049][T15007] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4206'. [ 162.878040][T15009] rdma_rxe: rxe_newlink: failed to add veth0_virt_wifi [ 162.915181][T15007] team0: Port device team_slave_0 removed [ 162.957396][T15018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4212'. [ 163.000175][T15022] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4213'. [ 163.029145][T15022] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 163.048702][T15022] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4213'. [ 163.061646][T15026] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4216'. [ 163.070689][T15026] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4216'. [ 163.135282][T15033] netlink: 'syz.0.4220': attribute type 4 has an invalid length. [ 163.286047][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 163.286086][ T29] audit: type=1400 audit(932.272:4082): avc: denied { watch watch_reads } for pid=15049 comm="syz.3.4228" path="/616" dev="tmpfs" ino=3192 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 163.336232][T15056] netlink: 'syz.3.4231': attribute type 13 has an invalid length. [ 163.346661][ T29] audit: type=1400 audit(932.294:4083): avc: denied { name_bind } for pid=15051 comm="syz.0.4229" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 163.346687][ T29] audit: type=1400 audit(932.294:4084): avc: denied { node_bind } for pid=15051 comm="syz.0.4229" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 163.368058][ T29] audit: type=1400 audit(932.346:4085): avc: denied { create } for pid=15057 comm="syz.0.4232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 163.368090][ T29] audit: type=1400 audit(932.346:4086): avc: denied { bind } for pid=15057 comm="syz.0.4232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 163.429604][ T29] audit: type=1400 audit(932.399:4087): avc: denied { write } for pid=15057 comm="syz.0.4232" path="socket:[42041]" dev="sockfs" ino=42041 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 163.479458][T15056] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.479813][T15056] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.491620][ T29] audit: type=1326 audit(932.494:4088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15059 comm="syz.1.4233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990141e969 code=0x7ffc0000 [ 163.530166][ T29] audit: type=1326 audit(932.494:4089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15059 comm="syz.1.4233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990141e969 code=0x7ffc0000 [ 163.553302][ T29] audit: type=1326 audit(932.494:4090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15059 comm="syz.1.4233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f990141e969 code=0x7ffc0000 [ 163.553370][ T29] audit: type=1326 audit(932.494:4091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15059 comm="syz.1.4233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990141e969 code=0x7ffc0000 [ 163.663278][T15056] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.663396][T15056] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.663433][T15056] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.663470][T15056] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.747715][T15069] vxcan1 speed is unknown, defaulting to 1000 [ 163.944616][T15086] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 163.944731][T15086] SELinux: failed to load policy [ 164.229762][T15112] vxcan1 speed is unknown, defaulting to 1000 [ 164.384891][T15127] loop7: detected capacity change from 0 to 164 [ 164.414557][T15127] syz.7.4263: attempt to access beyond end of device [ 164.414557][T15127] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 164.456730][T15127] syz.7.4263: attempt to access beyond end of device [ 164.456730][T15127] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 164.818955][T15152] xt_CT: No such helper "snmp_trap" [ 164.954977][T15170] __nla_validate_parse: 5 callbacks suppressed [ 164.954993][T15170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4282'. [ 165.026388][T15178] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 165.034109][T15178] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 165.101905][T15186] vxcan1 speed is unknown, defaulting to 1000 [ 165.190658][ T3388] hid-generic FFFC:0003:0000.0008: unknown main item tag 0x0 [ 165.198254][ T3388] hid-generic FFFC:0003:0000.0008: unknown main item tag 0x0 [ 165.205775][ T3388] hid-generic FFFC:0003:0000.0008: unknown main item tag 0x0 [ 165.213258][ T3388] hid-generic FFFC:0003:0000.0008: unknown main item tag 0x0 [ 165.220656][ T3388] hid-generic FFFC:0003:0000.0008: unknown main item tag 0x0 [ 165.228046][ T3388] hid-generic FFFC:0003:0000.0008: unknown main item tag 0x0 [ 165.303344][ T3388] hid-generic FFFC:0003:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 165.382900][T15199] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4292'. [ 165.423647][T15201] netlink: 'syz.0.4294': attribute type 1 has an invalid length. [ 165.434573][T15203] 9pnet_fd: Insufficient options for proto=fd [ 165.462924][T15201] bond1: (slave gretap1): making interface the new active one [ 165.482291][T15201] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 165.554386][T15206] loop9: detected capacity change from 0 to 512 [ 165.565697][T15206] EXT4-fs: Ignoring removed nobh option [ 165.611796][T15206] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.4295: invalid indirect mapped block 256 (level 2) [ 165.626536][T15217] loop1: detected capacity change from 0 to 128 [ 165.667216][T15206] EXT4-fs (loop9): 2 truncates cleaned up [ 165.747267][T15206] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.805206][T15226] syz.1.4300: attempt to access beyond end of device [ 165.805206][T15226] loop1: rw=2049, sector=131, nr_sectors = 1 limit=128 [ 165.818720][T15226] Buffer I/O error on dev loop1, logical block 131, lost async page write [ 165.842402][T15226] syz.1.4300: attempt to access beyond end of device [ 165.842402][T15226] loop1: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 165.856566][T15226] Buffer I/O error on dev loop1, logical block 132, lost async page write [ 165.893537][T15226] syz.1.4300: attempt to access beyond end of device [ 165.893537][T15226] loop1: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 165.907161][T15226] Buffer I/O error on dev loop1, logical block 133, lost async page write [ 165.917143][T15235] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.4295: bg 0: block 5: invalid block bitmap [ 165.933649][T15206] EXT4-fs warning (device loop9): ext4_block_to_path:107: block 209747972 > max in inode 15 [ 165.934732][T15226] syz.1.4300: attempt to access beyond end of device [ 165.934732][T15226] loop1: rw=2049, sector=134, nr_sectors = 1 limit=128 [ 165.958524][T15226] Buffer I/O error on dev loop1, logical block 134, lost async page write [ 165.968102][T15226] syz.1.4300: attempt to access beyond end of device [ 165.968102][T15226] loop1: rw=2049, sector=135, nr_sectors = 1 limit=128 [ 165.981585][T15226] Buffer I/O error on dev loop1, logical block 135, lost async page write [ 166.011031][T15226] syz.1.4300: attempt to access beyond end of device [ 166.011031][T15226] loop1: rw=2049, sector=136, nr_sectors = 1 limit=128 [ 166.025170][T15226] Buffer I/O error on dev loop1, logical block 136, lost async page write [ 166.048766][T15239] 9pnet: p9_errstr2errno: server reported unknown error @L O!L [ 166.059970][T15226] syz.1.4300: attempt to access beyond end of device [ 166.059970][T15226] loop1: rw=2049, sector=137, nr_sectors = 64 limit=128 [ 166.073565][T15226] syz.1.4300: attempt to access beyond end of device [ 166.073565][T15226] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 166.087738][T15226] syz.1.4300: attempt to access beyond end of device [ 166.087738][T15226] loop1: rw=2049, sector=225, nr_sectors = 9 limit=128 [ 166.275344][T15251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4314'. [ 166.320279][T15249] ALSA: seq fatal error: cannot create timer (-19) [ 166.428772][T10880] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.462609][T15270] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4323'. [ 166.474123][T15270] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4323'. [ 166.548330][T15272] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4322'. [ 166.579486][T15276] vxcan1 speed is unknown, defaulting to 1000 [ 166.827698][T15312] loop9: detected capacity change from 0 to 128 [ 166.845737][T15312] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 166.880308][T15312] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 166.923649][ T37] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 167.063719][T15320] Falling back ldisc for ttyS3. [ 167.083330][T15322] $H: renamed from bond0 (while UP) [ 167.102587][T15322] $H: entered promiscuous mode [ 167.107772][T15322] bond_slave_0: entered promiscuous mode [ 167.113614][T15322] bond_slave_1: entered promiscuous mode [ 167.163717][T15326] netlink: 'syz.9.4347': attribute type 13 has an invalid length. [ 167.202014][T15326] bridge0: port 3(gretap0) entered disabled state [ 167.252283][T15326] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.259518][T15326] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.311416][T15326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.333566][T15326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.403628][T15326] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.412658][T15326] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.421653][T15326] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.430747][T15326] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.459859][T15332] tipc: Started in network mode [ 167.464862][T15332] tipc: Node identity 4, cluster identity 4711 [ 167.471079][T15332] tipc: Node number set to 4 [ 167.479491][T15334] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 168.025596][T15383] vlan2: entered allmulticast mode [ 168.051467][T15385] netlink: 'syz.7.4373': attribute type 13 has an invalid length. [ 168.157547][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 168.157575][ T29] audit: type=1400 audit(937.425:4185): avc: denied { read write } for pid=15389 comm="syz.9.4375" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 168.218010][T15385] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.225193][T15385] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.229784][ T29] audit: type=1400 audit(937.457:4186): avc: denied { open } for pid=15389 comm="syz.9.4375" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 168.256449][ T29] audit: type=1400 audit(937.457:4187): avc: denied { ioctl } for pid=15389 comm="syz.9.4375" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 168.342137][ T29] audit: type=1326 audit(937.552:4188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15392 comm="syz.9.4377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cf01e969 code=0x7ffc0000 [ 168.365892][ T29] audit: type=1326 audit(937.552:4189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15392 comm="syz.9.4377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cf01e969 code=0x7ffc0000 [ 168.388966][ T29] audit: type=1326 audit(937.552:4190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15392 comm="syz.9.4377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31cf01e969 code=0x7ffc0000 [ 168.412882][ T29] audit: type=1326 audit(937.552:4191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15392 comm="syz.9.4377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cf01e969 code=0x7ffc0000 [ 168.435868][ T29] audit: type=1326 audit(937.552:4192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15392 comm="syz.9.4377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31cf01e969 code=0x7ffc0000 [ 168.459467][ T29] audit: type=1326 audit(937.552:4193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15392 comm="syz.9.4377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cf01e969 code=0x7ffc0000 [ 168.482360][ T29] audit: type=1326 audit(937.552:4194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15392 comm="syz.9.4377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cf01e969 code=0x7ffc0000 [ 168.604208][T15385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.633641][T15385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.748347][T15385] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.757462][T15385] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.766400][T15385] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.775366][T15385] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.870014][T15400] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4380'. [ 168.886513][T15400] netem: change failed [ 168.965871][T15429] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4389'. [ 168.974932][T15429] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4389'. [ 169.076261][T15437] program syz.7.4393 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.862291][T15503] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.4419'. [ 169.883319][T15498] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.4419'. [ 170.142878][T15534] tipc: New replicast peer: 255.255.255.255 [ 170.149116][T15534] tipc: Enabled bearer , priority 10 [ 170.188902][T15538] vxcan1 speed is unknown, defaulting to 1000 [ 170.586994][T15567] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4449'. [ 170.837613][T15581] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15581 comm=syz.1.4456 [ 170.906664][T15584] vxcan1 speed is unknown, defaulting to 1000 [ 170.962804][T15592] netlink: 'syz.1.4460': attribute type 13 has an invalid length. [ 171.045628][T15592] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.052992][T15592] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.115302][T15592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.127250][T15592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.173070][T15592] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.182252][T15592] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.191384][T15592] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.200470][T15592] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.243672][T15597] wireguard0: entered promiscuous mode [ 171.249985][T15597] wireguard0: entered allmulticast mode [ 171.445944][T15608] syzkaller1: entered promiscuous mode [ 171.451450][T15608] syzkaller1: entered allmulticast mode [ 171.549895][T15620] loop7: detected capacity change from 0 to 164 [ 171.569620][T15620] rock: directory entry would overflow storage [ 171.575804][T15620] rock: sig=0x4543, size=28, remaining=18 [ 171.770816][T15641] block device autoloading is deprecated and will be removed. [ 171.786124][T15635] SELinux: failed to load policy [ 171.791170][T15641] syz.0.4480: attempt to access beyond end of device [ 171.791170][T15641] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 171.890462][T15658] loop9: detected capacity change from 0 to 128 [ 172.058803][T15680] geneve0: entered allmulticast mode [ 172.180675][T15700] loop0: detected capacity change from 0 to 164 [ 172.242685][T15700] syz.0.4500: attempt to access beyond end of device [ 172.242685][T15700] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 172.334520][T15700] syz.0.4500: attempt to access beyond end of device [ 172.334520][T15700] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 172.393175][T15712] loop9: detected capacity change from 0 to 128 [ 172.607575][T15732] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4514'. [ 172.956606][T15766] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 172.958614][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 172.958631][ T29] audit: type=1400 audit(942.480:4352): avc: denied { mounton } for pid=15767 comm="syz.1.4529" path="/74/file0" dev="tmpfs" ino=397 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 173.023941][T15774] loop9: detected capacity change from 0 to 164 [ 173.037395][T15774] rock: directory entry would overflow storage [ 173.043616][T15774] rock: sig=0x4543, size=28, remaining=18 [ 173.068257][T15778] xt_hashlimit: size too large, truncated to 1048576 [ 173.251507][T15782] loop9: detected capacity change from 0 to 128 [ 173.258367][ T29] audit: type=1400 audit(942.807:4353): avc: denied { mounton } for pid=15781 comm="syz.9.4535" path="/402/file0" dev="configfs" ino=865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 173.288815][ T29] audit: type=1400 audit(942.839:4354): avc: denied { unmount } for pid=10880 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 173.317151][T15785] loop7: detected capacity change from 0 to 16384 [ 173.376813][T15793] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 173.378713][T15785] I/O error, dev loop7, sector 8448 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 173.386258][T15793] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 173.407374][T15785] I/O error, dev loop7, sector 8704 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 173.418768][T15785] I/O error, dev loop7, sector 8448 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 173.429128][T15785] Buffer I/O error on dev loop7, logical block 1056, async page read [ 173.449423][T15783] I/O error, dev loop7, sector 8 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 173.459352][T15783] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 173.467799][T15783] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 173.476198][T15783] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 173.484786][T15783] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 173.493202][T15783] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 173.501618][T15783] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 173.510019][T15783] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 173.518438][T15783] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 173.530212][T15783] I/O error, dev loop7, sector 1032 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 173.544285][ T29] audit: type=1400 audit(943.102:4355): avc: denied { associate } for pid=15801 comm="syz.9.4544" name="0" dev="devpts" ino=3 scontext=system_u:object_r:mouse_device_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 173.545865][T15783] I/O error, dev loop7, sector 2056 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 173.579376][T15806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4545'. [ 173.591911][T15783] I/O error, dev loop7, sector 3080 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 173.606244][T15783] I/O error, dev loop7, sector 4104 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 173.611560][ T29] audit: type=1400 audit(943.145:4356): avc: denied { bind } for pid=15805 comm="syz.0.4545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 173.629746][T15783] I/O error, dev loop7, sector 5128 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 173.645322][ T29] audit: type=1326 audit(943.197:4357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15807 comm="syz.9.4546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cf01e969 code=0x7ffc0000 [ 173.669149][ T29] audit: type=1326 audit(943.197:4358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15807 comm="syz.9.4546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cf01e969 code=0x7ffc0000 [ 173.692083][ T29] audit: type=1326 audit(943.197:4359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15807 comm="syz.9.4546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31cf01e969 code=0x7ffc0000 [ 173.715871][ T29] audit: type=1326 audit(943.197:4360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15807 comm="syz.9.4546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cf01e969 code=0x7ffc0000 [ 173.739645][ T29] audit: type=1326 audit(943.197:4361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15807 comm="syz.9.4546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31cf01e969 code=0x7ffc0000 [ 173.765284][T15810] netlink: 'syz.3.4547': attribute type 39 has an invalid length. [ 173.808238][T15812] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26216 sclass=netlink_route_socket pid=15812 comm=syz.7.4549 [ 174.008229][T15856] loop0: detected capacity change from 0 to 1024 [ 174.021530][T15856] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 174.040669][T15856] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 174.061428][T15865] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4573'. [ 174.072716][T15856] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 174.085902][T15856] EXT4-fs (loop0): orphan cleanup on readonly fs [ 174.115200][T15856] EXT4-fs error (device loop0): ext4_read_inode_bitmap:167: comm syz.0.4570: Inode bitmap for bg 0 marked uninitialized [ 174.157875][T15856] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 174.216021][T15856] EXT4-fs (loop0): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 174.246232][T11029] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.273408][T15891] syzkaller1: entered promiscuous mode [ 174.279933][T15891] syzkaller1: entered allmulticast mode [ 174.293707][T15889] vxcan1 speed is unknown, defaulting to 1000 [ 174.396247][T15902] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 174.617247][T15926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.640363][T15926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.861730][T15945] vxcan1 speed is unknown, defaulting to 1000 [ 175.466865][ T3390] hid-generic FFFC:0003:0000.0009: unknown main item tag 0x0 [ 175.474448][ T3390] hid-generic FFFC:0003:0000.0009: unknown main item tag 0x0 [ 175.481983][ T3390] hid-generic FFFC:0003:0000.0009: unknown main item tag 0x0 [ 175.489420][ T3390] hid-generic FFFC:0003:0000.0009: unknown main item tag 0x0 [ 175.497538][ T3390] hid-generic FFFC:0003:0000.0009: unknown main item tag 0x0 [ 175.505351][ T3390] hid-generic FFFC:0003:0000.0009: unknown main item tag 0x0 [ 175.598733][ T3390] hid-generic FFFC:0003:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 175.805898][T15967] netlink: 'syz.0.4619': attribute type 1 has an invalid length. [ 175.846929][T15973] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4620'. [ 175.923438][T15980] loop0: detected capacity change from 0 to 1024 [ 175.952118][T15981] loop9: detected capacity change from 0 to 1024 [ 175.971825][T15985] loop7: detected capacity change from 0 to 256 [ 175.987083][T15981] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 176.007989][T15980] EXT4-fs: Ignoring removed oldalloc option [ 176.040319][T15981] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 176.061503][T15980] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 176.140773][T15981] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 176.149397][T15980] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.193514][T15981] EXT4-fs (loop9): orphan cleanup on readonly fs [ 176.248026][T11029] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.276329][T15981] EXT4-fs error (device loop9): ext4_read_inode_bitmap:167: comm syz.9.4624: Inode bitmap for bg 0 marked uninitialized [ 176.328881][T15981] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 176.358255][ T3390] hid-generic FFFC:0003:0000.000A: unknown main item tag 0x0 [ 176.365723][ T3390] hid-generic FFFC:0003:0000.000A: unknown main item tag 0x0 [ 176.373295][ T3390] hid-generic FFFC:0003:0000.000A: unknown main item tag 0x0 [ 176.380770][ T3390] hid-generic FFFC:0003:0000.000A: unknown main item tag 0x0 [ 176.389016][ T3390] hid-generic FFFC:0003:0000.000A: unknown main item tag 0x0 [ 176.396604][ T3390] hid-generic FFFC:0003:0000.000A: unknown main item tag 0x0 [ 176.432255][T15981] EXT4-fs (loop9): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 176.468703][ T3390] hid-generic FFFC:0003:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 176.476900][T10880] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.814177][T16042] $H: renamed from bond0 [ 176.829042][T16042] $H: entered promiscuous mode [ 176.834137][T16042] bond_slave_0: entered promiscuous mode [ 176.839872][T16042] batadv0: entered promiscuous mode [ 176.948732][T16044] SELinux: ebitmap: truncated map [ 176.954289][T16044] SELinux: failed to load policy [ 177.307593][ T3390] Process accounting resumed [ 177.371498][T16078] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 177.586564][T16088] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4674'. [ 177.616101][T16088] hsr_slave_0: left promiscuous mode [ 177.623228][T16088] hsr_slave_1: left promiscuous mode [ 177.679381][T16096] random: crng reseeded on system resumption [ 177.704323][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 177.704338][ T29] audit: type=1400 audit(947.491:4568): avc: denied { setopt } for pid=16093 comm="syz.3.4677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 177.766603][T16098] netlink: 4 bytes leftover after parsing attributes in process `#*'. [ 177.820915][ T29] audit: type=1400 audit(947.617:4569): avc: denied { block_suspend } for pid=16103 comm="syz.1.4681" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 177.906361][ T29] audit: type=1400 audit(947.702:4570): avc: denied { ioctl } for pid=16107 comm="syz.7.4683" path="socket:[45200]" dev="sockfs" ino=45200 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 177.939053][ T29] audit: type=1400 audit(947.733:4571): avc: denied { mount } for pid=16105 comm="syz.1.4682" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 177.960589][ T29] audit: type=1400 audit(947.744:4572): avc: denied { create } for pid=16108 comm="syz.9.4684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 177.979728][ T29] audit: type=1400 audit(947.744:4573): avc: denied { connect } for pid=16108 comm="syz.9.4684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 178.019989][ T29] audit: type=1400 audit(947.818:4574): avc: denied { mount } for pid=16112 comm="syz.3.4685" name="/" dev="configfs" ino=865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 178.052403][ T29] audit: type=1400 audit(947.860:4575): avc: denied { unmount } for pid=14358 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 178.075122][ T29] audit: type=1400 audit(947.891:4576): avc: denied { mount } for pid=16114 comm="syz.9.4686" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 178.096415][ T29] audit: type=1400 audit(947.891:4577): avc: denied { unmount } for pid=14358 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 178.288428][T16134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4705'. [ 178.319617][T16118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.344992][T16118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.453308][T16158] atomic_op ffff88813d5b3928 conn xmit_atomic 0000000000000000 [ 178.503823][T16165] netlink: 404 bytes leftover after parsing attributes in process `syz.9.4709'. [ 178.613542][T16175] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4723'. [ 178.629148][T16175] netem: change failed [ 179.134483][T16189] loop0: detected capacity change from 0 to 2048 [ 179.144753][T16189] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 179.239309][T16198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4724'. [ 179.438205][T16211] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4730'. [ 179.537962][T16215] loop9: detected capacity change from 0 to 2048 [ 179.619655][T16215] Alternate GPT is invalid, using primary GPT. [ 179.626816][T16215] loop9: p2 p3 p7 [ 179.809957][T16231] netlink: 4 bytes leftover after parsing attributes in process `#*'. [ 179.977707][T16241] program syz.0.4745 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.987196][T16243] wireguard0: entered promiscuous mode [ 179.992709][T16243] wireguard0: entered allmulticast mode [ 180.152762][T16263] netlink: 4 bytes leftover after parsing attributes in process `#*'. [ 180.192043][T16261] loop9: detected capacity change from 0 to 2048 [ 180.270241][T16261] loop9: p1 < > p4 [ 180.282370][T16261] loop9: p4 size 8388608 extends beyond EOD, truncated [ 180.594434][T16308] tipc: Started in network mode [ 180.599404][T16308] tipc: Node identity -:, cluster identity 4711 [ 180.605769][T16308] tipc: Enabling of bearer rejected, failed to enable media [ 181.410977][T16378] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4802'. [ 181.533704][T16387] wireguard0: entered promiscuous mode [ 181.539231][T16387] wireguard0: entered allmulticast mode [ 181.582169][T16391] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4806'. [ 181.637815][T16397] random: crng reseeded on system resumption [ 181.811846][T16416] loop0: detected capacity change from 0 to 128 [ 181.818765][T16419] 9pnet_fd: Insufficient options for proto=fd [ 181.821290][T16420] netlink: 'syz.1.4820': attribute type 4 has an invalid length. [ 181.849972][T16420] netlink: 'syz.1.4820': attribute type 4 has an invalid length. [ 181.871751][T16424] vlan2: entered allmulticast mode [ 181.906440][T16428] wireguard0: entered promiscuous mode [ 181.912055][T16428] wireguard0: entered allmulticast mode [ 182.301737][T16455] serio: Serial port ptm0 [ 182.502197][T16458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.521423][T16458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.550686][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 182.550701][ T29] audit: type=1400 audit(952.605:4692): avc: denied { ioctl } for pid=16465 comm="syz.0.4839" path="socket:[46174]" dev="sockfs" ino=46174 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 182.616153][T16475] loop9: detected capacity change from 0 to 512 [ 182.634411][T16475] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 182.647505][T16475] EXT4-fs (loop9): 1 truncate cleaned up [ 182.653786][T16475] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.667618][ T29] audit: type=1400 audit(952.731:4693): avc: denied { mount } for pid=16473 comm="syz.9.4843" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 182.695481][ T29] audit: type=1400 audit(952.731:4694): avc: denied { write } for pid=16473 comm="syz.9.4843" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 182.717344][ T29] audit: type=1400 audit(952.731:4695): avc: denied { add_name } for pid=16473 comm="syz.9.4843" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 182.759667][ T29] audit: type=1400 audit(952.731:4696): avc: denied { create } for pid=16473 comm="syz.9.4843" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 182.801975][ T29] audit: type=1400 audit(952.731:4697): avc: denied { create } for pid=16473 comm="syz.9.4843" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 182.835934][T16477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.843734][ T29] audit: type=1400 audit(952.731:4698): avc: denied { write open } for pid=16473 comm="syz.9.4843" path="/475/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop9" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 182.916954][T16477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.925350][ T29] audit: type=1400 audit(952.731:4699): avc: denied { remove_name } for pid=16473 comm="syz.9.4843" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop9" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 182.969632][ T29] audit: type=1400 audit(952.731:4700): avc: denied { rename } for pid=16473 comm="syz.9.4843" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop9" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 182.975460][T10880] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.012925][ T29] audit: type=1400 audit(952.752:4701): avc: denied { rename } for pid=16473 comm="syz.9.4843" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 183.033923][T16482] loop7: detected capacity change from 0 to 2048 [ 183.057557][T16484] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4855'. [ 183.087363][T16482] loop7: p1 < > p4 [ 183.101854][T16482] loop7: p4 size 8388608 extends beyond EOD, truncated [ 183.151786][T16488] net_ratelimit: 289 callbacks suppressed [ 183.151803][T16488] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 183.376166][T16532] netlink: 'syz.3.4868': attribute type 2 has an invalid length. [ 183.384053][T16532] netlink: 'syz.3.4868': attribute type 1 has an invalid length. [ 183.391924][T16532] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.4868'. [ 183.406988][T16535] IPVS: Error connecting to the multicast addr [ 183.527296][T16555] ALSA: seq fatal error: cannot create timer (-19) [ 183.752706][T16563] Cannot find add_set index 0 as target [ 183.754071][T16565] random: crng reseeded on system resumption [ 183.789212][T16567] serio: Serial port ptm0 [ 183.969168][T16575] pim6reg1: entered promiscuous mode [ 183.974522][T16575] pim6reg1: entered allmulticast mode [ 183.977018][T16577] netlink: 'syz.7.4886': attribute type 4 has an invalid length. [ 183.991939][T16577] netlink: 'syz.7.4886': attribute type 4 has an invalid length. [ 184.082457][T16587] loop9: detected capacity change from 0 to 164 [ 184.197483][T16604] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4900'. [ 184.214089][T16604] gretap0: left allmulticast mode [ 184.219267][T16604] gretap0: left promiscuous mode [ 184.224432][T16604] bridge0: port 3(gretap0) entered disabled state [ 184.233854][T16604] bridge_slave_1: left allmulticast mode [ 184.239591][T16604] bridge_slave_1: left promiscuous mode [ 184.245380][T16604] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.273044][T16604] bridge_slave_0: left promiscuous mode [ 184.278788][T16604] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.464895][T16632] netlink: 'syz.9.4912': attribute type 4 has an invalid length. [ 184.472712][T16632] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.4912'. [ 184.541758][T16642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4917'. [ 184.572674][T16642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4917'. [ 184.574647][T16646] netlink: 'syz.0.4920': attribute type 298 has an invalid length. [ 184.702741][T16667] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4927'. [ 184.751495][T16675] vlan2: entered allmulticast mode [ 184.829609][T16682] loop9: detected capacity change from 0 to 1024 [ 184.864342][T16682] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.897157][T16691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4937'. [ 185.007693][T10880] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.040869][T16704] 9pnet: p9_errstr2errno: server reported unknown error @L O!L+ [ 185.063998][T16705] smc: net device bond0 applied user defined pnetid SYZ2 [ 185.079161][T16705] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 185.087095][T16707] loop9: detected capacity change from 0 to 512 [ 185.093368][T16705] smc: net device bond0 erased user defined pnetid SYZ2 [ 185.116914][T16705] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2 [ 185.132115][T16707] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 185.151855][T16707] EXT4-fs (loop9): 1 truncate cleaned up [ 185.158024][T16707] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.288451][T16723] IPVS: Error connecting to the multicast addr [ 185.303663][T10880] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.413058][T16736] vhci_hcd: invalid port number 96 [ 185.418221][T16736] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 185.546162][T16765] bond0: entered promiscuous mode [ 185.551245][T16765] bond0: entered allmulticast mode [ 185.563431][T16765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.620270][T16778] SELinux: Context system_u:object_r:systemd_unit_file_t:s0 is not valid (left unmapped). [ 185.645226][T16781] xt_hashlimit: size too large, truncated to 1048576 [ 185.973244][T16825] bridge_slave_1: left allmulticast mode [ 185.979005][T16825] bridge_slave_1: left promiscuous mode [ 185.984702][T16825] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.992563][T16825] bridge_slave_0: left promiscuous mode [ 185.998209][T16825] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.162646][T16848] __nla_validate_parse: 5 callbacks suppressed [ 186.162712][T16848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5005'. [ 186.433429][T16865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5012'. [ 186.442718][T16865] gretap0: left allmulticast mode [ 186.447814][T16865] gretap0: left promiscuous mode [ 186.452890][T16865] bridge0: port 3(gretap0) entered disabled state [ 186.471316][T16865] bridge_slave_1: left allmulticast mode [ 186.477038][T16865] bridge_slave_1: left promiscuous mode [ 186.482898][T16865] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.497236][T16865] bridge_slave_0: left promiscuous mode [ 186.502989][T16865] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.622113][T16869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5015'. [ 186.644831][T16872] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5016'. [ 186.644955][T16869] bond2: entered promiscuous mode [ 186.658916][T16869] bond2: entered allmulticast mode [ 186.664329][T16869] 8021q: adding VLAN 0 to HW filter on device bond2 [ 186.988248][T16909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5032'. [ 186.998028][T16909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5032'. [ 187.188669][T16926] xt_hashlimit: size too large, truncated to 1048576 [ 187.198064][T16923] hub 2-0:1.0: USB hub found [ 187.202745][T16923] hub 2-0:1.0: 8 ports detected [ 187.344557][T16929] vlan2: entered allmulticast mode [ 187.465570][T16940] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5046'. [ 187.474484][T16940] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5046'. [ 187.503319][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 187.503334][ T29] audit: type=1400 audit(957.822:4880): avc: denied { ioctl } for pid=16941 comm="syz.9.5056" path="socket:[47511]" dev="sockfs" ino=47511 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 187.583167][ T29] audit: type=1400 audit(957.907:4881): avc: denied { bind } for pid=16953 comm="syz.1.5052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 187.611282][ T29] audit: type=1326 audit(957.938:4882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16955 comm="syz.7.5053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f4cde969 code=0x7ffc0000 [ 187.633019][T16948] hub 8-0:1.0: USB hub found [ 187.634307][ T29] audit: type=1326 audit(957.938:4883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16955 comm="syz.7.5053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58f4cde969 code=0x7ffc0000 [ 187.638863][T16948] hub 8-0:1.0: 8 ports detected [ 187.662995][ T29] audit: type=1326 audit(957.938:4884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16957 comm="syz.0.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032255e969 code=0x7ffc0000 [ 187.690134][ T29] audit: type=1326 audit(957.938:4885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16957 comm="syz.0.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f032255e969 code=0x7ffc0000 [ 187.713147][ T29] audit: type=1326 audit(957.938:4886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16957 comm="syz.0.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032255e969 code=0x7ffc0000 [ 187.736122][ T29] audit: type=1326 audit(957.938:4887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16957 comm="syz.0.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032255e969 code=0x7ffc0000 [ 187.759047][ T29] audit: type=1326 audit(957.938:4888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16957 comm="syz.0.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f032255e969 code=0x7ffc0000 [ 187.782314][ T29] audit: type=1326 audit(957.938:4889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16957 comm="syz.0.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032255e969 code=0x7ffc0000 [ 187.846056][T16965] netlink: 332 bytes leftover after parsing attributes in process `syz.9.5057'. [ 187.856294][T16965] netlink: 'syz.9.5057': attribute type 9 has an invalid length. [ 187.864170][T16965] netlink: 108 bytes leftover after parsing attributes in process `syz.9.5057'. [ 187.881510][T16967] ip6gretap1: entered allmulticast mode [ 188.083929][T17001] dvmrp1: entered allmulticast mode [ 188.098497][T17001] dvmrp1: left allmulticast mode [ 188.257334][T17025] xt_hashlimit: size too large, truncated to 1048576 [ 188.307799][T17027] IPVS: Error connecting to the multicast addr [ 188.450829][T17041] netlink: 'syz.0.5092': attribute type 1 has an invalid length. [ 188.495745][T17041] 8021q: adding VLAN 0 to HW filter on device bond3 [ 188.507514][T17044] netem: change failed [ 188.523431][T17047] bond3: (slave gretap2): making interface the new active one [ 188.531817][T17047] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 188.587249][T17056] : renamed from pim6reg1 [ 188.906162][T17086] vxcan1 speed is unknown, defaulting to 1000 [ 188.981637][T17095] netlink: 'syz.0.5116': attribute type 12 has an invalid length. [ 188.993163][T17097] netlink: 'syz.7.5117': attribute type 3 has an invalid length. [ 189.076467][T17107] loop9: detected capacity change from 0 to 512 [ 189.102821][T17107] EXT4-fs error (device loop9): ext4_iget_extra_inode:4693: inode #15: comm syz.9.5122: corrupted in-inode xattr: overlapping e_value [ 189.191854][T17107] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.5122: couldn't read orphan inode 15 (err -117) [ 189.215892][T17107] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.229328][T17128] netlink: zone id is out of range [ 189.236529][T17107] wireguard: wg2: Could not create IPv6 socket [ 189.242766][T17107] wg2: entered promiscuous mode [ 189.247758][T17107] wg2: entered allmulticast mode [ 189.286660][T17128] netlink: zone id is out of range [ 189.301842][T17128] netlink: del zone limit has 8 unknown bytes [ 189.344934][T10880] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.401562][T17142] netlink: 'syz.9.5134': attribute type 12 has an invalid length. [ 189.491592][T17145] SELinux: policydb version 0 does not match my version range 15-34 [ 189.499881][T17145] SELinux: failed to load policy [ 189.635380][T17170] netlink: 'syz.3.5147': attribute type 1 has an invalid length. [ 189.643186][T17170] netlink: 'syz.3.5147': attribute type 4 has an invalid length. [ 189.750268][T17177] syzkaller1: entered promiscuous mode [ 189.755910][T17177] syzkaller1: entered allmulticast mode [ 189.765831][T17179] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 189.834380][T17188] IPVS: Error connecting to the multicast addr [ 190.227475][T17144] cgroup: fork rejected by pids controller in /syz7 [ 190.311400][T17243] loop7: detected capacity change from 0 to 2048 [ 190.319056][T17243] EXT4-fs: Ignoring removed bh option [ 190.343433][T17243] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.726457][ T8685] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 190.741533][ T8685] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 190.754463][ T8685] EXT4-fs (loop7): This should not happen!! Data will be lost [ 190.754463][ T8685] [ 190.764142][ T8685] EXT4-fs (loop7): Total free blocks count 0 [ 190.770119][ T8685] EXT4-fs (loop7): Free/Dirty block details [ 190.776200][ T8685] EXT4-fs (loop7): free_blocks=2415919104 [ 190.782575][ T8685] EXT4-fs (loop7): dirty_blocks=8224 [ 190.787940][ T8685] EXT4-fs (loop7): Block reservation details [ 190.794135][ T8685] EXT4-fs (loop7): i_reserved_data_blocks=514 [ 190.804928][ T8685] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 190.981730][T17284] smc: net device bond0 applied user defined pnetid SYZ2 [ 191.003234][T17284] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 191.043953][T17288] smc: net device bond0 erased user defined pnetid SYZ2 [ 191.058506][T17288] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2 [ 191.269280][T17296] loop7: detected capacity change from 0 to 1024 [ 191.276389][T17296] EXT4-fs: Ignoring removed nomblk_io_submit option [ 191.299921][T17296] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.354116][T13772] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.647244][T17347] __nla_validate_parse: 4 callbacks suppressed [ 191.647258][T17347] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5209'. [ 191.685399][T17347] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5209'. [ 191.782954][T17358] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5214'. [ 191.963013][T17382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5221'. [ 191.979681][T17384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5222'. [ 192.032298][T17394] rdma_op ffff88813d5b2980 conn xmit_rdma 0000000000000000 [ 192.122320][T17406] loop9: detected capacity change from 0 to 764 [ 192.145229][T17402] vxcan1 speed is unknown, defaulting to 1000 [ 192.151739][T17406] rock: directory entry would overflow storage [ 192.158041][T17406] rock: sig=0x5850, size=36, remaining=7 [ 192.235904][T17419] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5241'. [ 192.290360][T17423] xt_CT: No such helper "pptp" [ 192.317458][ T29] kauditd_printk_skb: 209 callbacks suppressed [ 192.317475][ T29] audit: type=1400 audit(962.890:5099): avc: denied { create } for pid=17425 comm="syz.0.5244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 192.348413][ T29] audit: type=1400 audit(962.922:5100): avc: denied { write } for pid=17425 comm="syz.0.5244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 192.404142][ T29] audit: type=1400 audit(962.985:5101): avc: denied { create } for pid=17433 comm="syz.0.5247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 192.446392][ T29] audit: type=1400 audit(963.027:5102): avc: denied { read } for pid=17428 comm="syz.1.5245" lport=52798 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 192.518546][ T29] audit: type=1400 audit(963.038:5103): avc: denied { cmd } for pid=17433 comm="syz.0.5247" path="socket:[49232]" dev="sockfs" ino=49232 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 192.541017][ T29] audit: type=1400 audit(963.091:5104): avc: denied { read write } for pid=17438 comm="syz.1.5250" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 192.564000][ T29] audit: type=1400 audit(963.091:5105): avc: denied { open } for pid=17438 comm="syz.1.5250" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 192.633430][T17444] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5252'. [ 192.644019][T17444] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5252'. [ 192.793140][T17459] sd 0:0:1:0: device reset [ 192.794590][ T29] audit: type=1326 audit(963.396:5106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17458 comm="syz.0.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032255e969 code=0x7ffc0000 [ 192.820519][ T29] audit: type=1326 audit(963.396:5107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17458 comm="syz.0.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032255e969 code=0x7ffc0000 [ 192.843436][ T29] audit: type=1326 audit(963.396:5108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17458 comm="syz.0.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f032255d2d0 code=0x7ffc0000 [ 192.967534][T17471] loop7: detected capacity change from 0 to 512 [ 192.995918][T17471] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.075930][T13772] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.160487][T17493] vxcan1 speed is unknown, defaulting to 1000 [ 193.543158][T17531] loop9: detected capacity change from 0 to 164 [ 193.552804][T17531] syz.9.5286: attempt to access beyond end of device [ 193.552804][T17531] loop9: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 193.581859][T17531] syz.9.5286: attempt to access beyond end of device [ 193.581859][T17531] loop9: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 193.847195][T17558] vxcan1 speed is unknown, defaulting to 1000 [ 194.472713][T17605] xt_CT: No such helper "pptp" [ 194.540078][T17613] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5322'. [ 194.570001][T17618] loop9: detected capacity change from 0 to 256 [ 194.668658][T17618] FAT-fs (loop9): error, corrupted file size (i_pos 196, 2097152) [ 194.677332][T17618] FAT-fs (loop9): Filesystem has been set read-only [ 194.691706][T17618] FAT-fs (loop9): error, corrupted file size (i_pos 196, 2097152) [ 194.710639][T17618] FAT-fs (loop9): error, corrupted file size (i_pos 196, 2097152) [ 194.722915][T17618] FAT-fs (loop9): error, corrupted file size (i_pos 196, 2097152) [ 194.871504][T17647] smc: net device bond0 applied user defined pnetid SYZ2 [ 194.879940][T17647] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 194.888563][T17647] smc: net device bond0 erased user defined pnetid SYZ2 [ 194.895625][T17647] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2 [ 194.947172][T17661] loop9: detected capacity change from 0 to 128 [ 195.135082][T17690] loop9: detected capacity change from 0 to 512 [ 195.179545][T17690] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.261379][T10880] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.372011][T17714] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5368'. [ 195.669468][T17749] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 196.264132][T17810] loop9: detected capacity change from 0 to 1024 [ 196.279960][T17810] EXT4-fs: Ignoring removed orlov option [ 196.287624][T17810] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 196.318616][T17810] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.346122][T17824] 9pnet_fd: Insufficient options for proto=fd [ 196.363302][T10880] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.696313][T17860] __nla_validate_parse: 4 callbacks suppressed [ 196.696331][T17860] netlink: 4 bytes leftover after parsing attributes in process `wޣ'. [ 196.726066][T17857] SELinux: failed to load policy [ 196.763339][T17867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5428'. [ 197.227616][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 197.227634][ T29] audit: type=1400 audit(968.052:5209): avc: denied { relabelto } for pid=17891 comm="syz.0.5443" name="531" dev="tmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 197.259753][ T29] audit: type=1400 audit(968.062:5210): avc: denied { associate } for pid=17891 comm="syz.0.5443" name="531" dev="tmpfs" ino=2780 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 197.353552][ T29] audit: type=1400 audit(968.199:5211): avc: denied { write } for pid=11029 comm="syz-executor" name="531" dev="tmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 197.379235][ T29] audit: type=1400 audit(968.199:5212): avc: denied { remove_name } for pid=11029 comm="syz-executor" name="binderfs" dev="tmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 197.405943][ T29] audit: type=1400 audit(968.199:5213): avc: denied { rmdir } for pid=11029 comm="syz-executor" name="531" dev="tmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 197.671875][T17919] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 197.828724][T17928] xt_hashlimit: max too large, truncated to 1048576 [ 197.945218][ T29] audit: type=1400 audit(968.821:5214): avc: denied { write } for pid=17944 comm="syz.3.5467" lport=53968 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 197.994204][ T29] audit: type=1400 audit(968.852:5215): avc: denied { setopt } for pid=17944 comm="syz.3.5467" lport=53968 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 198.040062][ T29] audit: type=1400 audit(968.926:5216): avc: denied { create } for pid=17950 comm="syz.3.5470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 198.070089][T17951] siw: device registration error -23 [ 198.106050][ T29] audit: type=1400 audit(968.957:5217): avc: denied { write } for pid=17950 comm="syz.3.5470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 198.215782][T17974] 9pnet_fd: Insufficient options for proto=fd [ 198.244806][T17976] loop9: detected capacity change from 0 to 128 [ 198.263542][T17976] FAT-fs (loop9): Directory bread(block 162) failed [ 198.272216][T17976] FAT-fs (loop9): Directory bread(block 163) failed [ 198.281730][T17976] FAT-fs (loop9): Directory bread(block 164) failed [ 198.288405][T17976] FAT-fs (loop9): Directory bread(block 165) failed [ 198.330790][T17979] xt_hashlimit: max too large, truncated to 1048576 [ 198.364890][T17976] FAT-fs (loop9): Directory bread(block 166) failed [ 198.376149][T17976] FAT-fs (loop9): Directory bread(block 167) failed [ 198.383580][T17976] FAT-fs (loop9): Directory bread(block 168) failed [ 198.392638][T17976] FAT-fs (loop9): Directory bread(block 169) failed [ 198.404635][T17976] FAT-fs (loop9): Directory bread(block 162) failed [ 198.413955][T17976] FAT-fs (loop9): Directory bread(block 163) failed [ 198.422095][T17976] syz.9.5481: attempt to access beyond end of device [ 198.422095][T17976] loop9: rw=3, sector=226, nr_sectors = 6 limit=128 [ 198.438261][T17976] syz.9.5481: attempt to access beyond end of device [ 198.438261][T17976] loop9: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 198.454351][T17985] serio: Serial port ptm0 [ 198.478875][T17989] siw: device registration error -23 [ 198.619727][T17999] vlan2: entered allmulticast mode [ 198.637684][ T29] audit: type=1400 audit(969.558:5218): avc: denied { bind } for pid=18000 comm="syz.0.5502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 198.720328][T18008] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 198.807225][T18024] loop9: detected capacity change from 0 to 1024 [ 198.818397][T18024] EXT4-fs (loop9): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 198.833241][T18028] loop7: detected capacity change from 0 to 128 [ 198.848400][T18024] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.883893][T18034] SELinux: policydb version 0 does not match my version range 15-34 [ 198.892909][T18034] SELinux: failed to load policy [ 198.898388][T10880] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.973433][T18041] xt_hashlimit: max too large, truncated to 1048576 [ 199.122574][T18060] siw: device registration error -23 [ 199.719427][T18088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5530'. [ 199.729099][T18088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5530'. [ 199.845554][T18096] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 199.859982][T18088] wireguard0: entered promiscuous mode [ 199.865479][T18088] wireguard0: entered allmulticast mode [ 200.094682][T18119] netlink: 'syz.0.5546': attribute type 1 has an invalid length. [ 200.213442][T18135] netlink: 180 bytes leftover after parsing attributes in process `syz.7.5552'. [ 200.216497][T18133] can0: slcan on ttyS3. [ 200.286344][T18133] can0 (unregistered): slcan off ttyS3. [ 200.304021][T18133] can0: slcan on ttyS3. [ 200.366557][T18144] loop7: detected capacity change from 0 to 8192 [ 200.399622][T18132] can0 (unregistered): slcan off ttyS3. [ 200.499697][T18173] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5570'. [ 200.526365][T18178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5572'. [ 200.619728][T18190] can0: slcan on ttyS3. [ 200.634455][T18192] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5578'. [ 200.675171][T18190] can0 (unregistered): slcan off ttyS3. [ 200.687951][T18205] can0: slcan on ttyS3. [ 200.779153][T18189] can0 (unregistered): slcan off ttyS3. [ 200.801931][T18218] netlink: 'syz.3.5588': attribute type 13 has an invalid length. [ 200.819439][T18225] netlink: 332 bytes leftover after parsing attributes in process `syz.0.5590'. [ 200.924750][T18218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.936205][T18218] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 201.710564][T18321] netlink: 'syz.1.5636': attribute type 3 has an invalid length. [ 201.990503][ T29] kauditd_printk_skb: 202 callbacks suppressed [ 201.990517][ T29] audit: type=1326 audit(973.085:5421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18299 comm="syz.9.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f31cf015927 code=0x7ffc0000 [ 202.020296][ T29] audit: type=1326 audit(973.085:5422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18299 comm="syz.9.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f31cefbab39 code=0x7ffc0000 [ 202.043851][ T29] audit: type=1326 audit(973.085:5423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18299 comm="syz.9.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f31cf01e969 code=0x7ffc0000 [ 202.085435][ T29] audit: type=1326 audit(973.127:5424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18299 comm="syz.9.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f31cf015927 code=0x7ffc0000 [ 202.109107][ T29] audit: type=1326 audit(973.127:5425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18299 comm="syz.9.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f31cefbab39 code=0x7ffc0000 [ 202.132396][ T29] audit: type=1326 audit(973.127:5426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18299 comm="syz.9.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f31cf01e969 code=0x7ffc0000 [ 202.156085][ T29] audit: type=1326 audit(973.127:5427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18299 comm="syz.9.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f31cf015927 code=0x7ffc0000 [ 202.179846][ T29] audit: type=1326 audit(973.127:5428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18299 comm="syz.9.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f31cefbab39 code=0x7ffc0000 [ 202.202759][ T29] audit: type=1326 audit(973.127:5429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18299 comm="syz.9.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f31cf01e969 code=0x7ffc0000 [ 202.226374][ T29] audit: type=1326 audit(973.148:5430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18299 comm="syz.9.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f31cf015927 code=0x7ffc0000 [ 202.282597][T18359] loop7: detected capacity change from 0 to 2048 [ 202.310094][T18359] EXT4-fs (loop7): failed to initialize system zone (-117) [ 202.317859][T18359] EXT4-fs (loop7): mount failed [ 202.683369][T18411] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5679'. [ 202.884971][T18428] IPv6: NLM_F_CREATE should be specified when creating new route [ 203.146036][T18453] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5696'. [ 203.198711][T18459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5710'. [ 203.229912][T18461] loop7: detected capacity change from 0 to 1024 [ 203.252726][T18461] EXT4-fs: Ignoring removed orlov option [ 203.270706][T18461] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 203.284407][T18461] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.301620][T18461] EXT4-fs error (device loop7): ext4_check_all_de:659: inode #12: block 7: comm syz.7.5700: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 203.346309][T13772] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.546886][T18488] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5711'. [ 204.315303][T18561] netlink: 'syz.1.5742': attribute type 4 has an invalid length. [ 204.350857][T18561] netlink: 'syz.1.5742': attribute type 4 has an invalid length. [ 204.446393][T18577] netlink: 'syz.9.5750': attribute type 3 has an invalid length. [ 204.623353][T18605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5763'. [ 204.808424][T18632] netlink: 332 bytes leftover after parsing attributes in process `syz.7.5774'. [ 204.868913][T18640] siw: device registration error -23 [ 204.914049][T18648] loop9: detected capacity change from 0 to 512 [ 204.924879][T18652] netlink: 'syz.1.5783': attribute type 1 has an invalid length. [ 204.944157][T18648] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.987054][T10880] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.391866][T18695] openvswitch: netlink: Message has 6 unknown bytes. [ 205.725706][T18725] netlink: 96 bytes leftover after parsing attributes in process `syz.7.5817'. [ 205.735273][T18727] netlink: 'syz.3.5818': attribute type 12 has an invalid length. [ 205.743558][T18727] netlink: 'syz.3.5818': attribute type 12 has an invalid length. [ 205.774852][T18731] netlink: 'syz.3.5820': attribute type 4 has an invalid length. [ 205.785968][T18731] netlink: 'syz.3.5820': attribute type 4 has an invalid length. [ 205.992718][T18758] netlink: 'syz.7.5833': attribute type 4 has an invalid length. [ 206.005188][T18758] netlink: 'syz.7.5833': attribute type 4 has an invalid length. [ 206.090950][T18770] netlink: 3 bytes leftover after parsing attributes in process `syz.7.5839'. [ 206.100136][T18770] 0X: renamed from caif0 [ 206.110255][T18770] 0X: entered allmulticast mode [ 206.115504][T18770] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 206.118780][T18772] ALSA: seq fatal error: cannot create timer (-19) [ 206.211575][T18786] netlink: 112 bytes leftover after parsing attributes in process `syz.1.5846'. [ 206.429832][T18812] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5859'. [ 206.764386][ T29] kauditd_printk_skb: 851 callbacks suppressed [ 206.764401][ T29] audit: type=1400 audit(978.117:6282): avc: denied { sys_module } for pid=18835 comm="syz.9.5869" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 206.824617][ T29] audit: type=1400 audit(978.149:6283): avc: denied { unmount } for pid=18840 comm="syz.0.5871" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 206.863275][T18848] bond4: entered promiscuous mode [ 206.868599][T18848] bond4: entered allmulticast mode [ 206.879620][T18848] 8021q: adding VLAN 0 to HW filter on device bond4 [ 206.902636][T18848] bond4 (unregistering): Released all slaves [ 206.938868][T18858] netlink: 'syz.3.5877': attribute type 3 has an invalid length. [ 206.949131][ T29] audit: type=1400 audit(978.307:6284): avc: denied { mount } for pid=18859 comm="syz.9.5876" name="/" dev="configfs" ino=865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 206.997019][ T29] audit: type=1400 audit(978.349:6285): avc: denied { unmount } for pid=10880 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 207.042246][ T29] audit: type=1400 audit(978.380:6286): avc: denied { name_bind } for pid=18864 comm="syz.1.5880" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 207.064282][ T29] audit: type=1400 audit(978.380:6287): avc: denied { node_bind } for pid=18864 comm="syz.1.5880" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 207.096297][T18872] openvswitch: netlink: Message has 6 unknown bytes. [ 207.097943][T18876] netlink: 'syz.3.5886': attribute type 1 has an invalid length. [ 207.112835][T18870] vxcan1 speed is unknown, defaulting to 1000 [ 207.127409][T18876] 8021q: adding VLAN 0 to HW filter on device bond1 [ 207.152591][T18876] bond1: (slave gretap1): making interface the new active one [ 207.162230][T18876] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 207.222938][ T29] audit: type=1400 audit(978.591:6288): avc: denied { create } for pid=18886 comm="syz.3.5890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 207.257700][ T29] audit: type=1400 audit(978.591:6289): avc: denied { bind } for pid=18886 comm="syz.3.5890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 207.277214][ T29] audit: type=1400 audit(978.591:6290): avc: denied { write } for pid=18886 comm="syz.3.5890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 207.300924][ T29] audit: type=1326 audit(978.675:6291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18888 comm="syz.7.5891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f4cde969 code=0x7ffc0000 [ 208.010262][T18915] Set syz1 is full, maxelem 65536 reached [ 208.132511][T18937] netlink: 'syz.9.5909': attribute type 11 has an invalid length. [ 208.149367][T18937] __nla_validate_parse: 1 callbacks suppressed [ 208.149386][T18937] netlink: 448 bytes leftover after parsing attributes in process `syz.9.5909'. [ 208.232712][T18951] block device autoloading is deprecated and will be removed. [ 208.241370][T18952] loop9: detected capacity change from 0 to 2048 [ 208.260351][T18956] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 208.260351][T18956] program syz.0.5920 not setting count and/or reply_len properly [ 208.302687][T18952] loop9: p1 < > p4 [ 208.307027][T18952] loop9: p4 size 8388608 extends beyond EOD, truncated [ 208.608595][ T6826] kernel write not supported for file /1461/attr/exec (pid: 6826 comm: kworker/0:5) [ 208.794618][T18996] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 208.831442][T19001] netlink: 448 bytes leftover after parsing attributes in process `syz.1.5938'. [ 209.199669][T19015] loop1: detected capacity change from 0 to 128 [ 209.375758][ T8660] kworker/u8:35: attempt to access beyond end of device [ 209.375758][ T8660] loop1: rw=1, sector=153, nr_sectors = 8 limit=128 [ 209.391348][ T8660] kworker/u8:35: attempt to access beyond end of device [ 209.391348][ T8660] loop1: rw=1, sector=169, nr_sectors = 8 limit=128 [ 209.408019][ T8660] kworker/u8:35: attempt to access beyond end of device [ 209.408019][ T8660] loop1: rw=1, sector=185, nr_sectors = 8 limit=128 [ 209.422098][ T8660] kworker/u8:35: attempt to access beyond end of device [ 209.422098][ T8660] loop1: rw=1, sector=201, nr_sectors = 8 limit=128 [ 209.433501][T19023] ipip1: entered promiscuous mode [ 209.452760][ T8660] kworker/u8:35: attempt to access beyond end of device [ 209.452760][ T8660] loop1: rw=1, sector=217, nr_sectors = 8 limit=128 [ 209.474314][ T8660] kworker/u8:35: attempt to access beyond end of device [ 209.474314][ T8660] loop1: rw=1, sector=233, nr_sectors = 8 limit=128 [ 209.488402][ T8660] kworker/u8:35: attempt to access beyond end of device [ 209.488402][ T8660] loop1: rw=1, sector=249, nr_sectors = 8 limit=128 [ 209.503528][ T8660] kworker/u8:35: attempt to access beyond end of device [ 209.503528][ T8660] loop1: rw=1, sector=265, nr_sectors = 8 limit=128 [ 209.517252][ T8660] kworker/u8:35: attempt to access beyond end of device [ 209.517252][ T8660] loop1: rw=1, sector=281, nr_sectors = 8 limit=128 [ 209.530859][ T8660] kworker/u8:35: attempt to access beyond end of device [ 209.530859][ T8660] loop1: rw=1, sector=297, nr_sectors = 8 limit=128 [ 209.605238][T19033] loop9: detected capacity change from 0 to 128 [ 209.633283][T19033] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 209.711520][T10880] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 209.784610][T19043] tmpfs: Bad value for 'mpol' [ 210.040748][T19070] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5950'. [ 210.053756][T19068] loop7: detected capacity change from 0 to 512 [ 210.100803][T19068] EXT4-fs warning (device loop7): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 210.136411][T19068] EXT4-fs (loop7): mount failed [ 210.216089][T19097] 9pnet_fd: Insufficient options for proto=fd [ 210.443889][T19132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5997'. [ 210.547287][T19144] SELinux: ebitmap: truncated map [ 210.554942][T19144] SELinux: failed to load policy [ 211.098124][T19215] netlink: 44 bytes leftover after parsing attributes in process `syz.9.6035'. [ 211.174977][T19221] vlan2: entered allmulticast mode [ 211.553036][T19274] 9pnet: Could not find request transport: f [ 211.562846][T19277] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6063'. [ 211.573710][T19277] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6063'. [ 211.605623][ T29] kauditd_printk_skb: 453 callbacks suppressed [ 211.605637][ T29] audit: type=1400 audit(983.201:6744): avc: denied { watch watch_reads } for pid=19280 comm="syz.7.6065" path="/481/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dmesg_exec_t:s0" [ 211.642230][ T29] audit: type=1400 audit(983.243:6745): avc: denied { watch } for pid=19280 comm="syz.7.6065" path="/481/file0/bus" dev="sysfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 211.780396][ T29] audit: type=1400 audit(983.390:6746): avc: denied { watch_reads } for pid=19283 comm="syz.7.6076" path="/482" dev="tmpfs" ino=2503 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 211.843294][ T29] audit: type=1326 audit(983.443:6747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19289 comm="syz.7.6068" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f58f4cde969 code=0x0 [ 212.139014][ T29] audit: type=1326 audit(983.769:6748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19301 comm="syz.0.6070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032255e969 code=0x7ffc0000 [ 212.165373][ T29] audit: type=1326 audit(983.790:6749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19301 comm="syz.0.6070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f032255e969 code=0x7ffc0000 [ 212.189263][ T29] audit: type=1400 audit(983.790:6750): avc: denied { kexec_image_load } for pid=19301 comm="syz.0.6070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 212.208777][ T29] audit: type=1326 audit(983.790:6751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19301 comm="syz.0.6070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032255e969 code=0x7ffc0000 [ 212.232552][ T29] audit: type=1326 audit(983.790:6752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19301 comm="syz.0.6070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032255e969 code=0x7ffc0000 [ 212.256329][ T29] audit: type=1326 audit(983.790:6753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19301 comm="syz.0.6070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f032255e969 code=0x7ffc0000 [ 212.374587][T19318] loop9: detected capacity change from 0 to 2048 [ 212.390000][T19318] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.404382][T19324] 9pnet_fd: p9_fd_create_unix (19324): problem connecting socket: ./file0: -111 [ 212.438724][T10880] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.536036][T19347] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6092'. [ 212.545608][T19347] validate_nla: 1 callbacks suppressed [ 212.545618][T19347] netlink: 'syz.3.6092': attribute type 7 has an invalid length. [ 212.558883][T19347] netlink: 'syz.3.6092': attribute type 8 has an invalid length. [ 212.566652][T19347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6092'. [ 212.618399][T19354] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6095'. [ 212.927733][T19396] 9pnet_fd: p9_fd_create_unix (19396): problem connecting socket: ./file0: -111 [ 213.135461][T19423] __nla_validate_parse: 2 callbacks suppressed [ 213.135485][T19423] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6123'. [ 213.427719][T19446] vlan0: entered allmulticast mode [ 213.497439][T19457] pim6reg: entered allmulticast mode [ 213.500526][T19457] pim6reg: left allmulticast mode [ 213.580131][T19465] netlink: 'syz.3.6145': attribute type 9 has an invalid length. [ 213.580153][T19465] netlink: 371 bytes leftover after parsing attributes in process `syz.3.6145'. [ 213.641086][T19469] netlink: 'syz.1.6147': attribute type 6 has an invalid length. [ 213.641106][T19469] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6147'. [ 214.050606][T19517] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6168'. [ 214.062055][T19517] team0 (unregistering): Port device team_slave_1 removed [ 215.014842][T19573] dvmrp1: entered allmulticast mode [ 215.024792][T19572] vxcan1 speed is unknown, defaulting to 1000 [ 215.033538][T19573] dvmrp1: left allmulticast mode [ 215.056594][T19578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6197'. [ 215.161115][T19585] loop7: detected capacity change from 0 to 512 [ 215.212096][T19585] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 215.226902][T19592] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 215.278757][T19596] SELinux: failed to load policy [ 215.294495][T19585] EXT4-fs (loop7): 1 truncate cleaned up [ 215.314460][T19585] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.339141][T19606] loop1: detected capacity change from 0 to 128 [ 215.375551][T19606] bio_check_eod: 102 callbacks suppressed [ 215.375573][T19606] syz.1.6206: attempt to access beyond end of device [ 215.375573][T19606] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 215.395433][T19606] buffer_io_error: 1047 callbacks suppressed [ 215.395449][T19606] Buffer I/O error on dev loop1, logical block 2065, async page read [ 215.432674][T19606] syz.1.6206: attempt to access beyond end of device [ 215.432674][T19606] loop1: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 215.446008][T19606] Buffer I/O error on dev loop1, logical block 2066, async page read [ 215.509977][T19606] syz.1.6206: attempt to access beyond end of device [ 215.509977][T19606] loop1: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 215.523415][T19606] Buffer I/O error on dev loop1, logical block 2067, async page read [ 215.535035][T19606] syz.1.6206: attempt to access beyond end of device [ 215.535035][T19606] loop1: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 215.548368][T19606] Buffer I/O error on dev loop1, logical block 2068, async page read [ 215.556815][T19606] syz.1.6206: attempt to access beyond end of device [ 215.556815][T19606] loop1: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 215.570895][T19606] Buffer I/O error on dev loop1, logical block 2069, async page read [ 215.579531][T19606] syz.1.6206: attempt to access beyond end of device [ 215.579531][T19606] loop1: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 215.593547][T19606] Buffer I/O error on dev loop1, logical block 2070, async page read [ 215.608447][T19606] syz.1.6206: attempt to access beyond end of device [ 215.608447][T19606] loop1: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 215.621828][T19606] Buffer I/O error on dev loop1, logical block 2071, async page read [ 215.662972][T19606] syz.1.6206: attempt to access beyond end of device [ 215.662972][T19606] loop1: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 215.676362][T19606] Buffer I/O error on dev loop1, logical block 2072, async page read [ 215.685217][T19606] syz.1.6206: attempt to access beyond end of device [ 215.685217][T19606] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 215.685489][T13772] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.698553][T19606] Buffer I/O error on dev loop1, logical block 2065, async page read [ 215.698670][T19606] syz.1.6206: attempt to access beyond end of device [ 215.698670][T19606] loop1: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 215.729339][T19606] Buffer I/O error on dev loop1, logical block 2066, async page read [ 215.794264][T19629] vhci_hcd: invalid port number 96 [ 215.799442][T19629] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 215.956393][T19653] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6228'. [ 215.973878][T19655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6230'. [ 216.030582][T19661] netlink: 64 bytes leftover after parsing attributes in process `syz.9.6232'. [ 216.117320][T19670] netlink: 'syz.3.6236': attribute type 21 has an invalid length. [ 216.125268][T19670] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6236'. [ 216.144054][T19670] netlink: 'syz.3.6236': attribute type 4 has an invalid length. [ 216.151996][T19670] netlink: 'syz.3.6236': attribute type 5 has an invalid length. [ 216.159833][T19670] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6236'. [ 216.184996][T19672] loop9: detected capacity change from 0 to 512 [ 216.193307][T19672] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 216.205547][T19672] EXT4-fs (loop9): 1 truncate cleaned up [ 216.211816][T19672] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.224720][T19672] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.523266][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 216.523284][ T29] audit: type=1326 audit(988.388:6935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19706 comm="syz.3.6252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90deee969 code=0x7ffc0000 [ 216.567412][T19711] loop1: detected capacity change from 0 to 1024 [ 216.586390][T19705] loop7: detected capacity change from 0 to 1024 [ 216.613738][ T29] audit: type=1326 audit(988.420:6936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19706 comm="syz.3.6252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd90deee969 code=0x7ffc0000 [ 216.637133][ T29] audit: type=1326 audit(988.420:6937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19706 comm="syz.3.6252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90deee969 code=0x7ffc0000 [ 216.660036][ T29] audit: type=1326 audit(988.420:6938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19706 comm="syz.3.6252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90deee969 code=0x7ffc0000 [ 216.683033][ T29] audit: type=1326 audit(988.420:6939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19706 comm="syz.3.6252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd90deee969 code=0x7ffc0000 [ 216.688281][T19705] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.705990][ T29] audit: type=1326 audit(988.420:6940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19706 comm="syz.3.6252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90deee969 code=0x7ffc0000 [ 216.706027][ T29] audit: type=1326 audit(988.420:6941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19706 comm="syz.3.6252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90deee969 code=0x7ffc0000 [ 216.706061][ T29] audit: type=1326 audit(988.420:6942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19706 comm="syz.3.6252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd90deee969 code=0x7ffc0000 [ 216.706228][ T29] audit: type=1326 audit(988.420:6943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19706 comm="syz.3.6252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90deee969 code=0x7ffc0000 [ 216.706261][ T29] audit: type=1326 audit(988.420:6944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19706 comm="syz.3.6252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90deee969 code=0x7ffc0000 [ 216.791115][T19711] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.890662][T14358] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.913003][T13772] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.993535][T19733] vxcan1 speed is unknown, defaulting to 1000 [ 217.239617][T19752] program syz.1.6272 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.293159][T19758] block device autoloading is deprecated and will be removed. [ 217.345417][T19764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.354032][T19764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.607934][T19792] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 217.660032][T19799] SELinux: syz.9.6295 (19799) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 217.763399][T19811] SELinux: Context system_u:object_r:scanner_device_t:s0 is not valid (left unmapped). [ 217.937120][T19831] __nla_validate_parse: 4 callbacks suppressed [ 217.937156][T19831] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6309'. [ 217.998951][T19833] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6310'. [ 218.009230][T19841] loop7: detected capacity change from 0 to 128 [ 218.165763][T19867] program syz.0.6326 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.267222][ T6826] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 218.275470][ T6826] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 218.283019][ T6826] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 218.290673][ T6826] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 218.298083][ T6826] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 218.306231][ T6826] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 218.314053][ T6826] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 218.321650][ T6826] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 218.329200][ T6826] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 218.337275][ T6826] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 218.344760][ T6826] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 218.352264][ T6826] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 218.360541][ T6826] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 218.368093][ T6826] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 218.375892][ T6826] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 218.383478][ T6826] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 218.391864][ T6826] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 218.399336][ T6826] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 218.406878][ T6826] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 218.414917][ T6826] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 218.422433][ T6826] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 218.429898][ T6826] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 218.437324][ T6826] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 218.445459][ T6826] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 218.452962][ T6826] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 218.460366][ T6826] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 218.467793][ T6826] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 218.475863][ T6826] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 218.484193][ T6826] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 218.796099][T19924] xt_CT: No such helper "snmp_trap" [ 218.804075][T19927] block device autoloading is deprecated and will be removed. [ 218.837977][T19933] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6351'. [ 218.886563][T19941] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6358'. [ 218.945201][T19950] loop1: detected capacity change from 0 to 2048 [ 218.957332][T19950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.992102][T14358] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.017201][T19958] loop1: detected capacity change from 0 to 128 [ 219.024180][T19958] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 219.031408][T19960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6364'. [ 219.044021][T19958] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 219.088478][T14358] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 219.274587][T19989] ref_ctr_offset mismatch. inode: 0xefb offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x2000000004c0 [ 219.321046][T19994] IPv6: NLM_F_CREATE should be specified when creating new route [ 219.380422][T19999] loop1: detected capacity change from 0 to 128 [ 219.391007][T19999] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 219.422980][T14358] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 219.483869][T20009] netlink: 'syz.1.6385': attribute type 13 has an invalid length. [ 219.559608][T20019] loop1: detected capacity change from 0 to 164 [ 219.567063][T20019] iso9660: Unknown parameter '18446744073709551615' [ 219.665796][T20031] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 219.711395][T20039] loop7: detected capacity change from 0 to 512 [ 219.712179][T20033] SELinux: failed to load policy [ 219.725366][T20039] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 219.759543][T20039] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.6400: Failed to acquire dquot type 0 [ 219.778825][T20045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.781241][T20049] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6402'. [ 219.787956][T20045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.790920][T20039] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 219.823218][T20039] EXT4-fs (loop7): 1 truncate cleaned up [ 219.829625][T20039] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.862281][T13772] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.902281][T20059] loop1: detected capacity change from 0 to 512 [ 219.909461][T20059] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 219.929768][T20059] EXT4-fs (loop1): 1 truncate cleaned up [ 219.936185][T20059] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.081940][T14358] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.136644][T20079] SELinux: security policydb version 18 (MLS) not backwards compatible [ 220.153285][T20079] SELinux: failed to load policy [ 220.221940][T20086] loop1: detected capacity change from 0 to 8192 [ 220.241467][T20090] $H: renamed from bond0 (while UP) [ 220.250415][T20090] $H: entered promiscuous mode [ 220.255497][T20090] bond_slave_0: entered promiscuous mode [ 220.261400][T20090] bond_slave_1: entered promiscuous mode [ 220.346123][T20104] loop7: detected capacity change from 0 to 164 [ 220.365344][T20104] Unable to read rock-ridge attributes [ 220.372557][T20104] Unable to read rock-ridge attributes [ 220.527624][T20131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6442'. [ 220.622163][T20146] random: crng reseeded on system resumption [ 220.670950][T20150] loop9: detected capacity change from 0 to 128 [ 220.682751][T20139] loop1: detected capacity change from 0 to 512 [ 220.707004][T20139] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 220.770287][T20139] EXT4-fs (loop1): 1 truncate cleaned up [ 220.790037][T20139] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.973110][T20139] ================================================================== [ 220.981243][T20139] BUG: KCSAN: data-race in xas_clear_mark / xas_find_marked [ 220.988566][T20139] [ 220.990900][T20139] read-write to 0xffff88812d9d5908 of 8 bytes by task 20176 on cpu 0: [ 220.999060][T20139] xas_clear_mark+0x91/0x180 [ 221.003687][T20139] __folio_start_writeback+0x2e7/0x430 [ 221.009164][T20139] ext4_bio_write_folio+0x590/0x9d0 [ 221.014390][T20139] mpage_process_page_bufs+0x46c/0x5b0 [ 221.019863][T20139] mpage_prepare_extent_to_map+0x775/0xb80 [ 221.025709][T20139] ext4_do_writepages+0x6eb/0x2270 [ 221.030859][T20139] ext4_writepages+0x176/0x300 [ 221.035649][T20139] do_writepages+0x1d2/0x480 [ 221.040270][T20139] filemap_write_and_wait_range+0x144/0x340 [ 221.046201][T20139] kiocb_write_and_wait+0x7a/0x110 [ 221.051357][T20139] __iomap_dio_rw+0x52f/0x1250 [ 221.056136][T20139] iomap_dio_rw+0x40/0x90 [ 221.060655][T20139] ext4_file_read_iter+0x20f/0x290 [ 221.065808][T20139] copy_splice_read+0x3c4/0x5f0 [ 221.070682][T20139] splice_direct_to_actor+0x290/0x680 [ 221.076067][T20139] do_splice_direct+0xda/0x150 [ 221.080863][T20139] do_sendfile+0x380/0x640 [ 221.085372][T20139] __x64_sys_sendfile64+0x105/0x150 [ 221.090601][T20139] x64_sys_call+0xb39/0x2fb0 [ 221.095205][T20139] do_syscall_64+0xd0/0x1a0 [ 221.099722][T20139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.105624][T20139] [ 221.107947][T20139] read to 0xffff88812d9d5908 of 8 bytes by task 20139 on cpu 1: [ 221.115580][T20139] xas_find_marked+0x218/0x620 [ 221.120355][T20139] find_get_entry+0x5d/0x380 [ 221.124961][T20139] filemap_get_folios_tag+0x92/0x210 [ 221.130260][T20139] mpage_prepare_extent_to_map+0x330/0xb80 [ 221.136096][T20139] ext4_do_writepages+0x6eb/0x2270 [ 221.141219][T20139] ext4_writepages+0x176/0x300 [ 221.145989][T20139] do_writepages+0x1d2/0x480 [ 221.150587][T20139] file_write_and_wait_range+0x156/0x2c0 [ 221.156232][T20139] generic_buffers_fsync_noflush+0x45/0x120 [ 221.162137][T20139] ext4_sync_file+0x1ab/0x690 [ 221.166836][T20139] vfs_fsync_range+0x10a/0x130 [ 221.171613][T20139] ext4_buffered_write_iter+0x34f/0x3c0 [ 221.177176][T20139] ext4_file_write_iter+0x383/0xf00 [ 221.182389][T20139] iter_file_splice_write+0x5ef/0x970 [ 221.187770][T20139] direct_splice_actor+0x153/0x2a0 [ 221.192889][T20139] splice_direct_to_actor+0x30f/0x680 [ 221.198269][T20139] do_splice_direct+0xda/0x150 [ 221.203044][T20139] do_sendfile+0x380/0x640 [ 221.207462][T20139] __x64_sys_sendfile64+0x105/0x150 [ 221.212679][T20139] x64_sys_call+0xb39/0x2fb0 [ 221.217282][T20139] do_syscall_64+0xd0/0x1a0 [ 221.221800][T20139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.227703][T20139] [ 221.230028][T20139] value changed: 0x000000000000fc00 -> 0x0000000000000000 [ 221.237133][T20139] [ 221.239459][T20139] Reported by Kernel Concurrency Sanitizer on: [ 221.245630][T20139] CPU: 1 UID: 0 PID: 20139 Comm: syz.1.6445 Tainted: G W 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(voluntary) [ 221.259706][T20139] Tainted: [W]=WARN [ 221.263523][T20139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 221.273581][T20139] ================================================================== [ 221.390290][T14358] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.