last executing test programs: 1m9.583676606s ago: executing program 32 (id=949): sched_setscheduler(0x0, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendfile(r0, r0, 0x0, 0x40000f63c) 1m1.004428629s ago: executing program 4 (id=1220): sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) syz_read_part_table(0x60d, &(0x7f0000002240)="$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") r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r0, 0x0, 0x69) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 1m0.834087941s ago: executing program 4 (id=1224): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) io_pgetevents(0x0, 0xdd, 0x0, 0x0, 0x0, 0x0) 1m0.757538192s ago: executing program 4 (id=1228): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x9) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdc00}, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}}, 0x0) 1m0.681298394s ago: executing program 4 (id=1235): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2800418, &(0x7f0000000280), 0xfe, 0x278, &(0x7f00000006c0)="$eJzs3U9oHFUcB/Df7B/zb9GoF1H8AyKigRBvghe9KAREgoigQkTEkyRCNHjLevLiQc8qOfUSSm9Neyy9hF4KvaZtDumlh4YeGnpoD1t2Zxc2u5uk2c3uNjufD2xm3rw383Zhvm+HsPMmgMyajoiPIyIfETMRUYyIpLnBW+lrul5cn9hajKhUvryf1Nql5VRjv6mIKEfEhxGFRt3q5re7D7c/e/ev34rvnNv8ZmIAHy3fumFvd+fz/f+/+PPi/Aerufq2Un3Z/DlO0asvdNhYSCJe6kNnz4qkMOx3wNNY+P3CzWpIXo6It2v5L0auHtm/V567Woz3/zts33/u3XhtkO8VOH2VSrH6HViuAJmTq10DJ7XL4XQ9l5udTa/hb+Uncz8vr/w689NyfunHYY9UwGkpRex8enns0lQ9/7P1/N/Np/kHzq7kmPpq/r9a2LhdXd9v+08ZMJJeTxfV/M98v/ZeyD9kjvxDdsk/jIRSlzvJP5x1XWZX/mG0nORnl/IP2SX/MMKKjZVyx2r5h+xqzv/0UQ0HcaceMFC+/yG7mvMPAGRLZWzYdyADwzLs8QcAAAAAAAAAAAAAAAAAAGi3PrG12HgNqs9r/0bsfZJOXN7ef772POKI8drfyQfJgfnNkxPOd97Jd2/2eIAene//3deVsYPl8ebC83f63v+Rrr/Rn+P+cbB46AyWa0sR5WrjuUKh/fxL6udf9148pr74Q48dnFDrM4E/+nqw/bd6vDHc/ue3I65Ux5+5TuNPLl6pLVvHn/SsKDVPsdylXx71eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG5kkAAAD//7S3ads=") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x201000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xa) 1m0.521983665s ago: executing program 4 (id=1239): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x112, &(0x7f0000000300)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0xdc, 0x2b, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x81}, {[@srh={0x0, 0xe, 0x4, 0x7, 0x6, 0x40, 0x86, [@mcast2, @private0, @ipv4={'\x00', '\xff\xff', @multicast2}, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @loopback={0xfe80000000000000}]}], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82f63de64fe9e2ee11028289aefdb3449391a823213e6347519148a7949bb108", "402fa83b1d661c18462075368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) 1m0.285786588s ago: executing program 33 (id=1243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x10, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d697400"], 0x118}}, 0x0) 58.981844266s ago: executing program 4 (id=1267): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000200000000001200000085000000230000003f0000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000090000000000000000000100000a88000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000005400048050"], 0xb0}}, 0x0) 58.981383426s ago: executing program 34 (id=1267): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000200000000001200000085000000230000003f0000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000090000000000000000000100000a88000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000005400048050"], 0xb0}}, 0x0) 27.609485528s ago: executing program 5 (id=2857): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0xa, 0x1, 0x106) fcntl$lock(r2, 0x7, &(0x7f0000000200)={0x1, 0x2, 0x7fff, 0x8, 0xffffffffffffffff}) close(r2) 27.606164587s ago: executing program 5 (id=2859): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003500)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd4d, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='netlink_extack\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002ec0)=@deltfilter={0x38, 0x2d, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xa, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x0) 27.586442128s ago: executing program 5 (id=2861): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f00000002c0)=[{r0, 0x2402}], 0x1, 0x83a4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) fcntl$setpipe(r0, 0x407, 0x0) 26.735362559s ago: executing program 5 (id=2928): fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x1818c42, &(0x7f0000000d80)=ANY=[], 0xfe, 0x27a, &(0x7f0000000540)="$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") r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x41282200, 0x0, 0x0, 0x0, 0x0, 0x0) 26.465841852s ago: executing program 5 (id=2935): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002600000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000240)='\x00', 0x1, 0x800, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, 0x14) 26.303995925s ago: executing program 5 (id=2943): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, r2, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x24}}, 0x0) 26.253524555s ago: executing program 35 (id=2943): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, r2, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x24}}, 0x0) 22.039841981s ago: executing program 3 (id=3123): syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @broadcast}, 0x10) 21.166877352s ago: executing program 3 (id=3173): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000080)=0x9, 0x4) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r1, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/66, 0x42}, 0xd58}], 0x1, 0x0, 0x0) 21.149702152s ago: executing program 3 (id=3174): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x8000}, 0x18) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) bind$can_raw(r0, &(0x7f0000000080), 0x10) 21.131327673s ago: executing program 3 (id=3177): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000700)={[{@nouid32}, {@grpjquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@bsdgroups}]}, 0x3, 0x56a, &(0x7f0000001900)="$eJzs3c1rHOUfAPDvbHb7/vs1hVJURAI9WKndNIkvFTzUo2ixoPe6JNNQsumW7KY0sWB7sBcvUgQRC+Jd7x6L/4B/RUELRUrQg5fIbGbTbXc3b900affzgWmfZ2aSZ77zzPfJMzu7bAADayT7pxDxckR8k0QcbttWjHzjyMp+Sw+vT2ZLEsvLn/6VRJKva+2f5P8fzCsvRcRvX0WcLHS2W19YnKlUq+lcXh9tzF4ZrS8snro0W5lOp9PL4xMTZ96eGH/v3Xf6Fusb5//5/pO7H575+vjSd7/cP3I7ibNxKN/WHsdTuNFeGYmR/JyU4uwTO471obHdJNnpA2BLhvI8L0U2BhwutbIeePF9GRHLwIBKNpn/e40X8IJozQNa9/Z9ug9+bjz4YOUGqDP+4sprI7GveW90YCl57M4ou98d7kP7WRu//nnndrZE/16HAFjXjZsRcbpY7Bz/knz827rTG9jnyTaMf/Ds3M3mP292m/8UVuc/0WX+c7BL7m7FyGoLKzrzv3C/D830lM3/3u86/119aDU8lNf+15zzlZKLl6ppNrb9PyJORGlvVl/rec6ZpXvLvba1z/+yJWu/NRfMj+N+ce/jPzNVaVSeJuZ2D25GvNJ1/pus9n/Spf+z83F+g20cS++81mvb+vFvr+WfIl7v2v+Pnmglaz+fHG1eD6Otq6LT37eO/d6r/Z2OP+v/A2vHP5y0P6+tb76NH/f9m/battXrf0/yWbO8J193rdJozI1F7Ek+7lw//uhnW/XW/ln8J46vPf51u/73R8TnG4z/1tGfX916/Nsri39qU/2/+cK9j774oVf7G+v/t5qlE/majYx/Gz3Apzl3AAAAAAAAsNsUIuJQJIXyarlQKJdX3t9xNA4UqrV64+TF2vzlqWh+VnY4SoXWk+7Dbe+HGMvfD9uqjz9Rn4iIIxHx7dD+Zr08WatO7XTwAAAAAAAAAAAAAAAAAAAAsEsc7PH5/8wfQzt9dMC285XfMLjWzf9+fNMTsCv5+w+DS/7D4JL/MLjkPwwu+Q+DS/7D4JL/MLjkPwAAAAAAAAAAAAAAAAAAAAAAAAAAAPTV+XPnsmV56eH1yaw+dXVhfqZ29dRUWp8pz85Plidrc1fK07XadDUtT9Zm1/t91Vrtyth4zF8bbaT1xmh9YfHCbG3+cuPCpdnKdHohLT2TqAAAAAAAAAAAAAAAAAAAAOD5Ul9YnKlUq+lcnwqFiOjrL1ToKGT9dqPYOs9J7OzxFHfLaVHoa2GnRyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeOS/AAAA//+PnzD5") open(&(0x7f0000000140)='./file1\x00', 0x64842, 0x21) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x1284, 0x1, 0x2, 0x169}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x100847c0, 0x0, 0x1, 0x0, 0x0) 21.052249634s ago: executing program 3 (id=3184): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2010008, &(0x7f00000003c0), 0xff, 0x531, &(0x7f0000000640)="$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") sendmsg$key(r0, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x20000002) 20.794380787s ago: executing program 3 (id=3199): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x88942, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f00000003c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x9, 0x7}]}) 20.771357468s ago: executing program 36 (id=3199): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x88942, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f00000003c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x9, 0x7}]}) 16.409886954s ago: executing program 9 (id=3353): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000600)=[{0x61, 0x1, 0x0, 0x500}]}) 16.313765856s ago: executing program 9 (id=3357): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000180), 0x1, 0x512, &(0x7f0000000c40)="$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") 16.098194969s ago: executing program 9 (id=3364): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x2c, r3, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886) 16.097625659s ago: executing program 9 (id=3367): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@sysvgroups}, {@bh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x0, 0x2]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) 15.779397333s ago: executing program 9 (id=3381): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0x2}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x30800c1, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYBLOB="8e29b5c6d59d9a8fa9f1222c", @ANYRES32, @ANYBLOB="d90f55b2fe87bccaae179697e871353358a10c2f9b664f24e6a9112c9e2e2e3003fa09469b1b", @ANYBLOB], 0x8, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0xffffff7f, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 14.524714119s ago: executing program 9 (id=3452): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002840), 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3122}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) close_range(r0, r1, 0x0) 14.47933071s ago: executing program 37 (id=3452): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002840), 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3122}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) close_range(r0, r1, 0x0) 5.189913642s ago: executing program 2 (id=3808): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000050000000c"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r2, 0x540c) syz_open_dev$tty1(0xc, 0x4, 0x1) 5.189753822s ago: executing program 2 (id=3809): r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x8000000}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) r2 = io_uring_setup(0x3d91, &(0x7f0000000100)={0x0, 0x1db7, 0x400, 0x3, 0x347}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000280)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) 5.189450062s ago: executing program 2 (id=3811): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x3, 0xff) bind$inet6(r1, &(0x7f0000000880)={0xa, 0x80, 0x0, @remote, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r2 = dup2(r1, r1) write$P9_RSTATFS(r2, &(0x7f00000000c0)={0x43, 0x9, 0x0, {0x0, 0xfff, 0x0, 0xffff, 0x0, 0xa7a5, 0x0, 0x3, 0x4a}}, 0x43) 5.165821882s ago: executing program 2 (id=3812): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 5.097896503s ago: executing program 2 (id=3815): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xb98}}, 0x0) 4.649585119s ago: executing program 2 (id=3826): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000c7aa00859d37040e1a8bd30000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES8=r2], 0x20}}, 0x0) 4.629732819s ago: executing program 38 (id=3826): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000c7aa00859d37040e1a8bd30000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES8=r2], 0x20}}, 0x0) 2.000003344s ago: executing program 7 (id=3930): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendfile(r2, r2, 0x0, 0x40000f63c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) 985.136487ms ago: executing program 7 (id=3951): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000140)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x80) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f0000000b40)={0x17c04, r2, 0x800, 0x40eca, 0x8000000000000001, 0x10003}) 943.176717ms ago: executing program 7 (id=3954): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x11, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="a538fb464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}, {0x11, 0x7b, 0x0, @multicast2}}}}}, 0x0) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 915.956088ms ago: executing program 7 (id=3955): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) 872.710529ms ago: executing program 7 (id=3958): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r1}, 0x18) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x20000b) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x60}]}) 747.72583ms ago: executing program 7 (id=3961): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x80800) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20048881, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 645.139082ms ago: executing program 1 (id=3967): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61) io_setup(0x200, &(0x7f0000000200)=0x0) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000}]) 479.819904ms ago: executing program 8 (id=3973): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r2}, 0x14) 450.430374ms ago: executing program 8 (id=3974): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000000)={'HL\x00'}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000207010100000000000000000a0000060c00034000000000000000053400078008000140000000cf080002"], 0x54}}, 0x40010) 416.007575ms ago: executing program 1 (id=3976): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x1, {}, 0xff}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r2, 0x0, {0x0, 0xff, 0x3}, 0xff}, 0x18, &(0x7f0000000180)={0x0}, 0x4, 0x0, 0x0, 0x24000044}, 0x0) 388.556925ms ago: executing program 8 (id=3978): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000000}, 0x0, 0x0, 0x0, 0x6, 0x4}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) write$cgroup_pid(r1, &(0x7f0000000880), 0x12) 357.693225ms ago: executing program 1 (id=3979): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x81) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x70) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x40) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x7e) 339.669416ms ago: executing program 1 (id=3980): sched_setscheduler(0x0, 0x2, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 296.746346ms ago: executing program 1 (id=3983): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000080)={0x0, 0x3000040, 0x8, 0x1b, 0xfe, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f189afae3530db6dd493f28fd988721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef495689092883b902a41cd75387ef6ffbc7d460d5e665f398ff95596dc94ec97003a3db08e500c2fb07e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1f7a1e850ecb3421143c5c4ded0f083a0c524dcf320827266819b6a952db5bc96141b26c54db857edbcbbc81c7af7aadf50bc549974b6401a19cdb130282b955592efa92cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa02863be90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695ef060000001bbe1b649f42f310859122c0d2c1e558dc6586958a28374f386ecf369274e43003a09b5159ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc509254a12cece59181fcb5bad8c24bd9f8f78d17ab01831325501e80d899e9252f99d3a2666343392fda115048e4f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd3330000000000000009a3237aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b5b66ab89d2d6333f699b16db68986ab3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9b647ba812f56a8404755c83e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4173181943d88c0c76d5969e2043db5bd77fd60ba0f012139929ccfec965c1f769785a4d23332d71f0875e3146afef5b20c4306d3ecee65944fe9829e0ad0c3f6bb2fdc1bc31152538db50f47dc38ba908a0d808687e478a609fe0daa0000000000000000e7f2e98597e27f3e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d4794ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e8fd4e71929f918b98c4cbfcb11a90139264a9ee807c973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d174d2465380b1a00ddc42915e4f3a5db640600000095a3d63904c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e04c93a5470774975b42091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00000000ddffffff00"}) 293.289676ms ago: executing program 1 (id=3985): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x10, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xffff, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x19, 0xb7, 0xdc, {0x7, 0x25, 0x1, 0x1, 0xfa, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x9, 0x40, 0x1, {0x7, 0x25, 0x1, 0x0, 0x81, 0x12}}}}}}}]}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 233.541227ms ago: executing program 0 (id=3988): socket$inet6_mptcp(0xa, 0x1, 0x106) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000896, &(0x7f0000000380)={[{@usrquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200}}]}, 0xff, 0x257, &(0x7f0000000500)="$eJzs3U9oFFccB/DfzO42TbKUtL0USv9AKaUNhPRW6CW9tBAoIZRSaAsppfSiJEJM8JZ48uJBj6KSk5cg3oweJZfgRRE8Rc0hXgQNHgweVFjZnQTyTxOzmx1xPh+YzEzy5v3eMPN9ExaGDaCweiJiICJKEdEbEZWISDY2+DJbetZ2ZzoXRiJqtd8eJ4122X5m/bjuiJiOiB8iYj5N4lA5YnLur+Wni798c3Ki8vWFuT8723qSa1aWl35dPT904vLg95M3bz8cSmIgqpvOq/WSHX5XTiI+Oohib4mknPcI2IvhY5fu1HP/cUR81ch/JdLILt6p8ffmK/HduVcde/rRrU/bOVag9Wq1Sv0ZOF0DCieNiGokaV9EZNtp2teX/Q9/t9SVHh4bP9r7/9jE6H95z1RAq1Qjln6+2nGle0v+H5Sy/APvqOxDqaXfh2fv1TdWS3kPCGiLz7JV/fnf+8/UtyH/UDjyD8Ul/1Bc8g/FJf9QXPIPxSX/UFzyD8Ul/1Bc+87/mRcHNyigLTbmHwAollrHvt4abv2LyEDb5T3/AAAAAAAAAAAAAAAAAAAA2810LoysL63psbxri+tnI1Z+yppur19qfB9xxPuNn11Pkk09Jnuq8Hp/f9FkB026mPPb1x/cz7f+jc/zrT81GjF9PCL6y+Xt91+ydv/t34e7/L3yb5MF3lCyZf/HP9pbf6vns/nWH1yMuFaff/p3mn/S+KSx3nn+qdavX5P1jzxrsgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa5mUAAAD//7FLbdg=") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t r'], 0x27) 193.551188ms ago: executing program 0 (id=3990): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000300)=0x3) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000004c0)='\x00!G', 0x3}], 0x1, 0x0, 0x0) 175.455408ms ago: executing program 6 (id=3991): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1d7) sendfile(r2, r2, 0x0, 0xfffe80) 152.931218ms ago: executing program 6 (id=3992): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000080), &(0x7f0000000340)='%pB \x00'}, 0x20) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="1441c05465f0006fc8afa8e40800", 0xe, 0x4000000, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 139.107268ms ago: executing program 6 (id=3993): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x200, 0x0, @remote, 0xb}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd60003a0400303afffe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) 124.893858ms ago: executing program 0 (id=3994): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x1ff, 0x1}}) 123.346798ms ago: executing program 6 (id=3995): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 65.840229ms ago: executing program 0 (id=3996): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) 65.569459ms ago: executing program 6 (id=3997): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 65.372309ms ago: executing program 8 (id=3998): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000840)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000841, 0x0, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x80402, 0x0) write$cgroup_int(r2, 0x0, 0x2) 59.395689ms ago: executing program 6 (id=3999): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r0}, 0x18) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000280)=0x13) poll(&(0x7f0000000180)=[{r1, 0xc140}], 0x1, 0xe7f1) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0xa) 43.41803ms ago: executing program 8 (id=4000): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 27.026079ms ago: executing program 0 (id=4001): socket(0x10, 0x803, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x2}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x80, 0x400000000000, 0x3ff, 0x0, 0x0, 0xfffb}) msgsnd(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="030000"], 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x800000000000000, 0x7, 0x2, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 231.45µs ago: executing program 8 (id=4011): socket(0x10, 0x803, 0x0) r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) r1 = syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x105cc6, 0x0, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 0s ago: executing program 0 (id=4002): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x55) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x2}]}) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): EXT4-fs warning (device loop5): dx_probe:851: Enable large directory feature to access it [ 79.078597][ T7654] EXT4-fs warning (device loop5): dx_probe:936: inode #2: comm syz.5.1730: Corrupt directory, running e2fsck is recommended [ 79.092358][ T7654] EXT4-fs warning (device loop5): dx_probe:848: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 79.103918][ T7654] EXT4-fs warning (device loop5): dx_probe:851: Enable large directory feature to access it [ 79.114118][ T7654] EXT4-fs warning (device loop5): dx_probe:936: inode #2: comm syz.5.1730: Corrupt directory, running e2fsck is recommended [ 79.130745][ T7657] loop2: detected capacity change from 0 to 512 [ 79.138293][ T7654] EXT4-fs warning (device loop5): dx_probe:848: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 79.149827][ T7654] EXT4-fs warning (device loop5): dx_probe:851: Enable large directory feature to access it [ 79.160137][ T7654] EXT4-fs warning (device loop5): dx_probe:936: inode #2: comm syz.5.1730: Corrupt directory, running e2fsck is recommended [ 79.177741][ T7654] EXT4-fs warning (device loop5): dx_probe:848: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 79.191617][ T7657] EXT4-fs (loop2): 1 orphan inode deleted [ 79.198132][ T7657] ext4 filesystem being mounted at /376/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.208703][ T7664] loop7: detected capacity change from 0 to 1024 [ 79.209917][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1 [ 79.228173][ T7664] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 79.228782][ T7663] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1733'. [ 79.239147][ T7664] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 79.276626][ T7664] JBD2: no valid journal superblock found [ 79.282471][ T7664] EXT4-fs (loop7): Could not load journal inode [ 79.393881][ T7687] loop7: detected capacity change from 0 to 2048 [ 79.402823][ T7690] netlink: 'syz.3.1747': attribute type 21 has an invalid length. [ 79.410861][ T7690] netlink: 'syz.3.1747': attribute type 1 has an invalid length. [ 79.418728][ T7690] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1747'. [ 79.460766][ T7687] loop7: p1 < > p4 [ 79.464728][ T7700] loop3: detected capacity change from 0 to 512 [ 79.467157][ T7687] loop7: p4 size 8388608 extends beyond EOD, truncated [ 79.501458][ T7700] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 79.516560][ T7700] EXT4-fs (loop3): mount failed [ 79.544789][ T7710] loop3: detected capacity change from 0 to 512 [ 79.551804][ T7710] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 79.560925][ T7710] EXT4-fs (loop3): orphan cleanup on readonly fs [ 79.567653][ T7710] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1756: bg 0: block 248: padding at end of block bitmap is not set [ 79.582343][ T7710] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.1756: Failed to acquire dquot type 1 [ 79.594002][ T7710] EXT4-fs (loop3): 1 truncate cleaned up [ 79.601756][ T7710] EXT4-fs error (device loop3): __ext4_remount:6738: comm syz.3.1756: Abort forced by user [ 79.611959][ T7710] EXT4-fs (loop3): Remounting filesystem read-only [ 79.618647][ T7710] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 79.628723][ T7716] SELinux: syz.7.1757 (7716) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 79.775148][ T7729] loop3: detected capacity change from 0 to 512 [ 79.792185][ T7729] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 79.819310][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 79.819325][ T29] audit: type=1400 audit(1745799012.816:1900): avc: denied { read } for pid=7724 comm="syz.7.1761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 79.847147][ T7729] EXT4-fs (loop3): 1 truncate cleaned up [ 79.960845][ T7733] loop3: detected capacity change from 0 to 512 [ 79.967597][ T7733] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 79.981360][ T7733] EXT4-fs (loop3): 1 truncate cleaned up [ 79.995345][ T7733] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2798: inode #15: comm syz.3.1763: corrupted xattr block 33: invalid header [ 80.010453][ T7733] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.1763: corrupted xattr block 33: invalid header [ 80.024148][ T7733] EXT4-fs warning (device loop3): ext4_evict_inode:279: xattr delete (err -117) [ 80.095418][ T7740] loop7: detected capacity change from 0 to 1024 [ 80.111536][ T29] audit: type=1400 audit(1745799013.106:1901): avc: denied { rename } for pid=7739 comm="syz.7.1766" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 80.155193][ T29] audit: type=1400 audit(1745799013.106:1902): avc: denied { setattr } for pid=7739 comm="syz.7.1766" path="/107/file1/file1" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 80.180472][ T29] audit: type=1326 audit(1745799013.176:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7672 comm="syz.6.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9ee4e969 code=0x7fc00000 [ 80.216041][ T7745] loop3: detected capacity change from 0 to 256 [ 80.248483][ T7751] No such timeout policy "syz0" [ 80.287296][ T7758] loop5: detected capacity change from 0 to 512 [ 80.302172][ T7758] EXT4-fs (loop5): 1 orphan inode deleted [ 80.319336][ T7766] loop3: detected capacity change from 0 to 512 [ 80.325751][ T12] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 80.326758][ T7758] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.335493][ T12] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1 [ 80.347189][ T7766] EXT4-fs: Ignoring removed bh option [ 80.365600][ T7766] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 80.393757][ T7766] EXT4-fs (loop3): 1 truncate cleaned up [ 80.413703][ T7774] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1778'. [ 80.426969][ T7774] vlan2: entered promiscuous mode [ 80.432115][ T7774] veth1_to_hsr: entered promiscuous mode [ 80.439412][ T7777] loop2: detected capacity change from 0 to 164 [ 80.446688][ T7777] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 80.455755][ T7777] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 80.465238][ T7777] rock: directory entry would overflow storage [ 80.471528][ T7777] rock: sig=0x4f50, size=4, remaining=3 [ 80.477243][ T7777] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 80.478252][ T7779] netlink: 452 bytes leftover after parsing attributes in process `syz.6.1782'. [ 80.563014][ T29] audit: type=1400 audit(1745799013.556:1904): avc: denied { accept } for pid=7788 comm="syz.6.1786" lport=46643 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.586119][ T29] audit: type=1400 audit(1745799013.556:1905): avc: denied { setopt } for pid=7788 comm="syz.6.1786" lport=46643 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 80.611448][ T7791] loop3: detected capacity change from 0 to 4096 [ 80.632628][ T7796] netlink: 'syz.6.1799': attribute type 13 has an invalid length. [ 80.641451][ T7796] netlink: 24859 bytes leftover after parsing attributes in process `syz.6.1799'. [ 80.655625][ T7800] loop5: detected capacity change from 0 to 128 [ 80.655639][ T7791] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 80.685543][ T7802] loop2: detected capacity change from 0 to 128 [ 80.700244][ T7802] ext4 filesystem being mounted at /388/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 80.734193][ T7805] loop5: detected capacity change from 0 to 164 [ 80.749489][ T7805] Unable to read rock-ridge attributes [ 80.756678][ T7805] Unable to read rock-ridge attributes [ 80.757866][ T7808] loop3: detected capacity change from 0 to 512 [ 80.764957][ T7809] netlink: 'syz.6.1793': attribute type 21 has an invalid length. [ 80.770432][ T29] audit: type=1400 audit(1745799013.746:1906): avc: denied { create } for pid=7807 comm="syz.3.1795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 80.776315][ T7809] netlink: 'syz.6.1793': attribute type 1 has an invalid length. [ 80.803782][ T7809] netlink: 144 bytes leftover after parsing attributes in process `syz.6.1793'. [ 80.831038][ T7808] EXT4-fs (loop3): orphan cleanup on readonly fs [ 80.837626][ T7808] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1795: bad orphan inode 13 [ 80.850384][ T7808] ext4_test_bit(bit=12, block=18) = 1 [ 80.855846][ T7808] is_bad_inode(inode)=0 [ 80.860057][ T7808] NEXT_ORPHAN(inode)=2130706432 [ 80.864940][ T7808] max_ino=32 [ 80.868129][ T7808] i_nlink=1 [ 80.879201][ T29] audit: type=1400 audit(1745799013.866:1907): avc: denied { connect } for pid=7807 comm="syz.3.1795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 80.923682][ T7821] loop6: detected capacity change from 0 to 512 [ 80.950792][ T7828] tipc: Started in network mode [ 80.955713][ T7828] tipc: Node identity ac14140f, cluster identity 4711 [ 80.962755][ T7828] tipc: New replicast peer: 0.0.0.0 [ 80.962925][ T7821] Quota error (device loop6): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 80.968272][ T7828] tipc: Enabled bearer , priority 10 [ 80.978253][ T7821] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 81.007998][ T7832] xt_hashlimit: max too large, truncated to 1048576 [ 81.009135][ T7828] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1802'. [ 81.051319][ T7834] loop2: detected capacity change from 0 to 4096 [ 81.089437][ T7834] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 81.180102][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1817'. [ 81.224900][ T7867] syzkaller1: entered promiscuous mode [ 81.230539][ T7867] syzkaller1: entered allmulticast mode [ 81.237054][ T7871] netlink: 8 bytes leftover after parsing attributes in process `¬í'. [ 81.259056][ T7874] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 81.267254][ T7874] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 81.303299][ T7880] loop5: detected capacity change from 0 to 512 [ 81.310166][ T7877] loop7: detected capacity change from 0 to 4096 [ 81.317158][ T7881] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1828'. [ 81.345112][ T7877] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 81.355457][ T7880] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 81.374368][ T7880] EXT4-fs (loop5): mount failed [ 81.427062][ T7898] loop6: detected capacity change from 0 to 512 [ 81.458682][ T7903] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1836'. [ 81.473635][ T7898] EXT4-fs (loop6): 1 orphan inode deleted [ 81.480871][ T7898] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.495169][ T51] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 1 [ 81.547668][ T7911] loop2: detected capacity change from 0 to 512 [ 81.575548][ T7915] loop3: detected capacity change from 0 to 128 [ 81.576819][ T7911] EXT4-fs: Ignoring removed oldalloc option [ 81.594279][ T7915] EXT4-fs: Ignoring removed nobh option [ 81.613578][ T7915] ext4 filesystem being mounted at /410/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 81.621311][ T7911] EXT4-fs error (device loop2): ext4_quota_enable:7126: inode #4: comm syz.2.1841: unexpected EA_INODE flag [ 81.639598][ T7911] EXT4-fs error (device loop2): ext4_quota_enable:7129: comm syz.2.1841: Bad quota inode: 4, type: 1 [ 81.686065][ T7911] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 81.713604][ T7911] EXT4-fs (loop2): mount failed [ 81.721921][ T7929] loop6: detected capacity change from 0 to 512 [ 81.742828][ T7929] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 81.767906][ T7929] EXT4-fs (loop6): orphan cleanup on readonly fs [ 81.768913][ T7935] bond0: entered promiscuous mode [ 81.779326][ T7935] bond_slave_0: entered promiscuous mode [ 81.781728][ T7929] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1849: bg 0: block 248: padding at end of block bitmap is not set [ 81.785085][ T7935] bond_slave_1: entered promiscuous mode [ 81.808684][ T7929] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.1849: Failed to acquire dquot type 1 [ 81.833241][ T7943] netlink: 'syz.3.1854': attribute type 10 has an invalid length. [ 81.835196][ T7929] EXT4-fs (loop6): 1 truncate cleaned up [ 81.847035][ T7935] batadv0: entered promiscuous mode [ 81.853125][ T7935] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 81.860776][ T7935] Cannot create hsr debugfs directory [ 81.866481][ T7935] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 81.874031][ T7929] EXT4-fs error (device loop6): __ext4_remount:6738: comm syz.6.1849: Abort forced by user [ 81.884198][ T7935] bond0: left promiscuous mode [ 81.885432][ T7929] EXT4-fs (loop6): Remounting filesystem read-only [ 81.889056][ T7935] bond_slave_0: left promiscuous mode [ 81.889177][ T7935] bond_slave_1: left promiscuous mode [ 81.895582][ T7929] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 81.914405][ T7935] batadv0: left promiscuous mode [ 81.923879][ T7943] ipvlan0: entered allmulticast mode [ 81.929248][ T7943] veth0_vlan: entered allmulticast mode [ 81.936256][ T7943] team0: Device ipvlan0 failed to register rx_handler [ 81.956015][ T7948] loop6: detected capacity change from 0 to 128 [ 82.036736][ T7960] pim6reg: entered allmulticast mode [ 82.046195][ T7966] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 82.056157][ T7960] pim6reg: left allmulticast mode [ 82.069458][ T7964] team_slave_0: entered promiscuous mode [ 82.075183][ T7964] team_slave_1: entered promiscuous mode [ 82.086439][ T7964] macsec1: entered promiscuous mode [ 82.091686][ T7964] team0: entered promiscuous mode [ 82.098337][ T7964] team0: left promiscuous mode [ 82.103390][ T7964] team_slave_0: left promiscuous mode [ 82.108848][ T7964] team_slave_1: left promiscuous mode [ 82.114306][ T3382] tipc: Node number set to 2886997007 [ 82.231156][ T7988] loop3: detected capacity change from 0 to 512 [ 82.238037][ T7988] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 82.255029][ T7988] EXT4-fs (loop3): orphan cleanup on readonly fs [ 82.262056][ T7988] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.1875: Block bitmap for bg 0 marked uninitialized [ 82.276245][ T7988] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 82.287519][ T7988] EXT4-fs (loop3): 1 orphan inode deleted [ 82.318203][ T7999] loop5: detected capacity change from 0 to 256 [ 82.406749][ T8016] loop5: detected capacity change from 0 to 512 [ 82.414764][ T8016] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.438697][ T8021] xt_hashlimit: max too large, truncated to 1048576 [ 82.452647][ T8016] EXT4-fs (loop5): orphan cleanup on readonly fs [ 82.475060][ T8016] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1887: bg 0: block 248: padding at end of block bitmap is not set [ 82.500580][ T8016] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.1887: Failed to acquire dquot type 1 [ 82.513165][ T8016] EXT4-fs (loop5): 1 truncate cleaned up [ 82.527744][ T8016] EXT4-fs error (device loop5): __ext4_remount:6738: comm syz.5.1887: Abort forced by user [ 82.548083][ T8016] EXT4-fs (loop5): Remounting filesystem read-only [ 82.554638][ T8016] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 82.588536][ T8036] loop5: detected capacity change from 0 to 164 [ 82.603950][ T8036] syz.5.1896: attempt to access beyond end of device [ 82.603950][ T8036] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 82.620234][ T8036] syz.5.1896: attempt to access beyond end of device [ 82.620234][ T8036] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 82.647688][ T8038] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.654861][ T8038] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.726906][ T8048] SELinux: unknown common r [ 82.732332][ T8048] SELinux: failed to load policy [ 82.738350][ T8038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.751728][ T8038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.792497][ T8038] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.801428][ T8038] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.810317][ T8038] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.819401][ T8038] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.978089][ T8081] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 83.136998][ T8119] atomic_op ffff88811aa78928 conn xmit_atomic 0000000000000000 [ 83.142598][ T8117] loop2: detected capacity change from 0 to 4096 [ 83.272373][ T8130] loop3: detected capacity change from 0 to 8192 [ 83.318803][ T8141] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 83.368345][ T8152] loop2: detected capacity change from 0 to 128 [ 83.377338][ T8152] ext4 filesystem being mounted at /423/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.648303][ T8193] loop3: detected capacity change from 0 to 164 [ 83.670591][ T8193] syz.3.1969: attempt to access beyond end of device [ 83.670591][ T8193] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 83.691316][ T8193] syz.3.1969: attempt to access beyond end of device [ 83.691316][ T8193] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 83.780759][ T8202] loop2: detected capacity change from 0 to 2048 [ 83.808778][ T8202] loop2: p1 < > p4 [ 83.813075][ T8202] loop2: p4 size 8388608 extends beyond EOD, truncated [ 83.813271][ T8207] loop7: detected capacity change from 0 to 1024 [ 83.826875][ T8207] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 83.837831][ T8207] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 83.850902][ T8207] JBD2: no valid journal superblock found [ 83.856647][ T8207] EXT4-fs (loop7): Could not load journal inode [ 83.945430][ T8217] netlink: 'syz.7.1980': attribute type 29 has an invalid length. [ 83.965220][ T8217] netlink: 'syz.7.1980': attribute type 29 has an invalid length. [ 84.004346][ T8227] loop6: detected capacity change from 0 to 256 [ 84.057057][ T8237] loop6: detected capacity change from 0 to 128 [ 84.064708][ T8237] FAT-fs (loop6): Directory bread(block 162) failed [ 84.071452][ T8237] FAT-fs (loop6): Directory bread(block 163) failed [ 84.078171][ T8237] FAT-fs (loop6): Directory bread(block 164) failed [ 84.084943][ T8237] FAT-fs (loop6): Directory bread(block 165) failed [ 84.091643][ T8237] FAT-fs (loop6): Directory bread(block 166) failed [ 84.098778][ T8237] FAT-fs (loop6): Directory bread(block 167) failed [ 84.105516][ T8237] FAT-fs (loop6): Directory bread(block 168) failed [ 84.112911][ T8237] FAT-fs (loop6): Directory bread(block 169) failed [ 84.121204][ T8237] FAT-fs (loop6): Directory bread(block 162) failed [ 84.127803][ T8237] FAT-fs (loop6): Directory bread(block 163) failed [ 84.134576][ T8237] syz.6.1988: attempt to access beyond end of device [ 84.134576][ T8237] loop6: rw=3, sector=226, nr_sectors = 6 limit=128 [ 84.147893][ T8237] syz.6.1988: attempt to access beyond end of device [ 84.147893][ T8237] loop6: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 84.162453][ T8237] syz.6.1988: attempt to access beyond end of device [ 84.162453][ T8237] loop6: rw=3, sector=234, nr_sectors = 6 limit=128 [ 84.175971][ T8237] syz.6.1988: attempt to access beyond end of device [ 84.175971][ T8237] loop6: rw=2051, sector=240, nr_sectors = 2 limit=128 [ 84.266093][ T8252] sd 0:0:1:0: device reset [ 84.375470][ T8264] loop2: detected capacity change from 0 to 512 [ 84.382691][ T8264] EXT4-fs (loop2): blocks per group (71) and clusters per group (20800) inconsistent [ 84.531191][ T8279] loop2: detected capacity change from 0 to 512 [ 84.541263][ T8279] ext4 filesystem being mounted at /441/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.595545][ T8283] __nla_validate_parse: 18 callbacks suppressed [ 84.595562][ T8283] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2009'. [ 84.689212][ T8296] random: crng reseeded on system resumption [ 84.922345][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 84.922361][ T29] audit: type=1404 audit(1745799017.916:2061): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 84.958617][ T29] audit: type=1400 audit(1745799017.916:2062): avc: denied { write } for pid=8323 comm="syz.5.2030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 84.979187][ T29] audit: type=1400 audit(1745799017.916:2063): avc: denied { write } for pid=8323 comm="syz.5.2030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 84.999971][ T29] audit: type=1400 audit(1745799017.916:2064): avc: denied { write } for pid=8323 comm="syz.5.2030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 85.020832][ T29] audit: type=1400 audit(1745799017.946:2065): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 85.108387][ T29] audit: type=1400 audit(1745799017.956:2066): avc: denied { create } for pid=8327 comm="syz.3.2031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 85.129097][ T29] audit: type=1400 audit(1745799017.956:2067): avc: denied { map_create } for pid=8327 comm="syz.3.2031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 85.148284][ T29] audit: type=1400 audit(1745799017.956:2068): avc: denied { prog_load } for pid=8327 comm="syz.3.2031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 85.167809][ T29] audit: type=1400 audit(1745799017.956:2069): avc: denied { prog_load } for pid=8327 comm="syz.3.2031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 85.186945][ T29] audit: type=1400 audit(1745799017.976:2070): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 85.422604][ T8396] xt_hashlimit: max too large, truncated to 1048576 [ 87.676525][ T8754] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 87.822216][ T8784] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 87.984044][ T8812] SELinux: syz.6.2263 (8812) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 88.119338][ T8841] xt_connbytes: Forcing CT accounting to be enabled [ 88.127400][ T8841] Cannot find set identified by id 0 to match [ 88.289595][ T8867] Cannot find add_set index 0 as target [ 88.408649][ T8881] Falling back ldisc for ttyS3. [ 88.480823][ T8900] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 88.489177][ T8900] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 88.682021][ T8944] tc_dump_action: action bad kind [ 88.811173][ T8974] SELinux: syz.7.2354 (8974) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 89.632561][ T9085] Falling back ldisc for ttyS3. [ 89.732517][ T9108] binfmt_misc: register: failed to install interpreter file ./file0 [ 89.940762][ T29] kauditd_printk_skb: 1559 callbacks suppressed [ 89.940811][ T29] audit: type=1400 audit(1745799022.936:3630): avc: denied { name_bind } for pid=9131 comm="syz.3.2419" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 89.991156][ T29] audit: type=1400 audit(1745799022.936:3631): avc: denied { name_bind } for pid=9131 comm="syz.3.2419" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 90.012995][ T29] audit: type=1400 audit(1745799022.976:3632): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 90.037300][ T29] audit: type=1400 audit(1745799022.976:3633): avc: denied { read write } for pid=6481 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 90.061469][ T29] audit: type=1400 audit(1745799022.976:3634): avc: denied { read } for pid=9133 comm="syz.7.2420" dev="nsfs" ino=4026532404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 90.082725][ T29] audit: type=1400 audit(1745799022.976:3635): avc: denied { open } for pid=9133 comm="syz.7.2420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 90.102041][ T29] audit: type=1400 audit(1745799022.976:3636): avc: denied { prog_load } for pid=9133 comm="syz.7.2420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 90.134082][ T29] audit: type=1400 audit(1745799022.996:3637): avc: denied { map_create } for pid=9135 comm="syz.3.2421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 90.153251][ T29] audit: type=1400 audit(1745799022.996:3638): avc: denied { prog_load } for pid=9135 comm="syz.3.2421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 90.172322][ T29] audit: type=1400 audit(1745799023.056:3639): avc: denied { read write } for pid=6414 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 91.424443][ T9316] binfmt_misc: register: failed to install interpreter file ./file2 [ 91.708786][ T9345] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.2513'. [ 91.745156][ T9335] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.2513'. [ 94.164432][ T9751] loop3: detected capacity change from 0 to 512 [ 94.173314][ T9751] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.181016][ T9751] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 94.212234][ T9758] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2721'. [ 94.225902][ T9751] EXT4-fs (loop3): 1 truncate cleaned up [ 94.270867][ T9768] xt_NFQUEUE: number of total queues is 0 [ 94.287108][ T9770] netlink: 'syz.3.2726': attribute type 21 has an invalid length. [ 94.302524][ T9770] netlink: 'syz.3.2726': attribute type 1 has an invalid length. [ 94.310326][ T9770] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2726'. [ 94.328806][ T9775] program syz.5.2728 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.406360][ T9789] loop2: detected capacity change from 0 to 1024 [ 94.413417][ T9789] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.440611][ T9789] EXT4-fs (loop2): shut down requested (0) [ 94.517442][ T9811] lo speed is unknown, defaulting to 1000 [ 94.523976][ T9811] lo speed is unknown, defaulting to 1000 [ 94.530943][ T9811] lo speed is unknown, defaulting to 1000 [ 94.537063][ T9811] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 94.544806][ T9811] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 94.556665][ T9811] lo speed is unknown, defaulting to 1000 [ 94.564290][ T9811] lo speed is unknown, defaulting to 1000 [ 94.571829][ T9811] lo speed is unknown, defaulting to 1000 [ 94.577975][ T9811] lo speed is unknown, defaulting to 1000 [ 94.584111][ T9811] lo speed is unknown, defaulting to 1000 [ 94.821621][ T9823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.830209][ T9823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.295586][ T9831] netlink: 'syz.7.2755': attribute type 1 has an invalid length. [ 95.309151][ T9831] bond1: entered promiscuous mode [ 95.314354][ T9831] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.328843][ T9831] bond1: (slave bridge1): making interface the new active one [ 95.336484][ T9831] bridge1: entered promiscuous mode [ 95.343203][ T9831] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 95.349757][ T29] kauditd_printk_skb: 1346 callbacks suppressed [ 95.349773][ T29] audit: type=1326 audit(1745799028.346:4986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.6.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9ee4e969 code=0x7ffc0000 [ 95.385094][ T29] audit: type=1326 audit(1745799028.376:4987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.6.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9ee4e969 code=0x7ffc0000 [ 95.408553][ T29] audit: type=1326 audit(1745799028.376:4988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.6.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e9ee4e969 code=0x7ffc0000 [ 95.431969][ T29] audit: type=1326 audit(1745799028.376:4989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.6.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9ee4e969 code=0x7ffc0000 [ 95.455568][ T29] audit: type=1326 audit(1745799028.376:4990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.6.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9ee4e969 code=0x7ffc0000 [ 95.479018][ T29] audit: type=1326 audit(1745799028.376:4991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.6.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e9ee4e969 code=0x7ffc0000 [ 95.502481][ T29] audit: type=1326 audit(1745799028.376:4992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.6.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9ee4e969 code=0x7ffc0000 [ 95.525893][ T29] audit: type=1326 audit(1745799028.376:4993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.6.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9ee4e969 code=0x7ffc0000 [ 95.549354][ T29] audit: type=1326 audit(1745799028.376:4994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.6.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e9ee4e969 code=0x7ffc0000 [ 95.572979][ T29] audit: type=1326 audit(1745799028.576:4995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.6.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9ee4e969 code=0x7ffc0000 [ 95.714083][ T9863] loop2: detected capacity change from 0 to 512 [ 95.741122][ T9869] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2772'. [ 95.773180][ T9863] ext4 filesystem being mounted at /595/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.970618][ T9889] loop7: detected capacity change from 0 to 8192 [ 96.021534][ T9897] lo speed is unknown, defaulting to 1000 [ 96.050782][ T9919] SELinux: syz.6.2795 (9919) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 96.079289][ T9910] lo speed is unknown, defaulting to 1000 [ 96.312722][ T9951] SELinux: Context  is not valid (left unmapped). [ 96.375019][ T9961] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2811'. [ 96.427385][ T9967] loop7: detected capacity change from 0 to 512 [ 96.439853][ T9967] EXT4-fs: Ignoring removed nobh option [ 96.458230][ T9967] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2813: invalid indirect mapped block 256 (level 2) [ 96.504065][ T9967] EXT4-fs (loop7): 2 truncates cleaned up [ 96.537811][ T9980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2820'. [ 96.546772][ T9980] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2820'. [ 96.611370][ T9986] netlink: 'syz.6.2822': attribute type 3 has an invalid length. [ 96.617598][ T9966] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.2813: bg 0: block 5: invalid block bitmap [ 96.634017][ T9966] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 96.646330][ T9966] EXT4-fs (loop7): This should not happen!! Data will be lost [ 96.646330][ T9966] [ 96.656019][ T9966] EXT4-fs (loop7): Total free blocks count 0 [ 96.662039][ T9966] EXT4-fs (loop7): Free/Dirty block details [ 96.667938][ T9966] EXT4-fs (loop7): free_blocks=0 [ 96.672897][ T9966] EXT4-fs (loop7): dirty_blocks=3073 [ 96.678269][ T9966] EXT4-fs (loop7): Block reservation details [ 96.684272][ T9966] EXT4-fs (loop7): i_reserved_data_blocks=3073 [ 96.717474][ T12] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 2048 with error 28 [ 96.730055][ T12] EXT4-fs (loop7): This should not happen!! Data will be lost [ 96.730055][ T12] [ 96.731024][ T9994] SELinux: failed to load policy [ 96.757442][ T9996] tipc: Started in network mode [ 96.762410][ T9996] tipc: Node identity ac14140f, cluster identity 4711 [ 96.778247][ T9996] tipc: New replicast peer: 255.255.255.255 [ 96.784584][ T9996] tipc: Enabled bearer , priority 10 [ 96.823648][T10004] loop5: detected capacity change from 0 to 164 [ 96.844953][T10004] iso9660: Unknown parameter '00000000000000000000004' [ 96.979466][T10027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.990804][T10027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.004220][ T6481] EXT4-fs unmount: 91 callbacks suppressed [ 97.017301][T10025] vhci_hcd: invalid port number 96 [ 97.022478][T10025] vhci_hcd: default hub control req: 6000 vfffc i0060 l0 [ 97.037394][T10029] loop3: detected capacity change from 0 to 8192 [ 97.275312][T10090] bridge0: entered promiscuous mode [ 97.282396][T10090] macvlan0: entered promiscuous mode [ 97.290988][T10090] bridge0: port 3(macvlan0) entered blocking state [ 97.297532][T10090] bridge0: port 3(macvlan0) entered disabled state [ 97.305419][T10090] macvlan0: entered allmulticast mode [ 97.310904][T10090] bridge0: entered allmulticast mode [ 97.317189][T10090] macvlan0: left allmulticast mode [ 97.322387][T10090] bridge0: left allmulticast mode [ 97.328285][T10090] bridge0: left promiscuous mode [ 97.362009][T10102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2875'. [ 97.371381][T10102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2875'. [ 97.441067][T10113] netem: incorrect ge model size [ 97.446033][T10113] netem: change failed [ 97.469816][T10117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2881'. [ 97.478729][T10117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2881'. [ 97.531106][T10120] sd 0:0:1:0: device reset [ 97.661370][T10149] loop2: detected capacity change from 0 to 128 [ 97.668287][T10149] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 97.778418][ T36] tipc: Node number set to 2886997007 [ 97.947126][T10203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.961306][T10203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.048047][T10216] loop5: detected capacity change from 0 to 128 [ 98.197399][T10221] lo speed is unknown, defaulting to 1000 [ 98.292822][T10236] loop6: detected capacity change from 0 to 512 [ 98.299561][T10236] EXT4-fs: Ignoring removed orlov option [ 98.316184][T10236] EXT4-fs error (device loop6): ext4_iget_extra_inode:4693: inode #15: comm syz.6.2937: corrupted in-inode xattr: invalid ea_ino [ 98.331896][T10236] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2937: couldn't read orphan inode 15 (err -117) [ 98.344514][T10236] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.424695][ T6414] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.443282][T10247] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2941'. [ 98.452331][T10247] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2941'. [ 98.562555][T10260] netlink: 'syz.6.2950': attribute type 10 has an invalid length. [ 98.573632][ T31] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.592407][T10264] geneve0: entered allmulticast mode [ 98.641402][ T31] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.670519][T10277] loop3: detected capacity change from 0 to 512 [ 98.684147][ T31] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.727502][T10277] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.2955: Failed to acquire dquot type 1 [ 98.739745][T10277] EXT4-fs (loop3): 1 truncate cleaned up [ 98.744397][T10261] lo speed is unknown, defaulting to 1000 [ 98.745847][T10277] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.767904][T10277] ext4 filesystem being mounted at /640/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.780502][T10277] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.780930][ T31] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.838205][T10261] chnl_net:caif_netlink_parms(): no params data found [ 98.878116][T10300] vcan0: entered allmulticast mode [ 98.885806][T10300] vcan0: left allmulticast mode [ 98.918881][ T31] bridge_slave_1: left allmulticast mode [ 98.924552][ T31] bridge_slave_1: left promiscuous mode [ 98.930224][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.940900][ T31] bridge_slave_0: left allmulticast mode [ 98.946558][ T31] bridge_slave_0: left promiscuous mode [ 98.952281][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.032127][T10311] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2966'. [ 99.041377][T10311] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2966'. [ 99.050371][T10311] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2966'. [ 99.062045][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.073924][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.085955][ T31] bond0 (unregistering): Released all slaves [ 99.094568][T10261] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.101707][T10261] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.110381][T10261] bridge_slave_0: entered allmulticast mode [ 99.116962][T10261] bridge_slave_0: entered promiscuous mode [ 99.127070][T10309] vlan2: entered allmulticast mode [ 99.133944][T10309] dummy0: entered allmulticast mode [ 99.144611][T10261] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.151754][T10261] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.160386][T10261] bridge_slave_1: entered allmulticast mode [ 99.166839][T10261] bridge_slave_1: entered promiscuous mode [ 99.173035][ T31] tipc: Disabling bearer [ 99.178345][ T31] tipc: Left network mode [ 99.196295][T10261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.210340][T10321] loop7: detected capacity change from 0 to 512 [ 99.218084][T10321] EXT4-fs (loop7): orphan cleanup on readonly fs [ 99.225179][T10321] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.2971: bad orphan inode 15 [ 99.229154][T10261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.238987][T10321] ext4_test_bit(bit=14, block=5) = 0 [ 99.252185][T10321] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 99.281828][ T31] hsr_slave_0: left promiscuous mode [ 99.294088][ T31] hsr_slave_1: left promiscuous mode [ 99.300511][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.308201][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.316157][ T6481] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.325618][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.333179][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.344737][ T31] veth1_macvtap: left promiscuous mode [ 99.345862][T10326] Invalid ELF header magic: != ELF [ 99.350659][ T31] veth0_macvtap: left promiscuous mode [ 99.362261][ T31] veth1_vlan: left promiscuous mode [ 99.367536][ T31] veth0_vlan: left promiscuous mode [ 99.484873][ T31] team0 (unregistering): Port device team_slave_1 removed [ 99.495240][ T31] team0 (unregistering): Port device team_slave_0 removed [ 99.551348][T10261] team0: Port device team_slave_0 added [ 99.558104][T10261] team0: Port device team_slave_1 added [ 99.582510][T10261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.589626][T10261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.615627][T10261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.632224][T10261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.639246][T10261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.665164][T10261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.710582][T10261] hsr_slave_0: entered promiscuous mode [ 99.716635][T10261] hsr_slave_1: entered promiscuous mode [ 99.724063][T10261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.731968][T10261] Cannot create hsr debugfs directory [ 99.738574][T10353] Falling back ldisc for ttyS3. [ 99.763936][T10361] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 99.764122][T10358] IPVS: stopping master sync thread 10361 ... [ 99.795042][T10360] netem: change failed [ 99.877792][T10377] loop6: detected capacity change from 0 to 1024 [ 99.887953][T10261] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 99.890202][T10377] EXT4-fs: Ignoring removed orlov option [ 99.916131][T10261] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 99.931708][T10261] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 99.942956][T10377] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 99.955811][T10261] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 99.982145][T10385] loop7: detected capacity change from 0 to 1024 [ 99.987260][T10377] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.020105][T10385] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.052388][T10377] EXT4-fs error (device loop6): ext4_check_all_de:659: inode #12: block 7: comm syz.6.2994: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 100.057371][T10380] lo speed is unknown, defaulting to 1000 [ 100.100939][T10261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.102854][T10385] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.2999: Allocating blocks 497-513 which overlap fs metadata [ 100.127421][T10385] EXT4-fs (loop7): pa ffff8881069c82a0: logic 0, phys. 257, len 16 [ 100.131187][T10261] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.135357][T10385] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 100.153996][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.161090][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.171144][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.178201][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.191781][T10377] EXT4-fs error (device loop6): ext4_read_inline_dir:1501: inode #12: block 7: comm syz.6.2994: path /299/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=132 fake=0 [ 100.224211][ T6481] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.245711][ T6414] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.285097][T10261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.304902][T10407] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3006'. [ 100.380306][ T29] kauditd_printk_skb: 254 callbacks suppressed [ 100.380327][ T29] audit: type=1326 audit(1745799034.375:5248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10418 comm="syz.6.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9ee4e969 code=0x7ffc0000 [ 100.410431][ T29] audit: type=1326 audit(1745799034.375:5249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10418 comm="syz.6.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9ee4e969 code=0x7ffc0000 [ 100.437305][ T29] audit: type=1326 audit(1745799034.435:5250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10418 comm="syz.6.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e9ee4e969 code=0x7ffc0000 [ 100.460927][ T29] audit: type=1326 audit(1745799034.435:5251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10418 comm="syz.6.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9ee4e969 code=0x7ffc0000 [ 100.484434][ T29] audit: type=1326 audit(1745799034.435:5252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10418 comm="syz.6.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9ee4e969 code=0x7ffc0000 [ 100.508193][ T29] audit: type=1326 audit(1745799034.435:5253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10418 comm="syz.6.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e9ee4e969 code=0x7ffc0000 [ 100.531832][ T29] audit: type=1326 audit(1745799034.435:5254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10418 comm="syz.6.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9ee4e969 code=0x7ffc0000 [ 100.555363][ T29] audit: type=1326 audit(1745799034.435:5255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10418 comm="syz.6.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e9ee4e969 code=0x7ffc0000 [ 100.578935][ T29] audit: type=1326 audit(1745799034.435:5256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10418 comm="syz.6.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9ee4e969 code=0x7ffc0000 [ 100.602553][ T29] audit: type=1326 audit(1745799034.435:5257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10418 comm="syz.6.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f1e9ee4e969 code=0x7ffc0000 [ 100.732573][T10261] veth0_vlan: entered promiscuous mode [ 100.738855][T10437] hub 9-0:1.0: USB hub found [ 100.753399][T10261] veth1_vlan: entered promiscuous mode [ 100.765587][T10437] hub 9-0:1.0: 8 ports detected [ 100.783637][T10261] veth0_macvtap: entered promiscuous mode [ 100.793261][T10261] veth1_macvtap: entered promiscuous mode [ 100.805628][T10261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.816230][T10261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.826083][T10261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.836517][T10261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.849042][T10261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.860942][T10261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.871447][T10261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.881351][T10261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.891911][T10261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.901816][T10261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.912278][T10261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.930242][T10261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.937596][T10443] tipc: Started in network mode [ 100.942539][T10443] tipc: Node identity ac14140f, cluster identity 4711 [ 100.950888][T10443] tipc: New replicast peer: 10.1.1.2 [ 100.956543][T10443] tipc: Enabled bearer , priority 10 [ 100.996450][T10261] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.005343][T10261] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.014135][T10261] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.022938][T10261] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.068795][T10447] SELinux: failed to load policy [ 101.199157][T10468] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.207966][T10468] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.216789][T10468] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.225748][T10468] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.495014][T10499] loop3: detected capacity change from 0 to 128 [ 101.573674][T10503] netlink: 'syz.8.3042': attribute type 3 has an invalid length. [ 101.595511][T10508] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10508 comm=syz.7.3045 [ 101.608261][T10508] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10508 comm=syz.7.3045 [ 101.633823][T10503] netlink: 'syz.8.3042': attribute type 3 has an invalid length. [ 101.653451][T10514] loop6: detected capacity change from 0 to 1024 [ 101.675282][T10514] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.690341][T10514] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 101.716782][T10514] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 483 with error 28 [ 101.729223][T10514] EXT4-fs (loop6): This should not happen!! Data will be lost [ 101.729223][T10514] [ 101.738880][T10514] EXT4-fs (loop6): Total free blocks count 0 [ 101.744896][T10514] EXT4-fs (loop6): Free/Dirty block details [ 101.750837][T10514] EXT4-fs (loop6): free_blocks=20480 [ 101.756428][T10514] EXT4-fs (loop6): dirty_blocks=496 [ 101.761657][T10514] EXT4-fs (loop6): Block reservation details [ 101.767663][T10514] EXT4-fs (loop6): i_reserved_data_blocks=31 [ 101.850112][ T51] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 101.898997][T10549] loop6: detected capacity change from 0 to 1024 [ 101.916448][T10549] EXT4-fs: Ignoring removed nobh option [ 101.922063][T10549] EXT4-fs: Ignoring removed bh option [ 101.965139][T10549] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.015757][T10564] loop3: detected capacity change from 0 to 512 [ 102.045238][T10549] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.3061: Allocating blocks 497-513 which overlap fs metadata [ 102.068438][ T3379] tipc: Node number set to 2886997007 [ 102.074924][T10549] EXT4-fs (loop6): pa ffff8881069709a0: logic 1, phys. 321, len 12 [ 102.077930][T10564] EXT4-fs: Mount option(s) incompatible with ext2 [ 102.082917][T10549] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 1, pa_free 2 [ 102.104418][T10549] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 15: block 321:freeing already freed block (bit 20); block bitmap corrupt. [ 102.160440][ T6414] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.231401][T10591] veth1_to_bond: entered allmulticast mode [ 102.251229][T10591] veth1_to_bond: entered promiscuous mode [ 102.257899][T10590] veth1_to_bond: left promiscuous mode [ 102.263603][T10590] veth1_to_bond: left allmulticast mode [ 102.290735][T10595] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 102.371337][T10609] loop3: detected capacity change from 0 to 1024 [ 102.378014][T10609] EXT4-fs: inline encryption not supported [ 102.391622][T10612] SELinux: failed to load policy [ 102.397689][T10609] EXT4-fs: Ignoring removed bh option [ 102.421403][T10609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.501382][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.669733][T10667] SELinux: Context system_u:object_r:load_policy_exec_t:s0 is not valid (left unmapped). [ 102.742625][T10678] __nla_validate_parse: 7 callbacks suppressed [ 102.742641][T10678] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3122'. [ 102.757753][T10678] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3122'. [ 102.784393][T10680] lo speed is unknown, defaulting to 1000 [ 102.835842][T10691] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 102.941948][T10701] SELinux: failed to load policy [ 102.958195][T10708] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3135'. [ 102.984695][T10712] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3137'. [ 103.208067][T10741] loop6: detected capacity change from 0 to 1024 [ 103.220963][T10741] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.233357][T10741] ext4 filesystem being mounted at /346/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.245266][T10741] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 103.260680][T10741] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 1 with error 28 [ 103.273013][T10741] EXT4-fs (loop6): This should not happen!! Data will be lost [ 103.273013][T10741] [ 103.282924][T10741] EXT4-fs (loop6): Total free blocks count 0 [ 103.289031][T10741] EXT4-fs (loop6): Free/Dirty block details [ 103.294941][T10741] EXT4-fs (loop6): free_blocks=4293918720 [ 103.300896][T10741] EXT4-fs (loop6): dirty_blocks=16 [ 103.306113][T10741] EXT4-fs (loop6): Block reservation details [ 103.312152][T10741] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 103.336091][ T6414] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.363070][T10759] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3156'. [ 103.372100][T10759] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3156'. [ 103.379087][T10761] loop8: detected capacity change from 0 to 512 [ 103.392069][T10761] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 103.409290][T10761] EXT4-fs (loop8): 1 truncate cleaned up [ 103.415299][T10761] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.442003][T10261] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.458734][T10772] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3164'. [ 103.468152][T10772] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3164'. [ 103.556181][T10786] bridge0: entered promiscuous mode [ 103.562456][T10786] macvlan2: entered promiscuous mode [ 103.568896][T10786] bridge0: port 3(macvlan2) entered blocking state [ 103.575426][T10786] bridge0: port 3(macvlan2) entered disabled state [ 103.582231][T10786] macvlan2: entered allmulticast mode [ 103.587608][T10786] bridge0: entered allmulticast mode [ 103.593294][T10786] macvlan2: left allmulticast mode [ 103.598416][T10786] bridge0: left allmulticast mode [ 103.604068][T10786] bridge0: left promiscuous mode [ 103.665833][T10804] loop3: detected capacity change from 0 to 1024 [ 103.690022][T10804] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.726049][T10818] sd 0:0:1:0: device reset [ 103.754163][T10820] hub 9-0:1.0: USB hub found [ 103.758571][ T9254] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.759073][T10820] hub 9-0:1.0: 8 ports detected [ 103.810537][T10822] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3186'. [ 103.873771][T10832] lo speed is unknown, defaulting to 1000 [ 103.954372][T10844] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 104.021295][T10855] loop7: detected capacity change from 0 to 512 [ 104.027843][T10855] EXT4-fs: Ignoring removed orlov option [ 104.087733][T10855] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.119415][T10855] ext4 filesystem being mounted at /350/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.223763][ T6481] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.257473][T10859] lo speed is unknown, defaulting to 1000 [ 104.373651][T10885] SELinux: security_context_str_to_sid (ûÿ) failed with errno=-22 [ 104.722635][T10859] chnl_net:caif_netlink_parms(): no params data found [ 104.805054][T10859] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.812235][T10859] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.895051][T10859] bridge_slave_0: entered allmulticast mode [ 104.902916][T10896] netlink: 'syz.6.3214': attribute type 3 has an invalid length. [ 104.925405][T10859] bridge_slave_0: entered promiscuous mode [ 104.947053][T10859] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.954214][T10859] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.990880][T10859] bridge_slave_1: entered allmulticast mode [ 105.007463][T10859] bridge_slave_1: entered promiscuous mode [ 105.039862][T10859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.052451][T10904] rdma_op ffff888103254980 conn xmit_rdma 0000000000000000 [ 105.110810][T10859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.171671][T10859] team0: Port device team_slave_0 added [ 105.186263][T10859] team0: Port device team_slave_1 added [ 105.238883][T10859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.245844][T10859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.271838][T10859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.315368][T10859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.322363][T10859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.348274][T10859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.390465][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 105.390482][ T29] audit: type=1400 audit(1745799039.385:5400): avc: denied { module_request } for pid=10930 comm="syz.6.3230" kmod="block-major-0-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 105.441010][ T29] audit: type=1400 audit(1745799039.415:5401): avc: denied { read write } for pid=6481 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 105.465355][ T29] audit: type=1400 audit(1745799039.415:5402): avc: denied { open } for pid=6481 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 105.489795][ T29] audit: type=1400 audit(1745799039.415:5403): avc: denied { ioctl } for pid=6481 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 105.515453][ T29] audit: type=1400 audit(1745799039.435:5404): avc: denied { map_create } for pid=10935 comm="syz.7.3231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 105.534892][ T29] audit: type=1400 audit(1745799039.435:5405): avc: denied { map_read map_write } for pid=10935 comm="syz.7.3231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 105.555733][T10929] Falling back ldisc for ttyS3. [ 105.561153][T10937] geneve0: entered allmulticast mode [ 105.566915][ T29] audit: type=1400 audit(1745799039.465:5406): avc: denied { create } for pid=10938 comm="syz.6.3232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 105.586479][ T29] audit: type=1400 audit(1745799039.465:5407): avc: denied { getopt } for pid=10938 comm="syz.6.3232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 105.591981][T10859] hsr_slave_0: entered promiscuous mode [ 105.606060][ T29] audit: type=1400 audit(1745799039.465:5408): avc: denied { setopt } for pid=10938 comm="syz.6.3232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 105.631200][ T29] audit: type=1400 audit(1745799039.505:5409): avc: denied { validate_trans } for pid=10940 comm="syz.6.3233" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 105.661230][T10859] hsr_slave_1: entered promiscuous mode [ 105.668221][T10859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.678642][T10859] Cannot create hsr debugfs directory [ 105.751539][T10949] block device autoloading is deprecated and will be removed. [ 105.767743][T10949] syz.7.3238: attempt to access beyond end of device [ 105.767743][T10949] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 105.829060][T10859] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 105.843602][T10859] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 105.852958][T10859] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 105.865256][T10859] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 105.898436][T10968] vcan0: entered allmulticast mode [ 105.907517][T10968] vcan0: left allmulticast mode [ 105.945004][T10859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.961710][T10859] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.975650][T10974] random: crng reseeded on system resumption [ 105.984151][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.991221][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.070567][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.077773][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.107825][T10979] loop7: detected capacity change from 0 to 512 [ 106.130321][T10979] EXT4-fs: Ignoring removed mblk_io_submit option [ 106.135164][T10859] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 106.147183][T10859] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.167855][T10979] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 106.206602][T10979] EXT4-fs (loop7): 1 truncate cleaned up [ 106.217319][T10979] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.306679][T10859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.314292][ T6481] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.468489][T11013] Falling back ldisc for ttyS3. [ 106.520735][T10859] veth0_vlan: entered promiscuous mode [ 106.531625][T11028] SELinux: syz.2.3265 (11028) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 106.553258][T10859] veth1_vlan: entered promiscuous mode [ 106.579296][T10859] veth0_macvtap: entered promiscuous mode [ 106.595468][T10859] veth1_macvtap: entered promiscuous mode [ 106.607463][T10859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.617969][T10859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.627907][T10859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.629753][T11037] SELinux: policydb version 0 does not match my version range 15-34 [ 106.638328][T10859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.656193][T10859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.665240][T11037] SELinux: failed to load policy [ 106.666652][T10859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.695656][T10859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.719241][T10859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.729803][T10859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.739684][T10859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.750141][T10859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.760228][T10859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.770679][T10859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.774916][T11047] loop7: detected capacity change from 0 to 2048 [ 106.780500][T10859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.780586][T10859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.781596][T10859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.805064][T11049] SELinux: failed to load policy [ 106.810656][T10859] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.828023][T10859] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.836763][T10859] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.845467][T10859] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.870319][T11047] loop7: p1 < > p4 [ 106.875138][T11047] loop7: p4 size 8388608 extends beyond EOD, truncated [ 106.912117][T11059] SELinux: failed to load policy [ 106.966913][T11067] loop7: detected capacity change from 0 to 1764 [ 107.055251][T11078] loop7: detected capacity change from 0 to 1764 [ 107.157663][T11096] SELinux: policydb version 2066796142 does not match my version range 15-34 [ 107.166819][T11096] SELinux: failed to load policy [ 107.287767][T11113] program syz.9.3304 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.372732][T11129] loop8: detected capacity change from 0 to 512 [ 107.380735][T11129] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 107.393063][T11129] EXT4-fs (loop8): orphan cleanup on readonly fs [ 107.400182][T11129] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.3310: invalid indirect mapped block 256 (level 2) [ 107.415026][T11129] EXT4-fs (loop8): 2 truncates cleaned up [ 107.421444][T11129] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.444532][T10261] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.462490][T11137] binfmt_misc: register: failed to install interpreter file ./file2 [ 107.520675][T11146] loop8: detected capacity change from 0 to 128 [ 107.576789][T11156] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 107.584242][T11156] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 107.715254][T11176] loop9: detected capacity change from 0 to 1024 [ 107.729788][T11176] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.742058][T11176] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.755360][T11176] EXT4-fs error (device loop9): ext4_map_blocks:709: inode #15: block 1: comm syz.9.3333: lblock 1 mapped to illegal pblock 1 (length 8) [ 107.771145][T11176] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 8 with error 117 [ 107.783491][T11176] EXT4-fs (loop9): This should not happen!! Data will be lost [ 107.783491][T11176] [ 107.807719][T11184] netlink: 'syz.2.3336': attribute type 1 has an invalid length. [ 107.807712][ T31] EXT4-fs error (device loop9): ext4_map_blocks:709: inode #15: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 8) [ 107.807870][ T31] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 8 with error 117 [ 107.815474][T11184] __nla_validate_parse: 10 callbacks suppressed [ 107.815487][T11184] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3336'. [ 107.829665][ T31] EXT4-fs (loop9): This should not happen!! Data will be lost [ 107.829665][ T31] [ 107.832565][T10859] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.876922][T11186] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 107.886723][T11186] SELinux: failed to load policy [ 107.926742][T11193] program syz.2.3340 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.936287][T11193] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 107.968055][T11195] program syz.2.3341 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.041372][T11203] sg_write: data in/out 122/10 bytes for SCSI command 0xe4-- guessing data in; [ 108.041372][T11203] program syz.2.3345 not setting count and/or reply_len properly [ 108.229374][T11214] loop9: detected capacity change from 0 to 512 [ 108.236313][T11214] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 108.250404][T11214] EXT4-fs (loop9): 1 truncate cleaned up [ 108.256604][T11214] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.291194][T10859] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.291665][T11212] lo speed is unknown, defaulting to 1000 [ 108.395961][T11228] loop7: detected capacity change from 0 to 1024 [ 108.403078][T11228] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.410086][T11228] EXT4-fs: Mount option(s) incompatible with ext2 [ 108.422336][T11228] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3356'. [ 108.437431][T11230] loop9: detected capacity change from 0 to 512 [ 108.458741][T11232] loop7: detected capacity change from 0 to 1024 [ 108.466799][T11230] EXT4-fs (loop9): 1 orphan inode deleted [ 108.472778][T11232] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 108.473075][T11230] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.482643][T11232] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 108.494143][T11232] EXT4-fs (loop7): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 108.504678][T11230] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.530456][T11232] EXT4-fs (loop7): journal inode is deleted [ 108.536498][ T57] EXT4-fs error (device loop9): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 108.554008][T11238] loop8: detected capacity change from 0 to 164 [ 108.569324][T11230] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.579050][T11238] Unable to read rock-ridge attributes [ 108.585888][T11238] Unable to read rock-ridge attributes [ 108.596174][T11240] loop7: detected capacity change from 0 to 512 [ 108.664616][T11240] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.677822][T11240] ext4 filesystem being mounted at /382/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.692835][T11240] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #2: comm syz.7.3361: corrupted inode contents [ 108.718477][T11240] EXT4-fs error (device loop7): ext4_dirty_inode:6103: inode #2: comm syz.7.3361: mark_inode_dirty error [ 108.735649][T11240] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #2: comm syz.7.3361: corrupted inode contents [ 108.753879][T11260] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3370'. [ 108.757122][T11262] loop9: detected capacity change from 0 to 1024 [ 108.769805][T11262] EXT4-fs: Ignoring removed bh option [ 108.771304][T11261] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #2: comm syz.7.3361: corrupted inode contents [ 108.775221][T11262] EXT4-fs: Ignoring removed orlov option [ 108.792603][T11262] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.814721][T11261] EXT4-fs error (device loop7): ext4_dirty_inode:6103: inode #2: comm syz.7.3361: mark_inode_dirty error [ 108.828500][T11261] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #2: comm syz.7.3361: corrupted inode contents [ 108.842456][T11262] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.870716][T11261] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.3361: mark_inode_dirty error [ 108.883540][T11261] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #2: comm syz.7.3361: corrupted inode contents [ 108.905220][T11273] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 108.916750][T11261] EXT4-fs error (device loop7): ext4_dirty_inode:6103: inode #2: comm syz.7.3361: mark_inode_dirty error [ 108.928488][T11262] loop9: detected capacity change from 1024 to 64 [ 108.965905][ T6481] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.975706][T10859] EXT4-fs error (device loop9): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /32/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33619980, rec_len=46, size=1024 fake=0 [ 109.030899][T10859] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.043282][T11264] kmmpd-loop9: attempt to access beyond end of device [ 109.043282][T11264] loop9: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 109.056796][T11264] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 109.082404][T11297] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 109.156700][T11312] 9pnet: Could not find request transport: f [ 109.487542][T11359] loop8: detected capacity change from 0 to 512 [ 109.494569][T11359] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 109.505482][T11359] EXT4-fs (loop8): 1 truncate cleaned up [ 109.511830][T11359] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.524834][T11359] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.591254][T11371] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3418'. [ 109.807242][T11390] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 109.846077][T11394] Cannot find add_set index 0 as target [ 110.125283][T11426] SELinux: syz.2.3443 (11426) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 110.236800][T11440] loop7: detected capacity change from 0 to 1024 [ 110.244612][T11440] EXT4-fs: Ignoring removed bh option [ 110.250556][T11442] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 110.252397][T11440] EXT4-fs: inline encryption not supported [ 110.257109][T11442] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 110.257156][T11442] vhci_hcd vhci_hcd.0: Device attached [ 110.262998][T11440] EXT4-fs: Ignoring removed i_version option [ 110.275526][T11440] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 110.295142][T11440] EXT4-fs error (device loop7): ext4_map_blocks:709: inode #3: block 1: comm syz.7.3450: lblock 1 mapped to illegal pblock 1 (length 1) [ 110.310922][T11440] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.3450: Failed to acquire dquot type 0 [ 110.322744][T11440] EXT4-fs error (device loop7): ext4_free_blocks:6587: comm syz.7.3450: Freeing blocks not in datazone - block = 0, count = 4096 [ 110.336408][T11442] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 110.337597][T11440] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.3450: Invalid inode bitmap blk 0 in block_group 0 [ 110.342919][T11442] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 110.343076][T11442] vhci_hcd vhci_hcd.0: Device attached [ 110.360463][T11440] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 110.377457][ T12] EXT4-fs error (device loop7): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 110.380556][T11440] EXT4-fs (loop7): 1 orphan inode deleted [ 110.394227][T11442] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 110.407331][T11440] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.407861][ T12] __quota_error: 327 callbacks suppressed [ 110.407875][ T12] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 110.434001][ T12] EXT4-fs error (device loop7): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 0 [ 110.445471][ T29] audit: type=1400 audit(1745799045.420:5734): avc: denied { mounton } for pid=11452 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 110.467148][T11442] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(9) [ 110.473695][T11442] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 110.481240][ T3379] vhci_hcd: vhci_device speed not set [ 110.486628][T11442] vhci_hcd vhci_hcd.0: Device attached [ 110.497393][T11458] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 110.528660][T11442] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(11) [ 110.535271][T11442] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 110.542872][T11442] vhci_hcd vhci_hcd.0: Device attached [ 110.552264][T11465] vhci_hcd: connection closed [ 110.552590][T11447] vhci_hcd: connection closed [ 110.557474][T11443] vhci_hcd: connection closed [ 110.557892][ T31] vhci_hcd: stop threads [ 110.571192][ T31] vhci_hcd: release socket [ 110.575604][ T31] vhci_hcd: disconnect device [ 110.586038][ T3379] usb 5-1: new full-speed USB device number 2 using vhci_hcd [ 110.598487][T11451] vhci_hcd: connection closed [ 110.601908][T11444] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 110.615534][ T6481] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.625700][ T31] vhci_hcd: stop threads [ 110.627188][T11452] lo speed is unknown, defaulting to 1000 [ 110.629970][ T31] vhci_hcd: release socket [ 110.640103][ T31] vhci_hcd: disconnect device [ 110.646126][ T31] vhci_hcd: stop threads [ 110.650474][ T31] vhci_hcd: release socket [ 110.654885][ T31] vhci_hcd: disconnect device [ 110.661661][ T31] vhci_hcd: stop threads [ 110.665930][ T31] vhci_hcd: release socket [ 110.670404][ T31] vhci_hcd: disconnect device [ 110.680482][T10861] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.725342][T11475] syzkaller1: entered promiscuous mode [ 110.730934][T11475] syzkaller1: entered allmulticast mode [ 110.743827][T10861] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.769104][T11452] chnl_net:caif_netlink_parms(): no params data found [ 110.785419][ T29] audit: type=1400 audit(1745799045.780:5735): avc: denied { connect } for pid=11483 comm="syz.6.3462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 110.821135][T10861] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.846917][T11452] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.854204][T11452] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.867384][T11452] bridge_slave_0: entered allmulticast mode [ 110.874264][T11452] bridge_slave_0: entered promiscuous mode [ 110.876450][ T29] audit: type=1326 audit(1745799045.870:5736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11491 comm="syz.7.3464" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad9982e969 code=0x0 [ 110.882518][T11452] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.910283][T11452] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.917998][T11452] bridge_slave_1: entered allmulticast mode [ 110.924455][T11452] bridge_slave_1: entered promiscuous mode [ 110.933098][T10861] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.959060][T11452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.969961][T11452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.000151][T11452] team0: Port device team_slave_0 added [ 111.010168][T11500] loop8: detected capacity change from 0 to 128 [ 111.011232][T11452] team0: Port device team_slave_1 added [ 111.030244][T11500] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 111.042606][T11500] ext4 filesystem being mounted at /87/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 111.044660][T11452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.081681][T11452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.107591][T11452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.112127][T11500] EXT4-fs error (device loop8): htree_dirblock_to_tree:1082: inode #2: block 4: comm syz.8.3467: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 111.122869][T11452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.144350][T11452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.170499][T11452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.186765][T10861] bridge_slave_1: left allmulticast mode [ 111.192744][T10861] bridge_slave_1: left promiscuous mode [ 111.198516][T10861] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.208563][T10861] bridge_slave_0: left allmulticast mode [ 111.214270][T10861] bridge_slave_0: left promiscuous mode [ 111.220311][T10861] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.229693][T10261] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.342033][T10861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.352908][ T29] audit: type=1400 audit(1745799046.350:5737): avc: denied { mount } for pid=11514 comm="syz.2.3474" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 111.375172][T10861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.384565][ T29] audit: type=1400 audit(1745799046.350:5738): avc: denied { append } for pid=11514 comm="syz.2.3474" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 111.408108][ T29] audit: type=1400 audit(1745799046.380:5739): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 111.429651][T10861] bond0 (unregistering): Released all slaves [ 111.452898][T11452] hsr_slave_0: entered promiscuous mode [ 111.459152][T11452] hsr_slave_1: entered promiscuous mode [ 111.464969][T11452] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.472687][T11452] Cannot create hsr debugfs directory [ 111.482107][T11517] SELinux: ebitmap: truncated map [ 111.493895][T11517] SELinux: failed to load policy [ 111.547387][T10861] hsr_slave_0: left promiscuous mode [ 111.554731][T10861] hsr_slave_1: left promiscuous mode [ 111.562656][ T29] audit: type=1326 audit(1745799046.560:5740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11526 comm="syz.2.3478" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f989a9be969 code=0x0 [ 111.563971][T10861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.593226][T10861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.600988][T10861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.608581][T10861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.621531][T10861] veth1_macvtap: left promiscuous mode [ 111.627009][T10861] veth0_macvtap: left promiscuous mode [ 111.632688][T10861] veth1_vlan: left promiscuous mode [ 111.637960][T10861] veth0_vlan: left promiscuous mode [ 111.679923][ T29] audit: type=1400 audit(1745799046.680:5741): avc: denied { execute } for pid=11533 comm="syz.6.3481" path="/422/cpu.stat" dev="tmpfs" ino=2204 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 111.720643][ T29] audit: type=1400 audit(1745799046.720:5742): avc: denied { read write } for pid=6481 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 111.770369][T10861] team0 (unregistering): Port device team_slave_1 removed [ 111.784452][T10861] team0 (unregistering): Port device team_slave_0 removed [ 111.862994][T11548] loop7: detected capacity change from 0 to 4096 [ 111.882000][T11548] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.895299][T11548] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.953648][T11564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.962250][T11564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.968224][ T3382] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 111.977555][ T3382] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 111.984963][ T3382] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 111.994888][ T3382] hid-generic 0000:0004:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 112.053048][T11574] loop7: detected capacity change from 0 to 512 [ 112.072012][T11574] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.085225][T11574] ext4 filesystem being mounted at /409/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.099099][T11574] EXT4-fs (loop7): shut down requested (0) [ 112.114918][ T6481] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.125406][T11452] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 112.134258][T11452] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 112.144417][T11452] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 112.152809][T11452] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 112.190221][T11452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.203651][T11452] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.215071][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.222230][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.232677][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.239742][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.295775][T11452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.349451][T11452] veth0_vlan: entered promiscuous mode [ 112.362295][T11452] veth1_vlan: entered promiscuous mode [ 112.378981][T11452] veth0_macvtap: entered promiscuous mode [ 112.386528][T11452] veth1_macvtap: entered promiscuous mode [ 112.399264][T11452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.409720][T11452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.419691][T11452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.430270][T11452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.440291][T11452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.450889][T11452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.463517][T11452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.476302][T11452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.486748][T11452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.490703][T11596] loop7: detected capacity change from 0 to 2048 [ 112.496551][T11452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.496564][T11452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.496574][T11452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.496586][T11452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.504516][T11596] EXT4-fs: inline encryption not supported [ 112.513645][T11452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.560010][T11452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.571319][T11452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.580876][T11596] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.597979][T11452] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.606748][T11452] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.608288][T11596] EXT4-fs error (device loop7): ext4_ext_precache:631: inode #2: comm syz.7.3503: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 112.615506][T11452] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.615539][T11452] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.650521][T11596] EXT4-fs (loop7): Remounting filesystem read-only [ 112.678167][ T6481] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.706124][T11605] ALSA: seq fatal error: cannot create timer (-22) [ 112.845876][T11623] block device autoloading is deprecated and will be removed. [ 112.855565][T11625] binfmt_misc: register: failed to install interpreter file ./file0 [ 112.864106][T11623] syz.7.3513: attempt to access beyond end of device [ 112.864106][T11623] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 112.987650][T11639] syzkaller0: entered promiscuous mode [ 112.993209][T11639] syzkaller0: entered allmulticast mode [ 113.039715][T11642] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 113.135361][T11651] loop8: detected capacity change from 0 to 2048 [ 113.164162][T11651] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.305120][T11665] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3531'. [ 113.329561][T10261] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.524420][T11684] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3539'. [ 113.849868][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 113.857305][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 113.864767][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 113.872377][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 113.879924][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 113.887374][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 113.894781][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 113.902225][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 113.909693][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 113.917067][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 113.924485][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 113.931912][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 113.939361][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 113.946734][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 113.954894][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 113.962415][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 113.969829][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 113.977222][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 113.984636][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 113.992029][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 113.999430][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 114.006890][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 114.014427][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 114.021933][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 114.029396][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 114.036773][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 114.044251][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 114.051679][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 114.060030][ T23] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 114.090992][T11698] loop8: detected capacity change from 0 to 512 [ 114.097996][T11698] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 114.119043][T11698] EXT4-fs (loop8): 1 truncate cleaned up [ 114.125043][T11698] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.152221][T10261] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.418943][T11728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3557'. [ 114.470539][T11734] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3559'. [ 114.495611][T11736] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3561'. [ 114.591354][T11749] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 114.722541][T11766] lo speed is unknown, defaulting to 1000 [ 115.073715][T11794] loop8: detected capacity change from 0 to 2048 [ 115.100784][T11794] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.131203][T10261] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.150975][T11804] SELinux: syz.6.3591 (11804) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 115.189396][T11810] loop8: detected capacity change from 0 to 512 [ 115.195996][T11810] EXT4-fs: Ignoring removed oldalloc option [ 115.210997][T11810] EXT4-fs error (device loop8): ext4_xattr_inode_iget:433: comm syz.8.3593: Parent and EA inode have the same ino 15 [ 115.226010][T11810] EXT4-fs (loop8): Remounting filesystem read-only [ 115.232719][T11810] EXT4-fs warning (device loop8): ext4_evict_inode:262: couldn't mark inode dirty (err -30) [ 115.242955][T11810] EXT4-fs (loop8): 1 orphan inode deleted [ 115.249139][T11810] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.273828][T10261] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.427262][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 115.427274][ T29] audit: type=1400 audit(1745799050.420:5942): avc: denied { create } for pid=11840 comm="syz.7.3607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 115.453615][T11842] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 115.461620][T11842] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 115.470010][ T29] audit: type=1400 audit(1745799050.470:5943): avc: denied { ioctl } for pid=11840 comm="syz.7.3607" path="socket:[32591]" dev="sockfs" ino=32591 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 115.523008][T11848] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3611'. [ 115.554307][ T29] audit: type=1400 audit(1745799050.470:5944): avc: denied { create } for pid=11843 comm="syz.0.3608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 115.573907][ T29] audit: type=1400 audit(1745799050.490:5945): avc: denied { setopt } for pid=11843 comm="syz.0.3608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 115.593414][ T29] audit: type=1400 audit(1745799050.490:5946): avc: denied { connect } for pid=11843 comm="syz.0.3608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 115.613203][ T29] audit: type=1400 audit(1745799050.490:5947): avc: denied { bind } for pid=11840 comm="syz.7.3607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 115.632574][ T3379] usb 5-1: enqueue for inactive port 0 [ 115.632604][ T3379] usb 5-1: enqueue for inactive port 0 [ 115.643701][ T29] audit: type=1400 audit(1745799050.520:5948): avc: denied { read } for pid=11845 comm="syz.0.3610" dev="nsfs" ino=4026533566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 115.664991][ T29] audit: type=1400 audit(1745799050.520:5949): avc: denied { open } for pid=11845 comm="syz.0.3610" path="net:[4026533566]" dev="nsfs" ino=4026533566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 115.688443][ T29] audit: type=1400 audit(1745799050.520:5950): avc: denied { create } for pid=11845 comm="syz.0.3610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 115.698409][ T3379] vhci_hcd: vhci_device speed not set [ 115.708528][ T29] audit: type=1400 audit(1745799050.540:5951): avc: denied { create } for pid=11849 comm="syz.8.3612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 115.837160][T11870] random: crng reseeded on system resumption [ 116.039301][T11897] loop8: detected capacity change from 0 to 512 [ 116.046453][T11897] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 116.059818][T11897] EXT4-fs (loop8): 1 truncate cleaned up [ 116.066241][T11897] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.092477][T10261] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.128709][T11895] loop0: detected capacity change from 512 to 0 [ 116.149499][T11908] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3638'. [ 116.179888][T11912] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3640'. [ 116.293333][T11931] binfmt_misc: register: failed to install interpreter file ./file2 [ 116.776355][T11996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.784876][T11996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.101561][T12019] macvlan0: entered promiscuous mode [ 117.106970][T12019] macvlan0: entered allmulticast mode [ 117.112480][T12019] bond_slave_0: entered promiscuous mode [ 117.118172][T12019] bond_slave_1: entered promiscuous mode [ 117.123863][T12019] bond0: entered allmulticast mode [ 117.129103][T12019] bond_slave_0: entered allmulticast mode [ 117.134865][T12019] bond_slave_1: entered allmulticast mode [ 117.141016][T12019] bond0: entered promiscuous mode [ 117.147304][T12019] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 117.155488][T12019] team0: Port device macvlan0 added [ 117.317416][T12035] netlink: 'syz.7.3698': attribute type 3 has an invalid length. [ 117.390944][T12040] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 117.472429][T12053] random: crng reseeded on system resumption [ 117.601761][T12062] netlink: 304 bytes leftover after parsing attributes in process `syz.0.3710'. [ 117.611084][T12062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3710'. [ 117.892692][T12098] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 117.900161][T12098] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 117.960385][T12106] bond0: entered promiscuous mode [ 117.965459][T12106] bond_slave_0: entered promiscuous mode [ 117.971327][T12106] bond_slave_1: entered promiscuous mode [ 117.977125][T12106] bond1: entered promiscuous mode [ 118.145899][T12124] program syz.6.3737 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.160979][T12126] syz.2.3748: attempt to access beyond end of device [ 118.160979][T12126] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 118.211717][T12133] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 118.285922][T12150] netlink: 'syz.6.3751': attribute type 1 has an invalid length. [ 118.285922][T12148] loop8: detected capacity change from 0 to 1024 [ 118.310476][T12148] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.332129][T12148] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.407464][T12167] __nla_validate_parse: 1 callbacks suppressed [ 118.407484][T12167] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3757'. [ 118.445110][T10261] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.465343][T12173] program syz.6.3760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.476365][T12173] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 118.530300][T12182] random: crng reseeded on system resumption [ 118.606246][T12180] lo speed is unknown, defaulting to 1000 [ 118.738171][T12220] netlink: 'syz.0.3782': attribute type 4 has an invalid length. [ 119.235522][T12260] loop8: detected capacity change from 0 to 128 [ 119.263504][T12260] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 119.277883][T12260] System zones: 1-3, 19-19, 35-36 [ 119.300875][T12260] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.313880][T12260] ext4 filesystem being mounted at /150/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 119.427999][T12269] lo speed is unknown, defaulting to 1000 [ 119.495044][T12277] lo speed is unknown, defaulting to 1000 [ 119.789364][T12302] SELinux: policydb version 280 does not match my version range 15-34 [ 119.797644][T12302] SELinux: failed to load policy [ 120.061019][T12313] loop8: detected capacity change from 0 to 1024 [ 120.068040][T12313] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 120.078060][T12313] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 120.087959][T12313] EXT4-fs (loop8): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 120.098816][T12313] EXT4-fs (loop8): journal inode is deleted [ 120.111441][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.131374][T12317] serio: Serial port ptm1 [ 120.159326][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.203201][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.226262][T12329] loop8: detected capacity change from 0 to 512 [ 120.245026][T12329] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.271493][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.336043][T12352] loop8: detected capacity change from 0 to 512 [ 120.342447][ T5673] kmmpd-loop0: attempt to access beyond end of device [ 120.342447][ T5673] loop0: rw=14337, sector=34, nr_sectors = 2 limit=0 [ 120.355837][ T5673] Buffer I/O error on dev loop0, logical block 17, lost sync page write [ 120.365273][ T5673] EXT4-fs error (device loop0): kmmpd:186: comm kmmpd-loop0: Error writing to MMP block [ 120.375140][ T5673] kmmpd-loop0: attempt to access beyond end of device [ 120.375140][ T5673] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 120.375268][ T12] bridge_slave_1: left promiscuous mode [ 120.388427][ T5673] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 120.388485][ T5673] EXT4-fs (loop0): I/O error while writing superblock [ 120.394071][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.417362][ T12] bridge_slave_0: left allmulticast mode [ 120.418863][T12352] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.423073][ T12] bridge_slave_0: left promiscuous mode [ 120.423185][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.452847][T12352] EXT4-fs error (device loop8): ext4_do_update_inode:5211: inode #2: comm syz.8.3839: corrupted inode contents [ 120.453340][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 120.453354][ T29] audit: type=1400 audit(1745799055.450:6118): avc: denied { setattr } for pid=12351 comm="syz.8.3839" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 120.466342][T12352] EXT4-fs error (device loop8): ext4_dirty_inode:6103: inode #2: comm syz.8.3839: mark_inode_dirty error [ 120.505148][T12352] EXT4-fs error (device loop8): ext4_do_update_inode:5211: inode #2: comm syz.8.3839: corrupted inode contents [ 120.517850][T12358] EXT4-fs error (device loop8): ext4_do_update_inode:5211: inode #2: comm syz.8.3839: corrupted inode contents [ 120.529753][T12358] EXT4-fs error (device loop8): ext4_dirty_inode:6103: inode #2: comm syz.8.3839: mark_inode_dirty error [ 120.541537][T12358] EXT4-fs error (device loop8): ext4_do_update_inode:5211: inode #2: comm syz.8.3839: corrupted inode contents [ 120.553677][T12358] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #2: comm syz.8.3839: mark_inode_dirty error [ 120.566106][T12358] EXT4-fs error (device loop8): ext4_do_update_inode:5211: inode #2: comm syz.8.3839: corrupted inode contents [ 120.581523][T12358] EXT4-fs error (device loop8): ext4_dirty_inode:6103: inode #2: comm syz.8.3839: mark_inode_dirty error [ 120.595105][ T12] geneve0 (unregistering): left promiscuous mode [ 120.642055][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.652349][ T12] bond_slave_0: left promiscuous mode [ 120.657864][ T12] bond_slave_0: left allmulticast mode [ 120.664544][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.673402][ T12] bond_slave_1: left promiscuous mode [ 120.678912][ T12] bond_slave_1: left allmulticast mode [ 120.685309][ T12] bond0 (unregistering): (slave bond1): Releasing backup interface [ 120.694075][ T12] bond1 (unregistering): left promiscuous mode [ 120.700312][ T12] bond1 (unregistering): left allmulticast mode [ 120.706782][ T12] bond0 (unregistering): Released all slaves [ 120.715336][ T12] bond1 (unregistering): Released all slaves [ 120.723558][T12324] lo speed is unknown, defaulting to 1000 [ 120.772294][T12374] loop8: detected capacity change from 0 to 512 [ 120.806465][ T12] batadv0: left promiscuous mode [ 120.826208][ T12] hsr_slave_0: left promiscuous mode [ 120.833200][T12374] Quota error (device loop8): v2_read_file_info: Free block number 1 out of range (1, 6). [ 120.843338][T12374] EXT4-fs warning (device loop8): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 120.859747][ T12] hsr_slave_1: left promiscuous mode [ 120.865322][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.867030][T12386] hub 9-0:1.0: USB hub found [ 120.872721][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.885927][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.885968][T12374] EXT4-fs (loop8): mount failed [ 120.893376][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.898316][T12386] hub 9-0:1.0: 8 ports detected [ 120.909440][T12384] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3851'. [ 120.922516][ T12] veth1_macvtap: left promiscuous mode [ 120.928061][ T12] veth0_macvtap: left promiscuous mode [ 120.933590][ T12] veth1_vlan: left promiscuous mode [ 120.941153][ T12] veth0_vlan: left promiscuous mode [ 120.948178][ T29] audit: type=1400 audit(1745799055.940:6119): avc: denied { read } for pid=12387 comm="syz.0.3853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 121.008743][T12397] SELinux: policydb version 280 does not match my version range 15-34 [ 121.017739][T12397] SELinux: failed to load policy [ 121.040649][T12399] syz.0.3858: attempt to access beyond end of device [ 121.040649][T12399] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 121.042031][ T29] audit: type=1326 audit(1745799056.040:6120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12398 comm="syz.0.3858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e59f1e969 code=0x7ffc0000 [ 121.077368][ T29] audit: type=1326 audit(1745799056.040:6121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12398 comm="syz.0.3858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e59f1e969 code=0x7ffc0000 [ 121.077393][ T29] audit: type=1326 audit(1745799056.040:6122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12398 comm="syz.0.3858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e59f1e969 code=0x7ffc0000 [ 121.077427][ T29] audit: type=1326 audit(1745799056.040:6123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12398 comm="syz.0.3858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e59f1e969 code=0x7ffc0000 [ 121.077507][ T29] audit: type=1326 audit(1745799056.040:6124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12398 comm="syz.0.3858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e59f1e969 code=0x7ffc0000 [ 121.077536][ T29] audit: type=1326 audit(1745799056.040:6125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12398 comm="syz.0.3858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e59f1e969 code=0x7ffc0000 [ 121.077575][ T29] audit: type=1326 audit(1745799056.040:6126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12398 comm="syz.0.3858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e59f1e969 code=0x7ffc0000 [ 121.116571][ T12] team0 (unregistering): Port device team_slave_1 removed [ 121.119962][ T12] team0 (unregistering): Port device team_slave_0 removed [ 121.122815][ T51] smc: removing ib device syz! [ 121.271478][T12391] smc: net device bond0 applied user defined pnetid SYZ0 [ 121.280292][T12400] smc: net device bond0 erased user defined pnetid SYZ0 [ 121.290029][T12324] chnl_net:caif_netlink_parms(): no params data found [ 121.401955][T12324] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.409194][T12324] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.428490][T12324] bridge_slave_0: entered allmulticast mode [ 121.454777][T12324] bridge_slave_0: entered promiscuous mode [ 121.480224][T12324] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.487310][T12324] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.517273][T12446] loop8: detected capacity change from 0 to 1024 [ 121.528080][T12324] bridge_slave_1: entered allmulticast mode [ 121.534243][T12446] EXT4-fs: Ignoring removed bh option [ 121.539845][T12446] EXT4-fs: inline encryption not supported [ 121.545751][T12446] EXT4-fs: Ignoring removed i_version option [ 121.552386][T12446] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 121.552422][T12324] bridge_slave_1: entered promiscuous mode [ 121.591548][T12448] syzkaller1: entered promiscuous mode [ 121.597126][T12448] syzkaller1: entered allmulticast mode [ 121.605929][T12446] EXT4-fs error (device loop8): ext4_map_blocks:709: inode #3: block 1: comm syz.8.3875: lblock 1 mapped to illegal pblock 1 (length 1) [ 121.620916][T12446] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.3875: Failed to acquire dquot type 0 [ 121.635982][T12324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.645295][T12446] EXT4-fs error (device loop8): ext4_free_blocks:6587: comm syz.8.3875: Freeing blocks not in datazone - block = 0, count = 4096 [ 121.646448][ T12] IPVS: stop unused estimator thread 0... [ 121.665641][T12446] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.3875: Invalid inode bitmap blk 0 in block_group 0 [ 121.680503][T12446] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 121.689453][ T51] EXT4-fs error (device loop8): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 121.705063][T12446] EXT4-fs (loop8): 1 orphan inode deleted [ 121.706045][T12324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.742108][ T51] EXT4-fs error (device loop8): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 0 [ 121.771853][T12324] team0: Port device team_slave_0 added [ 121.799478][T12324] team0: Port device team_slave_1 added [ 121.835904][T12324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.842904][T12324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.868907][T12324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.910289][T12486] sd 0:0:1:0: device reset [ 121.933353][T12324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.940416][T12324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.966440][T12324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.001223][T12324] hsr_slave_0: entered promiscuous mode [ 122.008751][T12324] hsr_slave_1: entered promiscuous mode [ 122.015374][T12324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.025979][T12324] Cannot create hsr debugfs directory [ 122.031773][T12504] smc: net device bond0 applied user defined pnetid SYZ0 [ 122.040760][T12504] smc: net device bond0 erased user defined pnetid SYZ0 [ 122.172734][T12531] loop8: detected capacity change from 0 to 512 [ 122.179706][T12531] EXT4-fs: Ignoring removed mblk_io_submit option [ 122.186436][T12531] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 122.200500][T12531] EXT4-fs (loop8): 1 truncate cleaned up [ 122.335164][T12324] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 122.353265][T12324] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 122.369945][T12324] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 122.379599][T12324] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 122.414657][T12324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.426382][T12324] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.435879][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.442948][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.456268][T10861] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.463330][T10861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.508009][T12550] ALSA: seq fatal error: cannot create timer (-22) [ 122.548960][T12324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.645678][T12324] veth0_vlan: entered promiscuous mode [ 122.656012][T12324] veth1_vlan: entered promiscuous mode [ 122.675762][T12324] veth0_macvtap: entered promiscuous mode [ 122.684733][T12324] veth1_macvtap: entered promiscuous mode [ 122.695761][T12324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.706355][T12324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.716196][T12324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.726787][T12324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.736677][T12324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.747222][T12324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.782638][T12324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.794081][T12324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.804678][T12324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.814505][T12324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.824952][T12324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.834882][T12324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.845305][T12324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.855110][T12324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.865608][T12324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.878718][T12324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.890636][T12324] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.899549][T12324] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.908263][T12324] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.917028][T12324] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.989350][T12597] sd 0:0:1:0: device reset [ 123.865200][T12645] sd 0:0:1:0: device reset [ 123.908838][T12647] smc: net device bond0 applied user defined pnetid SYZ0 [ 123.921800][T12647] smc: net device bond0 erased user defined pnetid SYZ0 [ 124.060520][T12659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3962'. [ 124.103602][T12665] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 124.140417][T12669] loop1: detected capacity change from 0 to 512 [ 124.152027][T12669] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.3967: casefold flag without casefold feature [ 124.213852][T12669] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.3967: couldn't read orphan inode 15 (err -117) [ 124.283963][T12679] xt_connbytes: Forcing CT accounting to be enabled [ 124.291051][T12679] Cannot find add_set index 0 as target [ 124.327557][T12683] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3974'. [ 124.390932][T12688] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 124.536778][T12717] SELinux: syz.0.3988 (12717) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 124.554391][T12719] netlink: 92 bytes leftover after parsing attributes in process `syz.6.3989'. [ 124.563539][T12719] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3989'. [ 124.572554][T12719] netlink: 'syz.6.3989': attribute type 2 has an invalid length. [ 124.580640][T12719] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3989'. [ 124.768509][T12748] random: crng reseeded on system resumption [ 124.787718][T12746] ================================================================== [ 124.795815][T12746] BUG: KCSAN: data-race in rtc_dev_poll / rtc_pie_update_irq [ 124.803197][T12746] [ 124.805512][T12746] read-write to 0xffff88810328db80 of 8 bytes by interrupt on cpu 0: [ 124.813572][T12746] rtc_pie_update_irq+0x93/0xf0 [ 124.818425][T12746] __hrtimer_run_queues+0x20c/0x5a0 [ 124.823623][T12746] hrtimer_interrupt+0x21a/0x460 [ 124.828559][T12746] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 124.834478][T12746] sysvec_apic_timer_interrupt+0x6f/0x80 [ 124.840140][T12746] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 124.846146][T12746] create_basic_memory_bitmaps+0x4b9/0x5b0 [ 124.851965][T12746] snapshot_open+0x1b4/0x270 [ 124.856556][T12746] misc_open+0x1d3/0x200 [ 124.860804][T12746] chrdev_open+0x2e8/0x3a0 [ 124.865234][T12746] do_dentry_open+0x646/0xa20 [ 124.869919][T12746] vfs_open+0x37/0x1e0 [ 124.873981][T12746] path_openat+0x1c5e/0x2170 [ 124.878563][T12746] do_filp_open+0x109/0x230 [ 124.883057][T12746] do_sys_openat2+0xa6/0x110 [ 124.887645][T12746] __x64_sys_openat+0xf2/0x120 [ 124.892423][T12746] x64_sys_call+0x1af/0x2fb0 [ 124.897011][T12746] do_syscall_64+0xd0/0x1a0 [ 124.901519][T12746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.907413][T12746] [ 124.909730][T12746] read to 0xffff88810328db80 of 8 bytes by task 12746 on cpu 1: [ 124.917362][T12746] rtc_dev_poll+0x78/0xb0 [ 124.921700][T12746] __io_arm_poll_handler+0x1eb/0xb70 [ 124.926985][T12746] io_arm_poll_handler+0x427/0x5b0 [ 124.932098][T12746] io_queue_async+0x86/0x440 [ 124.936691][T12746] io_req_task_submit+0xbb/0xc0 [ 124.941537][T12746] io_handle_tw_list+0x18d/0x1c0 [ 124.946470][T12746] tctx_task_work_run+0x6d/0x1a0 [ 124.951411][T12746] tctx_task_work+0x3f/0x80 [ 124.956082][T12746] task_work_run+0x12e/0x1a0 [ 124.960670][T12746] get_signal+0xe13/0xf70 [ 124.965019][T12746] arch_do_signal_or_restart+0x97/0x480 [ 124.970569][T12746] syscall_exit_to_user_mode+0x68/0xb0 [ 124.976038][T12746] do_syscall_64+0xdd/0x1a0 [ 124.980558][T12746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.986452][T12746] [ 124.988768][T12746] value changed: 0x00000000000021c0 -> 0x00000000000022c0 [ 124.995861][T12746] [ 124.998169][T12746] Reported by Kernel Concurrency Sanitizer on: [ 125.004321][T12746] CPU: 1 UID: 0 PID: 12746 Comm: syz.8.4011 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 125.015071][T12746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 125.025117][T12746] ================================================================== [ 125.388451][ T5673] kmmpd-loop0: attempt to access beyond end of device [ 125.388451][ T5673] loop0: rw=14337, sector=34, nr_sectors = 2 limit=0 [ 125.401891][ T5673] Buffer I/O error on dev loop0, logical block 17, lost sync page write [ 130.418490][ T5673] kmmpd-loop0: attempt to access beyond end of device [ 130.418490][ T5673] loop0: rw=14337, sector=34, nr_sectors = 2 limit=0 [ 130.431926][ T5673] Buffer I/O error on dev loop0, logical block 17, lost sync page write [ 133.220414][ T29] kauditd_printk_skb: 245 callbacks suppressed [ 133.220432][ T29] audit: type=1400 audit(1745799068.220:6369): avc: denied { read } for pid=2988 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 133.248591][ T29] audit: type=1400 audit(1745799068.220:6370): avc: denied { search } for pid=2988 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.270181][ T29] audit: type=1400 audit(1745799068.220:6371): avc: denied { append } for pid=2988 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 133.292506][ T29] audit: type=1400 audit(1745799068.220:6372): avc: denied { open } for pid=2988 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 133.315032][ T29] audit: type=1400 audit(1745799068.220:6373): avc: denied { getattr } for pid=2988 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1