last executing test programs: 1m31.894631147s ago: executing program 1 (id=163): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) 1m31.566059648s ago: executing program 1 (id=171): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1m31.500264108s ago: executing program 1 (id=176): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0x0, 0x1}}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r1, &(0x7f00000001c0)=""/4068, 0xfe4) 1m31.432908747s ago: executing program 1 (id=178): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000080)={[{}]}, 0x1, 0x4e2, &(0x7f0000000b80)="$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") mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000340)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) 1m31.250092238s ago: executing program 1 (id=182): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000400)={0x41, 0x4}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) sendmsg$tipc(r1, &(0x7f0000000480)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x41, 0x4}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x200040c0}, 0x20000001) 1m30.867786989s ago: executing program 1 (id=197): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1m30.850876978s ago: executing program 32 (id=197): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1m30.668430748s ago: executing program 4 (id=207): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x90e, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x0, 0x1, 0x10000000}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0, 0x4000000, 0x1}) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) 1m30.393911349s ago: executing program 4 (id=215): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000700)='./file2\x00', 0x0, &(0x7f0000000740)=ANY=[], 0xfd, 0x11f3, &(0x7f0000001b80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ftruncate(r0, 0x100c17a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRESOCT=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES8, @ANYRESDEC=0x0, @ANYRES32, @ANYRES8, @ANYRES8], 0x1, 0x0, &(0x7f0000000000)) truncate(&(0x7f0000000000)='./file2\x00', 0x3000) 1m29.27812721s ago: executing program 4 (id=241): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f00000007c0)={0x0, 0x989680}, 0x0) 1m29.119947311s ago: executing program 4 (id=242): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r0, &(0x7f00000000c0)='./file0/file0\x00', 0x0) 1m29.054311981s ago: executing program 4 (id=243): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)={@void, @void, @eth={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val={0x88a8, 0x7, 0x0, 0x3}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x21, 0xffffff02, 0x65, 0x0, 0x8, 0x84, 0x0, @loopback, @private=0xa010100}}}}}}, 0x26) 1m28.729895512s ago: executing program 4 (id=246): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x8000000000000001}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x34, r2, 0x701, 0x4, 0x0, {{}, {@val={0x8, 0x1, 0x4e}, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x800}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m28.729772031s ago: executing program 33 (id=246): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x8000000000000001}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x34, r2, 0x701, 0x4, 0x0, {{}, {@val={0x8, 0x1, 0x4e}, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x800}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 27.437317653s ago: executing program 3 (id=2899): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) 27.253657424s ago: executing program 3 (id=2903): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f00000021c0)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000002180)={&(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001fc0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/48, 0x30}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000001ec0)=[{&(0x7f0000001a00)=""/161, 0xa1}], 0x1}}], 0x90}, 0x0) 27.201826784s ago: executing program 3 (id=2905): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1, 0x0, 0x40000}, 0x18) move_pages(0x0, 0x20000000000001ab, &(0x7f0000000000), 0x0, &(0x7f0000000000)=[0x0], 0x0) 24.088245638s ago: executing program 3 (id=2969): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffa}, 0x18) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x20, r1, 0x32b, 0x0, 0x25dfdbf9, {{0x5}, {@void, @val={0xc, 0x99, {0x0, 0xffffffff}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 24.034880178s ago: executing program 3 (id=2971): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x21081e, &(0x7f0000000280)={[{@grpquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@noinit_itable}]}, 0x1, 0x505, &(0x7f0000001180)="$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") open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x8000000000000001, 0x8001, 0x0, 0x0, 0x8, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff19df110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d3000dd602000000005cf7ce1fc986bcdf"}) 23.697055479s ago: executing program 3 (id=2977): lseek(0xffffffffffffffff, 0x4000000000000d7, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xa, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x52, &(0x7f00000043c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f2001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa6c"], 0x0) 8.417080779s ago: executing program 34 (id=2977): lseek(0xffffffffffffffff, 0x4000000000000d7, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xa, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x52, &(0x7f00000043c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f2001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa6c"], 0x0) 1.679952188s ago: executing program 7 (id=3562): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) 1.597076018s ago: executing program 7 (id=3565): r0 = socket$inet(0x2, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x1, 0x10}}}}}, 0x0) 1.555187168s ago: executing program 7 (id=3568): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x0, 0x0, 0x1}, 0xfe}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='data', 0xfdef}}, 0x0) 511.03686ms ago: executing program 5 (id=3600): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="034886dd090032000300300000006000000d01002f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022ebc26e993953"], 0xfdef) 509.58052ms ago: executing program 2 (id=3601): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdirat(r0, &(0x7f0000000200)='./bus\x00', 0x0) mount$9p_rdma(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', &(0x7f0000000540), 0x4001, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=rdma']) 479.13317ms ago: executing program 2 (id=3604): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r1}, 0x10) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@inode32}]}) 461.159039ms ago: executing program 0 (id=3605): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x2981, &(0x7f0000000440)={0x0, 0x0, 0x40, 0xfffffff9, 0xd4}) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x1b, 0x20000038, r2) 441.07638ms ago: executing program 0 (id=3607): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x2000002, &(0x7f0000000600)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c646973636172640061727365743d63703835322c757466383d2023d6ffff756d7461696c3d302c6e6f6e75617461696c696f6368619615f9a9d8fc34fd234143727365743d69736f383835392d322c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c757466b83d312c756e695f786c6174653d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c726f6469722c756e695f786c8e380b24aa44b2a03f9d01000080000000002c4fb4e27388a38ca91b346d2e5535414e8214d26a8c3700"/241], 0x1, 0x368, &(0x7f0000000180)="$eJzs3U9oI9UfAPBvOmnSXfj9tjdREKI3Qct2b3qxRbqw2ItK8M9BDG5XJa1Ci8X2sG09KB4Fj3rypqAHD+JRBEW8efDqCrIqHrS3BRefTCaTTJu02y5WKX4+0PTlvfed73cmQzINyetzc9G9PBlXdnevx9RULepzj8zFjVpMRxal7RjVGNMHAJwON1KK31PhiCG1Ey4JADhhvdf/FyKiFdNFz+tfHjY/efUHgFOv//f/mcPmTB008MqJlAQAnLCR9//v3TPc6P3Uy7v1yqcCAIDT6omnn3l0fjHi8VZrKmLlzfX2ejseGo7PX4mXYjmW4nyci5sRxYVCflPr3V68tLhwvtVqbcVP09GOiIl+YLu4UpjPevHNmB2MDK42UkrZxU8WF2ZbPRGxvdXLHyu19fZknO3n//5sLA0vPKbLIqJ3c2lx4UKrv4H2Shm/FbEzfN8ir38mzsW3zw82k1L5CcbFhauzE/07w/j1djMuD47Cge+AAAAAAAAAAAAAAAAAAAAAAADAbZlpDUwP1s9J+e9ipZyZmTHjvfVxivj++kA7xfpAqZkipd9ee6D9VhZ71gfavz7PuoUEAQAAAAAAAAAAAAAAAAAAYGBtoxGd5eWl1bWNzW61sbW6tjEREXnPy19/9MWZGJ1zi0a9SNGMGKRo9dNudjspKyenLGI0PMuTlz0ffDqouDqnOdiLsWU0xw/tRt743z0/vjscujsrt/zncHIW43cwq5Tx8L6kK/8vSjrOgRo0LlR7mqPZr6WUKj1vVMOvPju6wahF1I//wG12J+LgOSlvfHX9xTvLo9/5PBXuu//ck9feef+Xbmc5zxy9R7CxunYzdTu1cvLxDkt+qMueWhSNWvVMqB8WvrO3p5N99+tTd739zdGyp2rPq/n5vG9OVuzOx/vDG0UjLzNvNIZny5lh+GR/J5aXJsec/Ldq3MZjesd7n32Y0g8/HzlFIa9+YuRpo/b3PQMBAAAAAAAAAAAAAAAAAAClynfF+/pf9p08LOrBx06+MgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD45wz//3+lsbMd+3qO0vhja0xUc2l1LaLxb+8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/cX8FAAD//zbhVeI=") chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x169142, 0x0) fcntl$setlease(r0, 0x400, 0x0) unlink(&(0x7f0000000100)='./file1\x00') 440.7519ms ago: executing program 2 (id=3608): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001600010000000000000000000a00a5"], 0x20}}, 0x0) 417.70892ms ago: executing program 2 (id=3610): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020017b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000005c0)=[{0x200000000006, 0xde, 0x0, 0x7ffc1ffb}]}) setregid(0xffffffffffffffff, 0x0) 380.35264ms ago: executing program 5 (id=3612): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 345.608169ms ago: executing program 6 (id=3613): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002340)=ANY=[@ANYBLOB="b702000022000000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f34e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e0500009cb20d03e7564c35a8d36774d5e5003a14817ac61e4dd19699a13477bf7e060e3670ef0e789f65f105006704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b626c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a080600000002000000ff000000334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3957663e88535c133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964ecbeba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca00010000790017b0689a173db9c24db65c1e00015c1d093dab18fd063e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacec403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39057c1f395968e23c262279f4ef00fbdb8c338615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c1c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f54b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553572548104d2ad0e10d3663488e664401030022f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f32744a8c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44bd84bf6770157e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e6970982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980ede51116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c60100f36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e6887dd7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee440b293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbc8b8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c545b28211a92000000001501aed8972af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db996e633792118efdb6b88023e80da74fdf723c7f05e96d738989f2c8b1e6b3a9716b6130a09e2698b12d8ae4d329f305fde3e8dec42eae3c69988ad568543a715755110c8dff124a6ba9ee1dc32ea7d17a35a420133c7df262a30cbff8790d80fd4def27ff1b268014daec1b0d1d2864bf010801f092efac0b349b86631d2a7455a72c0e7f43730b78e9beb255188acb12f3770fcc2223ba034181d9c3acef5b6d9ee77883ca12cfd68a5db88cc945a5c377c4ee2da24351905240b0b1920429109032ddc3cf9bf4ba32f594d45478bca432bdeb1a21fd5b5c2c416ed8eeabade9e2002b4e714dc3d7476fa52fedc0d0e6bed973e3aa468597810c13a8c40d9845bf0080850f309ec4dc5f88ef54bc3272918944178203e706674d8402f8ccd86d33edb1894e46b793641e9bf407b7c8b2b4b555f07467c96828163ce30fd4c24b108df352bc32eae5b1e3adecf6cf8d2bc3549f49c14a553683499b707a422e98082456c0dcf3f7155db062dfad1e92af9708dca9b70a77f4b88c06f8ee7a43df5f5ac21a6ed194102abaa097097f544896db197fa4dc32c420640a48bc6e79c214c21fc2312d4f9f4f489a52f5774d8339c2e03f979c9ee9a23e8f6f7d3aec1100c9949095ed29deabeebc420cfdf909dbecf8acc871b627bb358bd5ab90db253acf496d9b6a3374c86558a38537a821aa092794333ac26edb8b06370d7b0fa2db01c24534b33431132dc386178651682b5446d519dbc4fdcc69cfb60afe6cbd4d3ea2bcfa9d10bf14cb169009d7d7cc02ff1f03941916f046dcd6fa0c0d25c2189c349481633fdd841f8cca89757c2528b8334e76f37b8c43271a2820c33a2e631e4ed3060b7f0ab4e264a022f17647d511e44c3c594bbff7f0047450d74bf891cb2452f4093d3a77c4b7316218e50bedff67f529f78e52a0ac3af2a8414078aaadfe77e14a1647fe521a947a0489ca384989f391d2b005aaa970457a4f3e0c0f488b4228b33b08ff78581bf5d07446992ad520b2e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 312.908449ms ago: executing program 5 (id=3614): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newtaction={0x98, 0x30, 0x48b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ctinfo={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_simple={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'nat\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6f8, 0x2, 0x1, 0x6, 0x1ff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x98}}, 0x0) 312.8151ms ago: executing program 2 (id=3615): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000010300)=[{0x0}, {0x0}], 0x2) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 277.04483ms ago: executing program 6 (id=3616): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) statx(0xffffffffffffff9c, 0x0, 0x6000, 0x20, 0x0) setreuid(0x0, 0xee01) 252.28639ms ago: executing program 5 (id=3617): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x8}, 0x18) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000600)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x1) 252.10529ms ago: executing program 7 (id=3618): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./bus\x00', 0x100c000, &(0x7f0000000780)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@abort}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x747, 0x0, @perf_config_ext={0x0, 0x25}, 0x0, 0x3, 0xffff, 0x7, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f0000000080)='./bus\x00', 0x84182, 0x0) preadv2(r0, &(0x7f0000000640)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x10000, 0x1, 0x1d) 243.96419ms ago: executing program 2 (id=3619): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000001c0)={r2, 0x0, 0x7, 0x1}, 0x10) 181.63995ms ago: executing program 0 (id=3620): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x1, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) getpgrp(0x0) 165.92911ms ago: executing program 6 (id=3621): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0/../file0\x00') 145.79543ms ago: executing program 5 (id=3622): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)="c4", 0x1, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) shutdown(r0, 0x2) sendto$inet6(r0, &(0x7f0000000300)="6cf321", 0x3, 0x20000010, &(0x7f0000000000)={0xa, 0x4e21, 0x80, @dev={0xfe, 0x80, '\x00', 0xe}, 0x8}, 0x1c) 131.07925ms ago: executing program 6 (id=3623): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f0000000000)=0x9, 0x2) 127.60858ms ago: executing program 5 (id=3624): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x1}, {r1, 0x202}], 0x2, 0x0, 0x0, 0x0) 111.04673ms ago: executing program 0 (id=3625): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18004000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ff1900b802000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f00000002c0)='timer_start\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 96.68496ms ago: executing program 6 (id=3626): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000100)=ANY=[], 0x118) getgid() 90.6045ms ago: executing program 0 (id=3627): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8000}, 0x0, 0x0, r0, 0x3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) 79.58771ms ago: executing program 7 (id=3628): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0x2, 0x4e33, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}, {{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000700000083"], 0x18}}], 0x2, 0x0) 68.94873ms ago: executing program 6 (id=3629): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000000)={[{@grpquota}, {@lazytime}, {@data_err_abort}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f0000000dc0), 0x1, 0x4fe, &(0x7f0000000080)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x8, 0x2, 0x5}) 273.79µs ago: executing program 0 (id=3630): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) syz_usbip_server_init(0x4) 0s ago: executing program 7 (id=3631): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000580)={0x1, &(0x7f0000000280)=[{0x3a, 0xfb}]}) kernel console output (not intermixed with test programs): 3e syscall=202 compat=0 ip=0x7f36d9a7fed9 code=0x7ffc0000 [ 81.125368][ T29] audit: type=1326 audit(1733511540.747:3774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8049 comm="syz.6.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36d9a7fed9 code=0x7ffc0000 [ 81.149070][ T29] audit: type=1326 audit(1733511540.747:3775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8049 comm="syz.6.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d9a7fed9 code=0x7ffc0000 [ 81.172696][ T29] audit: type=1326 audit(1733511540.747:3776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8049 comm="syz.6.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d9a7fed9 code=0x7ffc0000 [ 81.228682][ T29] audit: type=1326 audit(1733511540.937:3777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8049 comm="syz.6.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f36d9a7fed9 code=0x7ffc0000 [ 81.364976][ T8028] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 81.375705][ T8068] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1908'. [ 81.395202][ T8028] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 81.407682][ T8028] EXT4-fs (loop2): This should not happen!! Data will be lost [ 81.407682][ T8028] [ 81.417409][ T8028] EXT4-fs (loop2): Total free blocks count 0 [ 81.423421][ T8028] EXT4-fs (loop2): Free/Dirty block details [ 81.429392][ T8028] EXT4-fs (loop2): free_blocks=68451041280 [ 81.435254][ T8028] EXT4-fs (loop2): dirty_blocks=16 [ 81.440451][ T8028] EXT4-fs (loop2): Block reservation details [ 81.446521][ T8028] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 81.448312][ T8076] loop5: detected capacity change from 0 to 1024 [ 81.495985][ T8081] ip6erspan0: entered promiscuous mode [ 81.501558][ T8081] ip6erspan0: entered allmulticast mode [ 81.516366][ T8076] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.529057][ T8076] ext4 filesystem being mounted at /333/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.544317][ T8076] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1912: bg 0: block 393: padding at end of block bitmap is not set [ 81.572401][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.583667][ T3891] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.653297][ T8098] Process accounting resumed [ 81.691680][ T8105] netlink: 'syz.5.1926': attribute type 10 has an invalid length. [ 81.713837][ T8105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.731068][ T8105] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 81.765713][ T8113] netlink: 133492 bytes leftover after parsing attributes in process `syz.2.1930'. [ 81.784549][ T8117] 9pnet_fd: p9_fd_create_tcp (8117): problem connecting socket to 127.0.0.1 [ 81.800000][ T8120] netlink: 'syz.5.1933': attribute type 10 has an invalid length. [ 81.810962][ T8120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.824748][ T8120] team0: Port device bond0 added [ 81.919286][ T8140] loop3: detected capacity change from 0 to 512 [ 81.932915][ T8138] loop0: detected capacity change from 0 to 2048 [ 81.952579][ T8140] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.966332][ T8138] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.978525][ T8140] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.983999][ T8138] ext4 filesystem being mounted at /411/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.019237][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.059749][ T7629] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.248335][ T8193] SELinux: syz.2.1953 (8193) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 82.359228][ T8208] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1958'. [ 82.537601][ T8233] bond1: entered promiscuous mode [ 82.542766][ T8233] bond1: entered allmulticast mode [ 82.558066][ T8233] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.580785][ T8233] bond1 (unregistering): Released all slaves [ 82.764047][ T8258] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 83.112768][ T8288] loop0: detected capacity change from 0 to 512 [ 83.122471][ T8288] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 83.144516][ T8288] EXT4-fs (loop0): 1 truncate cleaned up [ 83.159745][ T8288] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.187129][ T8296] team0: Port device bond0 removed [ 83.195474][ T8296] bond0: (slave batadv0): Releasing backup interface [ 83.208334][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.212071][ T8296] bridge_slave_0: left allmulticast mode [ 83.223170][ T8296] bridge_slave_0: left promiscuous mode [ 83.229211][ T8296] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.239085][ T8296] bridge_slave_1: left allmulticast mode [ 83.244782][ T8296] bridge_slave_1: left promiscuous mode [ 83.250683][ T8296] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.260320][ T8296] bond0: (slave bond_slave_1): Releasing backup interface [ 83.272207][ T8296] team0: Port device team_slave_0 removed [ 83.281360][ T8296] team0: Port device team_slave_1 removed [ 83.288405][ T8296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.296539][ T8296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.305172][ T8296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.312896][ T8296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.332189][ T8298] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 83.340457][ T8298] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 83.445585][ T8310] bond0: entered promiscuous mode [ 83.562131][ T8320] loop0: detected capacity change from 0 to 8192 [ 83.625083][ T8339] loop5: detected capacity change from 0 to 512 [ 83.631493][ T8337] loop2: detected capacity change from 0 to 1764 [ 83.632085][ T8337] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 83.683948][ T8339] ext4 filesystem being mounted at /353/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.728908][ T8348] bond0: entered promiscuous mode [ 83.811277][ T8366] loop3: detected capacity change from 0 to 1024 [ 83.837568][ T8370] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 83.924401][ T8385] xt_hashlimit: max too large, truncated to 1048576 [ 83.931920][ T8388] loop5: detected capacity change from 0 to 512 [ 83.964304][ T8388] EXT4-fs (loop5): 1 truncate cleaned up [ 83.979473][ T8397] loop0: detected capacity change from 0 to 512 [ 83.980203][ T8395] loop2: detected capacity change from 0 to 512 [ 83.987696][ T8388] EXT4-fs error (device loop5): htree_dirblock_to_tree:1083: inode #2: comm syz.5.2030: Directory hole found for htree leaf block 0 [ 84.017358][ T8397] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 84.027510][ T8397] System zones: 0-2, 18-18, 34-34 [ 84.033378][ T8395] ext4 filesystem being mounted at /429/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.034202][ T8397] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2033: bg 0: block 248: padding at end of block bitmap is not set [ 84.059079][ T8397] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.2033: Failed to acquire dquot type 1 [ 84.072172][ T8397] EXT4-fs (loop0): 1 truncate cleaned up [ 84.078820][ T8397] ext4 filesystem being mounted at /440/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.109695][ T8405] vhci_hcd: invalid port number 255 [ 84.604962][ T8455] netlink: 'syz.6.2049': attribute type 10 has an invalid length. [ 84.617078][ T8455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.627275][ T8455] batadv0: entered promiscuous mode [ 84.633324][ T8455] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 84.888421][ T8484] syzkaller1: entered promiscuous mode [ 84.894018][ T8484] syzkaller1: entered allmulticast mode [ 85.088820][ T8505] loop2: detected capacity change from 0 to 512 [ 85.124481][ T8505] ext4 filesystem being mounted at /435/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.295042][ T8535] loop6: detected capacity change from 0 to 1024 [ 85.548953][ T8568] syz.3.2082[8568] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.549085][ T8568] syz.3.2082[8568] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.573161][ T8568] syz.3.2082[8568] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.611333][ T8570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2083'. [ 85.702102][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 85.702121][ T29] audit: type=1326 audit(1733511545.427:3890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8575 comm="syz.2.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04bf21fed9 code=0x7ffc0000 [ 85.731853][ T29] audit: type=1326 audit(1733511545.427:3891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8575 comm="syz.2.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04bf21fed9 code=0x7ffc0000 [ 85.755352][ T29] audit: type=1326 audit(1733511545.427:3892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8575 comm="syz.2.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f04bf21fed9 code=0x7ffc0000 [ 85.778816][ T29] audit: type=1326 audit(1733511545.427:3893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8575 comm="syz.2.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04bf21fed9 code=0x7ffc0000 [ 85.793490][ T8535] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 85.820928][ T8535] EXT4-fs (loop6): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 85.833453][ T8535] EXT4-fs (loop6): This should not happen!! Data will be lost [ 85.833453][ T8535] [ 85.843244][ T8535] EXT4-fs (loop6): Total free blocks count 0 [ 85.849283][ T8535] EXT4-fs (loop6): Free/Dirty block details [ 85.855270][ T8535] EXT4-fs (loop6): free_blocks=68451041280 [ 85.861157][ T8535] EXT4-fs (loop6): dirty_blocks=16 [ 85.866512][ T8535] EXT4-fs (loop6): Block reservation details [ 85.872632][ T8535] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 85.883583][ T8584] loop0: detected capacity change from 0 to 128 [ 85.910933][ T8584] ext4 filesystem being mounted at /446/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 86.015967][ T29] audit: type=1326 audit(1733511545.737:3894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8585 comm="syz.5.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2171e2fed9 code=0x7ffc0000 [ 86.039758][ T29] audit: type=1326 audit(1733511545.737:3895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8585 comm="syz.5.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2171e2fed9 code=0x7ffc0000 [ 86.044844][ T8591] loop6: detected capacity change from 0 to 512 [ 86.063749][ T29] audit: type=1326 audit(1733511545.737:3896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8585 comm="syz.5.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f2171e2fed9 code=0x7ffc0000 [ 86.093499][ T29] audit: type=1326 audit(1733511545.737:3897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8585 comm="syz.5.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2171e2fed9 code=0x7ffc0000 [ 86.098051][ T8591] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 86.125487][ T8591] System zones: 0-2, 18-18, 34-34 [ 86.132246][ T8591] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2092: bg 0: block 248: padding at end of block bitmap is not set [ 86.147173][ T8591] Quota error (device loop6): write_blk: dquota write failed [ 86.154602][ T8591] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 86.164724][ T8591] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.2092: Failed to acquire dquot type 1 [ 86.177047][ T8591] EXT4-fs (loop6): 1 truncate cleaned up [ 86.183020][ T8591] ext4 filesystem being mounted at /346/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.304517][ T8612] netlink: 'syz.0.2099': attribute type 3 has an invalid length. [ 86.463654][ T8637] Invalid ELF header magic: != ELF [ 86.531480][ T8647] loop2: detected capacity change from 0 to 256 [ 86.553879][ T8647] FAT-fs (loop2): Directory bread(block 64) failed [ 86.561898][ T8647] FAT-fs (loop2): Directory bread(block 65) failed [ 86.578709][ T8647] FAT-fs (loop2): Directory bread(block 66) failed [ 86.593561][ T8647] FAT-fs (loop2): Directory bread(block 67) failed [ 86.611868][ T8647] FAT-fs (loop2): Directory bread(block 68) failed [ 86.630246][ T8647] FAT-fs (loop2): Directory bread(block 69) failed [ 86.654465][ T8647] FAT-fs (loop2): Directory bread(block 70) failed [ 86.677547][ T8647] FAT-fs (loop2): Directory bread(block 71) failed [ 86.694320][ T8647] FAT-fs (loop2): Directory bread(block 72) failed [ 86.701112][ T8647] FAT-fs (loop2): Directory bread(block 73) failed [ 86.730179][ T8647] syz.2.2110: attempt to access beyond end of device [ 86.730179][ T8647] loop2: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 86.744081][ T8647] syz.2.2110: attempt to access beyond end of device [ 86.744081][ T8647] loop2: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 86.771661][ T8667] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 86.779949][ T8667] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 86.810611][ T8671] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8671 comm=syz.2.2117 [ 86.898433][ T8681] loop6: detected capacity change from 0 to 1764 [ 86.922379][ T8681] ISOFS: unable to read i-node block [ 86.927748][ T8681] isofs_fill_super: get root inode failed [ 86.937199][ T8685] tipc: Enabling of bearer rejected, failed to enable media [ 87.026550][ T8693] loop2: detected capacity change from 0 to 128 [ 87.160202][ T8713] loop3: detected capacity change from 0 to 256 [ 87.200272][ T8713] FAT-fs (loop3): Directory bread(block 64) failed [ 87.222667][ T8713] FAT-fs (loop3): Directory bread(block 65) failed [ 87.231979][ T8713] FAT-fs (loop3): Directory bread(block 66) failed [ 87.239197][ T8713] FAT-fs (loop3): Directory bread(block 67) failed [ 87.245907][ T8713] FAT-fs (loop3): Directory bread(block 68) failed [ 87.252557][ T8713] FAT-fs (loop3): Directory bread(block 69) failed [ 87.273820][ T8713] FAT-fs (loop3): Directory bread(block 70) failed [ 87.281816][ T8713] FAT-fs (loop3): Directory bread(block 71) failed [ 87.288754][ T8713] FAT-fs (loop3): Directory bread(block 72) failed [ 87.295408][ T8713] FAT-fs (loop3): Directory bread(block 73) failed [ 87.358232][ T8713] syz.3.2137: attempt to access beyond end of device [ 87.358232][ T8713] loop3: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 87.387475][ T8743] loop2: detected capacity change from 0 to 512 [ 87.394372][ T8713] syz.3.2137: attempt to access beyond end of device [ 87.394372][ T8713] loop3: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 87.458142][ T8743] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 87.466509][ T8743] System zones: 0-2, 18-18, 34-34 [ 87.473515][ T8743] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2151: bg 0: block 248: padding at end of block bitmap is not set [ 87.495076][ T8761] loop3: detected capacity change from 0 to 128 [ 87.502094][ T8743] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.2151: Failed to acquire dquot type 1 [ 87.514078][ T8759] xt_CT: You must specify a L4 protocol and not use inversions on it [ 87.547054][ T8743] EXT4-fs (loop2): 1 truncate cleaned up [ 87.553357][ T8743] ext4 filesystem being mounted at /453/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.581783][ T8770] loop0: detected capacity change from 0 to 256 [ 87.592834][ T8765] loop6: detected capacity change from 0 to 512 [ 87.621702][ T8770] FAT-fs (loop0): Directory bread(block 64) failed [ 87.631051][ T8765] journal_path: Non-blockdev passed as './bus' [ 87.637281][ T8765] EXT4-fs: error: could not find journal device path [ 87.638628][ T8770] FAT-fs (loop0): Directory bread(block 65) failed [ 87.662045][ T8770] FAT-fs (loop0): Directory bread(block 66) failed [ 87.680723][ T8777] loop2: detected capacity change from 0 to 764 [ 87.685954][ T8770] FAT-fs (loop0): Directory bread(block 67) failed [ 87.703931][ T8770] FAT-fs (loop0): Directory bread(block 68) failed [ 87.711829][ T8777] Symlink component flag not implemented [ 87.715895][ T8770] FAT-fs (loop0): Directory bread(block 69) failed [ 87.731619][ T8777] Symlink component flag not implemented (129) [ 87.745434][ T8777] rock: directory entry would overflow storage [ 87.751733][ T8777] rock: sig=0x4f50, size=4, remaining=3 [ 87.757361][ T8777] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 87.767076][ T8770] FAT-fs (loop0): Directory bread(block 70) failed [ 87.771270][ T8786] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2171'. [ 87.773603][ T8770] FAT-fs (loop0): Directory bread(block 71) failed [ 87.790280][ T8770] FAT-fs (loop0): Directory bread(block 72) failed [ 87.796945][ T8770] FAT-fs (loop0): Directory bread(block 73) failed [ 87.830109][ T8770] syz.0.2164: attempt to access beyond end of device [ 87.830109][ T8770] loop0: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 87.843983][ T8770] syz.0.2164: attempt to access beyond end of device [ 87.843983][ T8770] loop0: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 87.963969][ T8805] loop0: detected capacity change from 0 to 1024 [ 87.976602][ T8805] EXT4-fs: Ignoring removed mblk_io_submit option [ 87.996323][ T8805] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 88.036373][ T8809] pim6reg: entered allmulticast mode [ 88.073125][ T8817] syz.0.2184[8817] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.073315][ T8817] syz.0.2184[8817] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.093824][ T8817] syz.0.2184[8817] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.111477][ T8820] loop5: detected capacity change from 0 to 256 [ 88.154412][ T8820] FAT-fs (loop5): Directory bread(block 64) failed [ 88.161097][ T8820] FAT-fs (loop5): Directory bread(block 65) failed [ 88.168979][ T8820] FAT-fs (loop5): Directory bread(block 66) failed [ 88.175574][ T8820] FAT-fs (loop5): Directory bread(block 67) failed [ 88.182177][ T8820] FAT-fs (loop5): Directory bread(block 68) failed [ 88.188933][ T8820] FAT-fs (loop5): Directory bread(block 69) failed [ 88.195570][ T8820] FAT-fs (loop5): Directory bread(block 70) failed [ 88.202175][ T8820] FAT-fs (loop5): Directory bread(block 71) failed [ 88.208825][ T8820] FAT-fs (loop5): Directory bread(block 72) failed [ 88.215402][ T8820] FAT-fs (loop5): Directory bread(block 73) failed [ 88.241505][ T8820] syz.5.2185: attempt to access beyond end of device [ 88.241505][ T8820] loop5: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 88.256724][ T8826] xt_hashlimit: max too large, truncated to 1048576 [ 88.256799][ T8820] syz.5.2185: attempt to access beyond end of device [ 88.256799][ T8820] loop5: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 88.301550][ T8828] loop3: detected capacity change from 0 to 2048 [ 88.352970][ T8] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.360534][ T8] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.367978][ T8] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.368071][ T8836] loop0: detected capacity change from 0 to 1024 [ 88.375373][ T8] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.388841][ T8828] Alternate GPT is invalid, using primary GPT. [ 88.389297][ T8] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.395546][ T8828] loop3: p1 p2 p3 [ 88.402825][ T8] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.413990][ T8] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.421457][ T8] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.426865][ T8836] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 88.428883][ T8] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.445511][ T8] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.452954][ T8] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.460394][ T8] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.467838][ T8] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.475284][ T8] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.482742][ T8] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.487709][ T8841] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 88.490224][ T8] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.490317][ T8] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.512620][ T8] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.520139][ T8] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.527586][ T8] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.535013][ T8] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.542468][ T8] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.554372][ T8] hid-generic 0000:0000:0000.0005: hidraw0: HID vffffff.fe Device [syz0] on syz1 [ 88.593055][ T8848] loop2: detected capacity change from 0 to 128 [ 88.599113][ T8849] loop3: detected capacity change from 0 to 512 [ 88.606685][ T8849] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 88.628312][ T8849] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 88.636317][ T8849] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 88.644724][ T8849] System zones: 0-1, 15-15, 18-18, 34-34 [ 88.650891][ T8849] EXT4-fs (loop3): orphan cleanup on readonly fs [ 88.659287][ T8849] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 88.671056][ T8857] loop2: detected capacity change from 0 to 256 [ 88.673910][ T8849] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 88.689694][ T8849] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2198: bg 0: block 40: padding at end of block bitmap is not set [ 88.711524][ T8849] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 88.728541][ T8863] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2204'. [ 88.737851][ T8849] EXT4-fs (loop3): 1 truncate cleaned up [ 88.754006][ T8849] EXT4-fs (loop3): shut down requested (1) [ 88.761798][ T8849] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=16 [ 88.771077][ T8849] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=16 [ 88.803574][ T8869] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2207'. [ 88.817223][ T8867] loop5: detected capacity change from 0 to 4096 [ 88.909430][ T8881] syz.6.2214[8881] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.909568][ T8881] syz.6.2214[8881] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.935874][ T8881] syz.6.2214[8881] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.988277][ T8892] netlink: 268 bytes leftover after parsing attributes in process `syz.0.2217'. [ 89.108168][ T8907] xt_CT: You must specify a L4 protocol and not use inversions on it [ 89.125559][ T8906] loop3: detected capacity change from 0 to 4096 [ 89.723071][ T8962] loop5: detected capacity change from 0 to 1024 [ 89.930948][ T8962] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 89.948437][ T8962] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 89.960782][ T8962] EXT4-fs (loop5): This should not happen!! Data will be lost [ 89.960782][ T8962] [ 89.970538][ T8962] EXT4-fs (loop5): Total free blocks count 0 [ 89.976797][ T8962] EXT4-fs (loop5): Free/Dirty block details [ 89.982874][ T8962] EXT4-fs (loop5): free_blocks=68451041280 [ 89.988760][ T8962] EXT4-fs (loop5): dirty_blocks=16 [ 89.993920][ T8962] EXT4-fs (loop5): Block reservation details [ 90.000108][ T8962] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 90.007040][ T8974] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2263'. [ 90.009038][ T8972] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2253'. [ 90.016072][ T8974] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2263'. [ 90.055755][ T8974] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2263'. [ 90.107433][ T8974] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2263'. [ 90.296212][ T9013] loop5: detected capacity change from 0 to 512 [ 90.328057][ T9013] ext4 filesystem being mounted at /411/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.433614][ T9024] loop2: detected capacity change from 0 to 512 [ 90.446929][ T9024] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.2276: corrupted in-inode xattr: invalid ea_ino [ 90.483511][ T9024] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.2276: couldn't read orphan inode 15 (err -117) [ 90.616307][ T9039] syz.3.2283[9039] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.616465][ T9039] syz.3.2283[9039] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.632000][ T9043] No such timeout policy "syz0" [ 90.662207][ T9039] syz.3.2283[9039] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.669860][ T9039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.694827][ T9047] loop6: detected capacity change from 0 to 1024 [ 90.711635][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 90.711654][ T29] audit: type=1400 audit(1733511550.447:4050): avc: denied { read } for pid=9048 comm="syz.5.2288" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 90.758011][ T9039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.777388][ T29] audit: type=1400 audit(1733511550.447:4051): avc: denied { open } for pid=9048 comm="syz.5.2288" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 90.801111][ T29] audit: type=1400 audit(1733511550.507:4052): avc: denied { read } for pid=9051 comm="syz.5.2289" dev="nsfs" ino=4026532855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 90.822272][ T29] audit: type=1400 audit(1733511550.507:4053): avc: denied { open } for pid=9051 comm="syz.5.2289" path="net:[4026532855]" dev="nsfs" ino=4026532855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 90.845564][ T29] audit: type=1400 audit(1733511550.507:4054): avc: denied { create } for pid=9051 comm="syz.5.2289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 90.869162][ T29] audit: type=1400 audit(1733511550.587:4055): avc: denied { bind } for pid=9051 comm="syz.5.2289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 90.912390][ T9047] ext4 filesystem being mounted at /370/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.984054][ T29] audit: type=1400 audit(1733511550.717:4056): avc: denied { create } for pid=9062 comm="syz.5.2290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 91.033153][ T29] audit: type=1400 audit(1733511550.747:4057): avc: denied { setopt } for pid=9062 comm="syz.5.2290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 91.201015][ T29] audit: type=1400 audit(1733511550.937:4058): avc: denied { create } for pid=9073 comm="syz.2.2296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.221341][ T29] audit: type=1400 audit(1733511550.937:4059): avc: denied { write } for pid=9073 comm="syz.2.2296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.490569][ T9098] syz.0.2295[9098] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.490669][ T9098] syz.0.2295[9098] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.515990][ T9098] syz.0.2295[9098] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.592731][ T9111] __nla_validate_parse: 6 callbacks suppressed [ 91.592750][ T9111] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2310'. [ 91.699859][ T9119] syz.0.2313[9119] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.699969][ T9119] syz.0.2313[9119] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.747039][ T9119] syz.0.2313[9119] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.749533][ T9122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.806275][ T9122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.019184][ T9147] loop2: detected capacity change from 0 to 512 [ 92.037903][ T9147] ext4 filesystem being mounted at /500/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.076732][ T9156] loop5: detected capacity change from 0 to 512 [ 92.115462][ T9156] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 92.123484][ T9156] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 92.137242][ T9156] System zones: 0-1, 15-15, 18-18, 34-34 [ 92.146736][ T9156] EXT4-fs (loop5): orphan cleanup on readonly fs [ 92.153166][ T9156] EXT4-fs warning (device loop5): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 92.167891][ T9156] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 92.186553][ T9156] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2340: bg 0: block 40: padding at end of block bitmap is not set [ 92.202543][ T9156] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 92.211527][ T9156] EXT4-fs (loop5): 1 truncate cleaned up [ 92.512846][ T9188] atomic_op ffff888122490128 conn xmit_atomic 0000000000000000 [ 92.548931][ T9180] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2338'. [ 92.759047][ T9216] io-wq is not configured for unbound workers [ 92.920679][ T9231] hub 6-0:1.0: USB hub found [ 92.924331][ T9237] pimreg: entered allmulticast mode [ 92.927123][ T9231] hub 6-0:1.0: 8 ports detected [ 92.936532][ T9237] pimreg: left allmulticast mode [ 93.016739][ T9] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x4 [ 93.024497][ T9] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x2 [ 93.032265][ T9246] loop3: detected capacity change from 0 to 512 [ 93.039003][ T9] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x3 [ 93.057771][ T9] hid-generic 0000:3000000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 93.073038][ T9246] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.2367: corrupted in-inode xattr: invalid ea_ino [ 93.089953][ T9256] loop5: detected capacity change from 0 to 512 [ 93.098741][ T9258] syz.2.2370[9258] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.099852][ T9246] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.2367: couldn't read orphan inode 15 (err -117) [ 93.144825][ T9256] ext4 filesystem being mounted at /434/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.275397][ T9284] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2385'. [ 93.448894][ T9311] loop2: detected capacity change from 0 to 1024 [ 93.458406][ T9309] hub 6-0:1.0: USB hub found [ 93.460859][ T9311] EXT4-fs: Ignoring removed orlov option [ 93.463229][ T9309] hub 6-0:1.0: 8 ports detected [ 93.468775][ T9311] EXT4-fs: Ignoring removed orlov option [ 93.501124][ T9317] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2399'. [ 93.529349][ T9319] syz_tun: Device is already in use. [ 93.550351][ T9323] netlink: 268 bytes leftover after parsing attributes in process `syz.6.2401'. [ 93.591240][ T9330] netlink: 'syz.2.2405': attribute type 13 has an invalid length. [ 93.599203][ T9330] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.2405'. [ 93.678626][ T9342] pimreg: entered allmulticast mode [ 93.686134][ T9342] pimreg: left allmulticast mode [ 94.075159][ T9373] IPv6: NLM_F_CREATE should be specified when creating new route [ 94.268929][ T9398] SELinux: syz.3.2437 (9398) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 94.411106][ T9413] syz_tun: Device is already in use. [ 94.505792][ T9423] loop2: detected capacity change from 0 to 512 [ 94.515557][ T9423] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 94.549540][ T9423] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 94.552721][ T9431] loop3: detected capacity change from 0 to 512 [ 94.557560][ T9423] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 94.557683][ T9423] System zones: 0-1, 15-15, 18-18, 34-34 [ 94.577898][ T9423] EXT4-fs (loop2): orphan cleanup on readonly fs [ 94.584333][ T9423] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 94.599028][ T9423] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 94.606388][ T9423] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2449: bg 0: block 40: padding at end of block bitmap is not set [ 94.620940][ T9423] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 94.627598][ T9431] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.629883][ T9423] EXT4-fs (loop2): 1 truncate cleaned up [ 94.658820][ T9423] EXT4-fs (loop2): shut down requested (1) [ 94.665438][ T9423] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=16 [ 94.675943][ T9423] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=16 [ 94.698966][ T9431] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #18: comm syz.3.2452: corrupted inode contents [ 94.712949][ T9431] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #18: comm syz.3.2452: mark_inode_dirty error [ 94.725026][ T9431] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #18: comm syz.3.2452: corrupted inode contents [ 94.738044][ T9431] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3006: inode #18: comm syz.3.2452: mark_inode_dirty error [ 94.754920][ T9431] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3009: inode #18: comm syz.3.2452: mark inode dirty (error -117) [ 94.777198][ T9431] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 94.799675][ T9445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2457'. [ 94.848992][ T9449] netlink: 'syz.3.2459': attribute type 1 has an invalid length. [ 95.222279][ T9483] loop2: detected capacity change from 0 to 128 [ 95.259512][ T9483] ext4 filesystem being mounted at /548/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 95.311500][ T9483] EXT4-fs error (device loop2): ext4_validate_block_bitmap:423: comm syz.2.2476: bg 0: bad block bitmap checksum [ 95.353722][ T9490] loop0: detected capacity change from 0 to 512 [ 95.369225][ T9490] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 95.381944][ T9490] EXT4-fs (loop0): 1 truncate cleaned up [ 95.670216][ T9520] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2492'. [ 95.718843][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 95.718861][ T29] audit: type=1400 audit(1733511555.457:4243): avc: denied { read } for pid=9523 comm="syz.3.2495" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 95.777034][ T29] audit: type=1400 audit(1733511555.487:4244): avc: denied { open } for pid=9523 comm="syz.3.2495" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 95.845002][ T29] audit: type=1400 audit(1733511555.577:4245): avc: denied { ioctl } for pid=9532 comm="syz.0.2498" path="socket:[23436]" dev="sockfs" ino=23436 ioctlcmd=0x48d4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.057513][ T29] audit: type=1326 audit(1733511555.797:4246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9547 comm="syz.6.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d9a7fed9 code=0x7ffc0000 [ 96.081228][ T29] audit: type=1326 audit(1733511555.797:4247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9547 comm="syz.6.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f36d9a7fed9 code=0x7ffc0000 [ 96.104745][ T29] audit: type=1326 audit(1733511555.797:4248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9547 comm="syz.6.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d9a7fed9 code=0x7ffc0000 [ 96.329841][ T29] audit: type=1400 audit(1733511556.067:4249): avc: denied { connect } for pid=9559 comm="syz.3.2511" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.359096][ T9553] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 96.374133][ T9553] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 96.405178][ T9563] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2508'. [ 96.454560][ T29] audit: type=1326 audit(1733511556.187:4250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9564 comm="syz.0.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9462fed9 code=0x7ffc0000 [ 96.493691][ T29] audit: type=1326 audit(1733511556.217:4251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9564 comm="syz.0.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fbc9462fed9 code=0x7ffc0000 [ 96.517384][ T29] audit: type=1326 audit(1733511556.217:4252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9564 comm="syz.0.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9462fed9 code=0x7ffc0000 [ 96.942149][ T9604] loop6: detected capacity change from 0 to 512 [ 96.958354][ T9606] loop3: detected capacity change from 0 to 512 [ 96.972918][ T9606] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 96.996734][ T9604] ext4 filesystem being mounted at /410/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.009070][ T9606] EXT4-fs (loop3): 1 truncate cleaned up [ 97.029046][ T9604] EXT4-fs error (device loop6): ext4_do_update_inode:5153: inode #18: comm syz.6.2529: corrupted inode contents [ 97.044091][ T9604] EXT4-fs error (device loop6): ext4_dirty_inode:6041: inode #18: comm syz.6.2529: mark_inode_dirty error [ 97.065435][ T9604] EXT4-fs error (device loop6): ext4_do_update_inode:5153: inode #18: comm syz.6.2529: corrupted inode contents [ 97.077790][ T9604] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3006: inode #18: comm syz.6.2529: mark_inode_dirty error [ 97.095556][ T9604] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3009: inode #18: comm syz.6.2529: mark inode dirty (error -117) [ 97.119230][ T9604] EXT4-fs warning (device loop6): ext4_evict_inode:276: xattr delete (err -117) [ 97.222120][ T9644] loop3: detected capacity change from 0 to 512 [ 97.256005][ T9644] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 97.287434][ T9644] EXT4-fs (loop3): 1 truncate cleaned up [ 97.297196][ T9644] EXT4-fs error (device loop3): ext4_generic_delete_entry:2687: inode #2: block 13: comm syz.3.2550: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 97.321687][ T9644] EXT4-fs error (device loop3) in ext4_delete_entry:2758: Corrupt filesystem [ 97.330118][ T9654] loop0: detected capacity change from 0 to 128 [ 97.339602][ T9655] bpf_get_probe_write_proto: 2 callbacks suppressed [ 97.339621][ T9655] syz.6.2555[9655] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.346656][ T9655] syz.6.2555[9655] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.358609][ T9655] syz.6.2555[9655] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.404986][ T9661] loop5: detected capacity change from 0 to 512 [ 97.423655][ T9661] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 97.424582][ T9663] loop3: detected capacity change from 0 to 256 [ 97.434960][ T9661] EXT4-fs (loop5): 1 truncate cleaned up [ 97.587995][ T9688] loop2: detected capacity change from 0 to 128 [ 97.589951][ T9689] loop3: detected capacity change from 0 to 512 [ 97.602620][ T9689] EXT4-fs: Ignoring removed nobh option [ 97.622273][ T9691] loop0: detected capacity change from 0 to 512 [ 97.661448][ T9699] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 97.673412][ T9689] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.694256][ T9691] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 97.704938][ T9689] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2571: bg 0: block 224: padding at end of block bitmap is not set [ 97.733600][ T9689] EXT4-fs (loop3): Remounting filesystem read-only [ 97.735520][ T9691] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 97.749682][ T9691] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.2572: corrupted in-inode xattr: e_value size too large [ 97.756544][ T9689] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 97.772715][ T9689] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 97.773102][ T9691] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.2572: couldn't read orphan inode 15 (err -117) [ 97.782703][ T9689] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 97.818065][ T9689] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 97.827398][ T9689] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 97.988575][ T9733] syz.2.2591[9733] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.988641][ T9733] syz.2.2591[9733] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.000450][ T9733] syz.2.2591[9733] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.209647][ T9769] loop2: detected capacity change from 0 to 2048 [ 98.237372][ T9769] EXT4-fs mount: 64 callbacks suppressed [ 98.237388][ T9769] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.292663][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.346543][ T9792] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 98.355227][ T9787] IPVS: stopping master sync thread 9792 ... [ 98.372788][ T9794] netlink: 'syz.3.2618': attribute type 4 has an invalid length. [ 98.380707][ T9794] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2618'. [ 98.388549][ T9796] netlink: 'syz.6.2619': attribute type 3 has an invalid length. [ 98.437674][ T9802] loop2: detected capacity change from 0 to 512 [ 98.444435][ T9802] EXT4-fs: Ignoring removed nobh option [ 98.457718][ T9802] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.470388][ T9802] ext4 filesystem being mounted at /568/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.485771][ T9802] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2622: bg 0: block 224: padding at end of block bitmap is not set [ 98.500604][ T9802] EXT4-fs (loop2): Remounting filesystem read-only [ 98.509189][ T9802] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 98.518098][ T9802] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 98.527305][ T9802] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 98.536354][ T9802] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 98.545199][ T9802] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 98.566654][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.570337][ T9807] syz.3.2624[9807] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.575867][ T9807] syz.3.2624[9807] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.589800][ T9807] syz.3.2624[9807] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.670611][ T9818] loop5: detected capacity change from 0 to 1024 [ 98.690729][ T9823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.699462][ T9818] EXT4-fs: Ignoring removed mblk_io_submit option [ 98.707166][ T9823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.727246][ T9818] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.742254][ T9830] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2633'. [ 98.760758][ T3891] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.802200][ T9838] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2646'. [ 98.839382][ T9844] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 99.066142][ T9868] netlink: 'syz.5.2652': attribute type 322 has an invalid length. [ 99.107161][ T9872] loop2: detected capacity change from 0 to 512 [ 99.114216][ T9872] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 99.123765][ T9872] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 99.132115][ T9872] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.2654: corrupted in-inode xattr: e_value size too large [ 99.133641][ T9874] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2655'. [ 99.149817][ T9872] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.2654: couldn't read orphan inode 15 (err -117) [ 99.169604][ T9872] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.200070][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.285375][ T9891] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2663'. [ 99.342862][ T9901] syzkaller1: entered allmulticast mode [ 99.382660][ T9907] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2671'. [ 99.512496][ T9918] loop2: detected capacity change from 0 to 1024 [ 99.519409][ T9918] EXT4-fs: Ignoring removed mblk_io_submit option [ 99.541073][ T9918] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.584067][ T9930] netlink: 'syz.6.2679': attribute type 4 has an invalid length. [ 99.592148][ T9930] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2679'. [ 99.607577][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.772173][ T9948] loop2: detected capacity change from 0 to 512 [ 99.782884][ T9952] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 99.794380][ T9948] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 99.808429][ T9948] EXT4-fs (loop2): 1 truncate cleaned up [ 99.814727][ T9948] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.912093][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.917707][ T9971] netlink: 'syz.3.2697': attribute type 1 has an invalid length. [ 99.962046][ T9977] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2702'. [ 100.036959][ T9995] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 100.159419][T10018] SELinux: policydb version 287172436 does not match my version range 15-33 [ 100.169150][T10018] SELinux: failed to load policy [ 100.217403][T10026] loop0: detected capacity change from 0 to 512 [ 100.228897][T10028] loop6: detected capacity change from 0 to 512 [ 100.248724][T10026] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.262527][T10026] ext4 filesystem being mounted at /554/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.274383][T10028] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.288832][T10028] ext4 filesystem being mounted at /456/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.318008][ T4057] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.333648][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.386081][T10048] loop3: detected capacity change from 0 to 512 [ 100.392919][T10048] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 100.412002][T10048] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 100.420195][T10048] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.2733: corrupted in-inode xattr: e_value size too large [ 100.435839][T10048] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.2733: couldn't read orphan inode 15 (err -117) [ 100.449449][T10048] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.471887][T10053] syzkaller1: entered allmulticast mode [ 100.478366][ T7629] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.585978][T10046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.603192][T10046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.808833][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 100.808850][ T29] audit: type=1326 audit(1733511560.547:4426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10079 comm="syz.6.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d9a7fed9 code=0x7ffc0000 [ 100.839692][ T29] audit: type=1326 audit(1733511560.547:4427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10079 comm="syz.6.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d9a7fed9 code=0x7ffc0000 [ 100.863472][ T29] audit: type=1326 audit(1733511560.547:4428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10079 comm="syz.6.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f36d9a7fed9 code=0x7ffc0000 [ 100.887017][ T29] audit: type=1326 audit(1733511560.547:4429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10079 comm="syz.6.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d9a7fed9 code=0x7ffc0000 [ 100.910551][ T29] audit: type=1326 audit(1733511560.547:4430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10079 comm="syz.6.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d9a7fed9 code=0x7ffc0000 [ 100.955969][T10085] IPv6: Can't replace route, no match found [ 100.979952][ T29] audit: type=1326 audit(1733511560.717:4431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10087 comm="syz.6.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d9a7fed9 code=0x7ffc0000 [ 101.003678][ T29] audit: type=1326 audit(1733511560.717:4432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10087 comm="syz.6.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d9a7fed9 code=0x7ffc0000 [ 101.047624][ T29] audit: type=1326 audit(1733511560.767:4433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10087 comm="syz.6.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36d9a7fed9 code=0x7ffc0000 [ 101.071262][ T29] audit: type=1326 audit(1733511560.767:4434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10087 comm="syz.6.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d9a7fed9 code=0x7ffc0000 [ 101.095012][ T29] audit: type=1326 audit(1733511560.767:4435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10087 comm="syz.6.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d9a7fed9 code=0x7ffc0000 [ 101.122557][T10094] IPVS: stopping master sync thread 4127 ... [ 101.440347][T10139] syz.2.2772: attempt to access beyond end of device [ 101.440347][T10139] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 101.475583][T10141] SELinux: policydb version -2006649175 does not match my version range 15-33 [ 101.485253][T10147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2776'. [ 101.494815][T10141] SELinux: failed to load policy [ 101.580833][T10162] netlink: 'syz.6.2784': attribute type 13 has an invalid length. [ 101.784373][T10203] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=44 sclass=netlink_xfrm_socket pid=10203 comm=syz.2.2799 [ 101.797107][T10203] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=44 sclass=netlink_xfrm_socket pid=10203 comm=syz.2.2799 [ 101.911553][T10214] netlink: 'syz.2.2805': attribute type 1 has an invalid length. [ 101.995657][T10222] loop5: detected capacity change from 0 to 512 [ 102.005784][T10222] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 102.019772][T10222] EXT4-fs (loop5): 1 truncate cleaned up [ 102.026574][T10222] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.068269][ T3891] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.319845][T10268] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 102.320074][T10267] IPVS: stopping master sync thread 10268 ... [ 102.586896][T10288] loop0: detected capacity change from 0 to 128 [ 102.605517][T10288] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.618166][T10288] ext4 filesystem being mounted at /576/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 102.668554][ T3298] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.670121][T10293] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 102.678906][T10292] IPVS: stopping master sync thread 10293 ... [ 103.045777][T10326] loop0: detected capacity change from 0 to 512 [ 103.056291][T10326] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 103.085352][T10328] netlink: 'syz.2.2858': attribute type 7 has an invalid length. [ 103.093189][T10328] netlink: 'syz.2.2858': attribute type 8 has an invalid length. [ 103.105089][T10328] gretap0: entered promiscuous mode [ 103.111632][T10328] batadv_slave_1: entered promiscuous mode [ 103.192796][T10328] gretap0: left promiscuous mode [ 103.198159][T10326] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.2855: iget: bad i_size value: -67835469387268086 [ 103.213118][T10326] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.2855: couldn't read orphan inode 15 (err -117) [ 103.225738][T10326] EXT4-fs (loop0): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.239115][T10326] ext2 filesystem being mounted at /584/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.264140][T10328] batadv_slave_1: left promiscuous mode [ 103.270606][ T3298] EXT4-fs (loop0): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 103.307496][T10343] loop3: detected capacity change from 0 to 256 [ 103.378245][T10353] loop2: detected capacity change from 0 to 128 [ 103.389574][T10353] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 103.397650][T10353] FAT-fs (loop2): Filesystem has been set read-only [ 103.412599][T10353] FAT-fs (loop2): error, invalid FAT chain (i_pos 548, last_block 8) [ 103.422781][T10357] __nla_validate_parse: 13 callbacks suppressed [ 103.422835][T10357] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2872'. [ 103.432414][T10358] loop5: detected capacity change from 0 to 1024 [ 103.438837][T10353] FAT-fs (loop2): error, corrupted file size (i_pos 548, 522) [ 103.476626][T10363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2874'. [ 103.510102][T10358] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.580899][ T3891] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.623463][T10380] SELinux: failed to load policy [ 104.201803][T10416] loop0: detected capacity change from 0 to 512 [ 104.223792][T10416] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 104.262805][T10416] EXT4-fs (loop0): 1 truncate cleaned up [ 104.282575][T10416] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.346988][T10416] EXT4-fs error (device loop0): ext4_xattr_inode_iget:440: comm syz.0.2897: inode #1073372648: comm syz.0.2897: iget: illegal inode # [ 104.362025][T10421] ebtables: ebtables: counters copy to user failed while replacing table [ 104.394824][T10416] EXT4-fs error (device loop0): ext4_xattr_inode_iget:445: comm syz.0.2897: error while reading EA inode 1073372648 err=-117 [ 104.431563][T10416] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2977: inode #15: comm syz.0.2897: corrupted xattr block 33: invalid header [ 104.456864][T10416] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 104.510551][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.585208][T10437] ALSA: seq fatal error: cannot create timer (-22) [ 104.680349][ T3375] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x4 [ 104.688153][ T3375] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x2 [ 104.719002][ T3375] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x3 [ 104.745041][ T3375] hid-generic 0000:3000000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 104.909610][T10453] loop0: detected capacity change from 0 to 512 [ 104.928165][T10453] EXT4-fs: Ignoring removed orlov option [ 104.930999][T10455] loop5: detected capacity change from 0 to 1024 [ 104.942145][T10453] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 104.966122][T10453] EXT4-fs (loop0): 1 orphan inode deleted [ 104.971923][T10453] EXT4-fs (loop0): 1 truncate cleaned up [ 104.986187][T10453] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.020180][T10453] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 105.047755][T10455] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.086773][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.179142][ T3891] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.208015][T10461] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2917'. [ 105.217076][T10461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2917'. [ 105.313932][T10466] syz.0.2919[10466] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.314141][T10466] syz.0.2919[10466] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.349704][T10466] syz.0.2919[10466] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.400173][T10471] loop6: detected capacity change from 0 to 512 [ 105.423523][T10473] binfmt_misc: register: failed to install interpreter file ./file0 [ 105.448069][T10475] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2923'. [ 105.456674][T10471] journal_path: Lookup failure for './file0' [ 105.457133][T10475] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2923'. [ 105.463010][T10471] EXT4-fs: error: could not find journal device path [ 105.733159][T10498] loop6: detected capacity change from 0 to 512 [ 105.758658][T10498] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 105.787150][T10498] EXT4-fs error (device loop6): ext4_orphan_get:1389: inode #15: comm syz.6.2933: iget: bad i_size value: -67835469387268086 [ 105.822788][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 105.822804][ T29] audit: type=1400 audit(1733511565.557:4625): avc: denied { write } for pid=10503 comm="syz.5.2937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 105.879848][T10498] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.2933: couldn't read orphan inode 15 (err -117) [ 105.914725][T10498] EXT4-fs (loop6): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.940155][T10498] ext2 filesystem being mounted at /500/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.007180][ T4057] EXT4-fs (loop6): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 106.065494][T10517] netlink: 'syz.6.2943': attribute type 13 has an invalid length. [ 106.073440][T10517] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2943'. [ 106.118308][T10517] syz_tun: refused to change device tx_queue_len [ 106.124864][T10517] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 106.131554][T10525] loop0: detected capacity change from 0 to 512 [ 106.161849][T10525] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 106.196846][T10525] EXT4-fs (loop0): 1 truncate cleaned up [ 106.204122][T10525] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.303005][ T29] audit: type=1326 audit(1733511566.037:4626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10527 comm="syz.6.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d9a7fed9 code=0x7ffc0000 [ 106.375109][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.375855][ T29] audit: type=1326 audit(1733511566.077:4627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10527 comm="syz.6.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d9a7fed9 code=0x7ffc0000 [ 106.408087][ T29] audit: type=1326 audit(1733511566.077:4628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10527 comm="syz.6.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36d9a7fed9 code=0x7ffc0000 [ 106.431623][ T29] audit: type=1326 audit(1733511566.077:4629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10527 comm="syz.6.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d9a7fed9 code=0x7ffc0000 [ 106.455256][ T29] audit: type=1326 audit(1733511566.077:4630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10527 comm="syz.6.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d9a7fed9 code=0x7ffc0000 [ 106.478965][ T29] audit: type=1326 audit(1733511566.077:4631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10527 comm="syz.6.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36d9a7fed9 code=0x7ffc0000 [ 106.502574][ T29] audit: type=1326 audit(1733511566.087:4632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10527 comm="syz.6.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d9a7fed9 code=0x7ffc0000 [ 106.526304][ T29] audit: type=1326 audit(1733511566.087:4633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10527 comm="syz.6.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d9a7fed9 code=0x7ffc0000 [ 106.549932][ T29] audit: type=1326 audit(1733511566.087:4634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10527 comm="syz.6.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36d9a7fed9 code=0x7ffc0000 [ 106.630799][T10532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.655911][T10532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.784569][T10538] loop6: detected capacity change from 0 to 512 [ 106.818744][T10538] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 106.854078][T10538] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 106.875931][T10538] System zones: 1-12 [ 106.880094][T10538] EXT4-fs (loop6): orphan cleanup on readonly fs [ 106.906653][T10538] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2952: bg 0: block 361: padding at end of block bitmap is not set [ 106.943434][T10543] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2954'. [ 106.966365][T10538] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 107.006210][T10538] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #11: comm syz.6.2952: attempt to clear invalid blocks 33619980 len 1 [ 107.041308][T10538] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2952: invalid indirect mapped block 1811939328 (level 0) [ 107.090804][T10538] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2952: invalid indirect mapped block 2 (level 2) [ 107.127032][T10538] EXT4-fs (loop6): 1 truncate cleaned up [ 107.146824][T10538] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 107.175973][T10538] EXT4-fs (loop6): ext4_remount: Checksum for group 0 failed (17031!=33349) [ 107.246153][ T4057] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 107.277360][T10551] loop5: detected capacity change from 0 to 256 [ 107.305541][T10551] FAT-fs (loop5): codepage cp1251 not found [ 107.490015][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 107.497523][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 107.505179][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 107.535720][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 107.543295][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 107.550844][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 107.558281][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 107.565689][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 107.573186][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 107.580684][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 107.588118][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 107.595681][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 107.603133][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 107.610585][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 107.670521][T10577] loop0: detected capacity change from 0 to 256 [ 107.690637][T10578] loop3: detected capacity change from 0 to 512 [ 107.706350][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 107.713923][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 107.721358][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 107.728807][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 107.736295][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 107.743773][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 107.751387][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 107.758861][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 107.766294][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 107.773831][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 107.781349][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 107.789171][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 107.796849][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 107.804254][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 107.811698][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 107.819133][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 107.832969][T10578] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.836594][ T9] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 107.860358][T10583] SELinux: policydb version -962592231 does not match my version range 15-33 [ 107.871969][T10578] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.884225][T10583] SELinux: failed to load policy [ 107.999294][ T7629] EXT4-fs error (device loop3): ext4_readdir:261: inode #12: block 32: comm syz-executor: path /232/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 108.523316][T10632] pim6reg: entered allmulticast mode [ 108.546629][T10632] pim6reg: left allmulticast mode [ 108.658676][T10646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3003'. [ 108.662251][T10648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3005'. [ 108.687587][T10652] loop6: detected capacity change from 0 to 512 [ 108.749222][T10652] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.767619][T10652] ext4 filesystem being mounted at /516/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.817833][T10652] msdos: Unknown parameter '18446744073709551615Oþø¥þ›ŸG5”û©s+01777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ¨ÐÊ3†…ƒPq{ÚP [ 108.817833][T10652] n'º|$@OOݱµ’-®+·el' [ 108.862056][ T4057] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.926354][T10673] loop0: detected capacity change from 0 to 2048 [ 108.959636][T10673] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.004058][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.081258][T10688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3020'. [ 109.175879][T10692] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 109.307147][T10704] loop0: detected capacity change from 0 to 2048 [ 109.338189][T10704] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.360912][T10704] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 109.387191][T10710] syz.5.3029: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 109.396991][T10704] EXT4-fs (loop0): Remounting filesystem read-only [ 109.402120][T10710] CPU: 1 UID: 0 PID: 10710 Comm: syz.5.3029 Not tainted 6.13.0-rc1-syzkaller-00182-gb8f52214c61a #0 [ 109.419558][T10710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 109.429651][T10710] Call Trace: [ 109.432950][T10710] [ 109.435897][T10710] dump_stack_lvl+0xf2/0x150 [ 109.440626][T10710] dump_stack+0x15/0x1a [ 109.444893][T10710] warn_alloc+0x145/0x1b0 [ 109.449261][T10710] ? __vmalloc_node_range_noprof+0x88/0xe80 [ 109.455188][T10710] ? common_lsm_audit+0x920/0x1010 [ 109.460336][T10710] __vmalloc_node_range_noprof+0xaa/0xe80 [ 109.466091][T10710] ? avc_denied+0xf1/0x110 [ 109.470616][T10710] ? xfd_validate_state+0x46/0xf0 [ 109.475671][T10710] ? save_fpregs_to_fpstate+0x102/0x160 [ 109.481247][T10710] ? should_fail_ex+0x31/0x230 [ 109.486036][T10710] ? xskq_create+0x36/0xd0 [ 109.490537][T10710] ? should_failslab+0x8f/0xb0 [ 109.495338][T10710] vmalloc_user_noprof+0x59/0x70 [ 109.500327][T10710] ? xskq_create+0x79/0xd0 [ 109.504788][T10710] xskq_create+0x79/0xd0 [ 109.509051][T10710] xsk_init_queue+0x82/0xd0 [ 109.513582][T10710] xsk_setsockopt+0x409/0x520 [ 109.518421][T10710] ? __pfx_xsk_setsockopt+0x10/0x10 [ 109.523722][T10710] __sys_setsockopt+0x187/0x200 [ 109.528680][T10710] __x64_sys_setsockopt+0x66/0x80 [ 109.533781][T10710] x64_sys_call+0x282e/0x2dc0 [ 109.538564][T10710] do_syscall_64+0xc9/0x1c0 [ 109.543097][T10710] ? clear_bhb_loop+0x55/0xb0 [ 109.547804][T10710] ? clear_bhb_loop+0x55/0xb0 [ 109.552503][T10710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.558476][T10710] RIP: 0033:0x7f2171e2fed9 [ 109.562943][T10710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.582692][T10710] RSP: 002b:00007f21704a7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 109.591166][T10710] RAX: ffffffffffffffda RBX: 00007f2171ff5fa0 RCX: 00007f2171e2fed9 [ 109.599154][T10710] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 109.607149][T10710] RBP: 00007f2171ea3cc8 R08: 0000000000000020 R09: 0000000000000000 [ 109.615156][T10710] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000 [ 109.623211][T10710] R13: 0000000000000000 R14: 00007f2171ff5fa0 R15: 00007ffe700f4c28 [ 109.631214][T10710] [ 109.634415][T10710] Mem-Info: [ 109.636411][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.637704][T10710] active_anon:19939 inactive_anon:35 isolated_anon:0 [ 109.637704][T10710] active_file:9000 inactive_file:12770 isolated_file:0 [ 109.637704][T10710] unevictable:0 dirty:318 writeback:0 [ 109.637704][T10710] slab_reclaimable:2955 slab_unreclaimable:15256 [ 109.637704][T10710] mapped:28077 shmem:17415 pagetables:702 [ 109.637704][T10710] sec_pagetables:0 bounce:0 [ 109.637704][T10710] kernel_misc_reclaimable:0 [ 109.637704][T10710] free:1879710 free_pcp:4625 free_cma:0 [ 109.691848][T10710] Node 0 active_anon:79756kB inactive_anon:140kB active_file:36000kB inactive_file:51080kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:112308kB dirty:1272kB writeback:0kB shmem:69660kB writeback_tmp:0kB kernel_stack:2848kB pagetables:2808kB sec_pagetables:0kB all_unreclaimable? no [ 109.720476][T10710] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 109.747566][T10710] lowmem_reserve[]: 0 2866 7844 0 [ 109.752833][T10710] Node 0 DMA32 free:2950384kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953916kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 109.781317][T10710] lowmem_reserve[]: 0 0 4978 0 [ 109.786205][T10710] Node 0 Normal free:4553096kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:79756kB inactive_anon:140kB active_file:36000kB inactive_file:51080kB unevictable:0kB writepending:1272kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:15336kB local_pcp:1908kB free_cma:0kB [ 109.809826][T10718] loop2: detected capacity change from 0 to 512 [ 109.816911][T10710] lowmem_reserve[]: 0 0 0 0 [ 109.827860][T10710] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 109.840674][T10710] Node 0 DMA32: 4*4kB (M) 4*8kB (M) 4*16kB (M) 6*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950384kB [ 109.856923][T10710] Node 0 Normal: 468*4kB (UME) 185*8kB (UME) 129*16kB (UM) 117*32kB (UME) 116*64kB (UME) 80*128kB (UME) 41*256kB (UM) 32*512kB (UM) 36*1024kB (UME) 33*2048kB (UME) 1073*4096kB (UM) = 4553160kB [ 109.864327][T10718] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 109.876181][T10710] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 109.895320][T10710] 39037 total pagecache pages [ 109.900111][T10710] 85 pages in swap cache [ 109.904494][T10710] Free swap = 124068kB [ 109.908866][T10710] Total swap = 124996kB [ 109.913041][T10710] 2097051 pages RAM [ 109.916881][T10710] 0 pages HighMem/MovableOnly [ 109.921561][T10710] 80180 pages reserved [ 109.981574][T10718] EXT4-fs (loop2): 1 truncate cleaned up [ 109.987617][T10718] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.042952][T10731] loop6: detected capacity change from 0 to 128 [ 110.082573][T10731] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.096825][T10731] ext4 filesystem being mounted at /519/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.115325][T10718] EXT4-fs error (device loop2): ext4_xattr_inode_iget:440: comm syz.2.3034: inode #1073372648: comm syz.2.3034: iget: illegal inode # [ 110.144985][T10718] EXT4-fs error (device loop2): ext4_xattr_inode_iget:445: comm syz.2.3034: error while reading EA inode 1073372648 err=-117 [ 110.173726][T10718] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2977: inode #15: comm syz.2.3034: corrupted xattr block 33: invalid header [ 110.188780][T10718] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 110.209203][T10735] loop5: detected capacity change from 0 to 512 [ 110.229805][ T4057] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.268659][T10741] loop6: detected capacity change from 0 to 128 [ 110.275201][T10741] EXT4-fs: Ignoring removed nobh option [ 110.282417][T10741] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.294836][T10741] ext4 filesystem being mounted at /521/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 110.326425][ T4057] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.403669][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.414450][T10735] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.429077][T10735] ext4 filesystem being mounted at /578/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.443748][T10735] msdos: Unknown parameter '18446744073709551615Oþø¥þ›ŸG5”û©s+01777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ¨ÐÊ3†…ƒPq{ÚP [ 110.443748][T10735] n'º|$@OOݱµ’-®+·el' [ 110.480670][ T3891] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.614273][T10762] Invalid ELF header magic: != ELF [ 110.743108][T10772] loop0: detected capacity change from 0 to 256 [ 110.784397][T10776] loop0: detected capacity change from 0 to 512 [ 110.795407][T10776] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 110.806160][T10776] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 110.814118][T10776] System zones: 1-12 [ 110.819607][T10776] EXT4-fs (loop0): orphan cleanup on readonly fs [ 110.826402][T10776] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3058: bg 0: block 361: padding at end of block bitmap is not set [ 110.842247][T10776] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 110.864895][T10776] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.3058: attempt to clear invalid blocks 33619980 len 1 [ 110.880311][T10776] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3058: invalid indirect mapped block 1811939328 (level 0) [ 110.894562][T10776] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3058: invalid indirect mapped block 2 (level 2) [ 110.911081][T10776] EXT4-fs (loop0): 1 truncate cleaned up [ 110.917122][T10776] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 110.934348][ T29] kauditd_printk_skb: 230 callbacks suppressed [ 110.934363][ T29] audit: type=1400 audit(1733511570.667:4865): avc: denied { remount } for pid=10775 comm="syz.0.3058" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 110.965039][ T29] audit: type=1400 audit(1733511570.697:4866): avc: denied { create } for pid=10778 comm="syz.6.3060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 111.011231][ T29] audit: type=1400 audit(1733511570.727:4867): avc: denied { bind } for pid=10778 comm="syz.6.3060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 111.031163][ T29] audit: type=1400 audit(1733511570.727:4868): avc: denied { listen } for pid=10778 comm="syz.6.3060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 111.078739][T10783] loop6: detected capacity change from 0 to 1024 [ 111.086258][T10776] EXT4-fs (loop0): ext4_remount: Checksum for group 0 failed (17031!=33349) [ 111.109558][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 111.132097][T10783] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.150826][ T29] audit: type=1400 audit(1733511570.887:4869): avc: denied { link } for pid=10782 comm="syz.6.3062" name="file0" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 111.184593][T10788] syz.0.3063[10788] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.184728][T10788] syz.0.3063[10788] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.197565][T10788] syz.0.3063[10788] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.212596][T10788] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3063'. [ 111.271110][ T29] audit: type=1400 audit(1733511571.007:4870): avc: denied { create } for pid=10789 comm="syz.0.3065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 111.294493][ T29] audit: type=1400 audit(1733511571.027:4871): avc: denied { write } for pid=10789 comm="syz.0.3065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 111.392676][ T4057] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.416793][ T29] audit: type=1400 audit(1733511571.147:4872): avc: denied { mount } for pid=10794 comm="syz.5.3049" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 111.438889][ T29] audit: type=1400 audit(1733511571.157:4873): avc: denied { unmount } for pid=3891 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 111.525003][T10808] loop5: detected capacity change from 0 to 128 [ 111.548646][ T29] audit: type=1400 audit(1733511571.277:4874): avc: denied { connect } for pid=10811 comm="syz.0.3072" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.583843][T10808] EXT4-fs: Ignoring removed nobh option [ 111.643252][T10808] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 111.666274][T10808] ext4 filesystem being mounted at /581/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 111.726981][ T3891] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.952113][T10821] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3075'. [ 111.981336][T10823] loop2: detected capacity change from 0 to 512 [ 111.988186][T10823] EXT4-fs: Ignoring removed i_version option [ 111.994207][T10823] EXT4-fs: Ignoring removed nobh option [ 112.003046][T10823] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 112.017475][T10823] EXT4-fs (loop2): 1 truncate cleaned up [ 112.018496][T10825] loop5: detected capacity change from 0 to 512 [ 112.023620][T10823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.053928][T10825] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 112.086403][T10823] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 112.110565][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.137337][T10825] EXT4-fs (loop5): 1 truncate cleaned up [ 112.144663][T10825] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.179341][T10825] EXT4-fs error (device loop5): ext4_xattr_inode_iget:440: comm syz.5.3076: inode #1073372648: comm syz.5.3076: iget: illegal inode # [ 112.194799][T10825] EXT4-fs error (device loop5): ext4_xattr_inode_iget:445: comm syz.5.3076: error while reading EA inode 1073372648 err=-117 [ 112.211368][T10825] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2977: inode #15: comm syz.5.3076: corrupted xattr block 33: invalid header [ 112.225294][T10825] EXT4-fs warning (device loop5): ext4_evict_inode:276: xattr delete (err -117) [ 112.319719][ T3891] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.373533][T10838] loop5: detected capacity change from 0 to 2048 [ 112.640269][T10854] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3085'. [ 112.818217][T10862] sg_write: data in/out 1048540/14 bytes for SCSI command 0x0-- guessing data in; [ 112.818217][T10862] program syz.5.3093 not setting count and/or reply_len properly [ 113.512205][T10907] hub 6-0:1.0: USB hub found [ 113.516973][T10907] hub 6-0:1.0: 8 ports detected [ 113.624303][T10913] loop5: detected capacity change from 0 to 2048 [ 113.663923][T10913] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.788489][T10927] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 113.797539][T10927] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 113.838505][T10933] syz.5.3123[10933] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.838585][T10933] syz.5.3123[10933] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.869037][T10933] syz.5.3123[10933] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.902568][T10939] loop0: detected capacity change from 0 to 512 [ 113.932239][T10943] loop5: detected capacity change from 0 to 128 [ 113.940142][T10939] EXT4-fs: Ignoring removed bh option [ 113.947928][T10943] ext4 filesystem being mounted at /599/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.989297][T10939] ext4 filesystem being mounted at /672/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.068140][T10956] netlink: 'syz.0.3133': attribute type 1 has an invalid length. [ 114.160070][T10968] syz.5.3138[10968] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.160144][T10968] syz.5.3138[10968] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.172634][T10968] syz.5.3138[10968] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.244769][T10975] loop0: detected capacity change from 0 to 128 [ 114.353839][T10985] syz.5.3146[10985] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.359994][T10985] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3146'. [ 114.416886][T10975] ext4 filesystem being mounted at /677/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.639560][T11009] SELinux: syz.6.3156 (11009) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 114.908713][T11026] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3164'. [ 115.067275][T11035] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 115.157766][ T3375] IPVS: starting estimator thread 0... [ 115.265884][T11043] IPVS: using max 2304 ests per chain, 115200 per kthread [ 115.511760][T11073] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3177'. [ 115.520825][T11073] netlink: 'syz.5.3177': attribute type 7 has an invalid length. [ 115.528700][T11073] netlink: 'syz.5.3177': attribute type 8 has an invalid length. [ 115.536536][T11073] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3177'. [ 115.582843][T11073] gretap0: entered promiscuous mode [ 115.590640][T11073] batadv_slave_1: entered promiscuous mode [ 115.955027][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 115.955042][ T29] audit: type=1400 audit(1733511575.687:5016): avc: denied { write } for pid=11097 comm="syz.5.3189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 115.989713][T11100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.015988][T11100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.034402][ T29] audit: type=1400 audit(1733511575.727:5017): avc: denied { read } for pid=11097 comm="syz.5.3189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 116.054184][ T29] audit: type=1400 audit(1733511575.727:5018): avc: denied { read write } for pid=11098 comm="syz.6.3190" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 116.077811][ T29] audit: type=1400 audit(1733511575.727:5019): avc: denied { open } for pid=11098 comm="syz.6.3190" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 116.101312][ T29] audit: type=1400 audit(1733511575.727:5020): avc: denied { ioctl } for pid=11098 comm="syz.6.3190" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 116.249984][T11110] bpf_get_probe_write_proto: 2 callbacks suppressed [ 116.250004][T11110] syz.0.3194[11110] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.267549][T11110] syz.0.3194[11110] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.295870][T11110] syz.0.3194[11110] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.349463][ T29] audit: type=1400 audit(1733511576.027:5021): avc: denied { name_bind } for pid=11112 comm="syz.5.3196" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 116.382765][ T29] audit: type=1400 audit(1733511576.027:5022): avc: denied { create } for pid=11112 comm="syz.5.3196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 116.402547][ T29] audit: type=1400 audit(1733511576.027:5023): avc: denied { connect } for pid=11112 comm="syz.5.3196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 116.422474][ T29] audit: type=1400 audit(1733511576.047:5024): avc: denied { map } for pid=11109 comm="syz.2.3195" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 116.446655][ T29] audit: type=1400 audit(1733511576.047:5025): avc: denied { execute } for pid=11109 comm="syz.2.3195" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 116.557717][T11126] sg_write: data in/out 1048540/14 bytes for SCSI command 0x0-- guessing data in; [ 116.557717][T11126] program syz.2.3202 not setting count and/or reply_len properly [ 116.603641][T11128] tmpfs: Unknown parameter 'GPL' [ 116.742624][T11141] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3208'. [ 117.035006][T11151] bond1: entered promiscuous mode [ 117.040363][T11151] bond1: entered allmulticast mode [ 117.072288][T11151] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.118046][T11151] bond1 (unregistering): Released all slaves [ 117.219441][T11163] sg_write: data in/out 1048540/14 bytes for SCSI command 0x0-- guessing data in; [ 117.219441][T11163] program syz.0.3216 not setting count and/or reply_len properly [ 117.339112][T11173] SELinux: policydb version 0 does not match my version range 15-33 [ 117.347631][T11173] SELinux: failed to load policy [ 117.375361][T11176] loop0: detected capacity change from 0 to 512 [ 117.406537][T11176] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 117.418538][T11176] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.3223: bad orphan inode 131083 [ 117.528462][T11190] loop2: detected capacity change from 0 to 128 [ 117.535006][T11190] EXT4-fs: Ignoring removed nobh option [ 117.543476][T11190] ext4 filesystem being mounted at /671/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 117.619277][T11200] loop6: detected capacity change from 0 to 128 [ 117.646939][T11200] EXT4-fs: Ignoring removed nobh option [ 117.686869][T11208] Invalid ELF header magic: != ELF [ 117.736021][T11200] ext4 filesystem being mounted at /568/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 117.774683][T11217] loop0: detected capacity change from 0 to 512 [ 117.783036][T11217] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 117.808008][T11217] ext4 filesystem being mounted at /696/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.844761][T11222] Invalid ELF header magic: != ELF [ 117.855265][T11223] loop5: detected capacity change from 0 to 512 [ 117.872172][T11225] loop6: detected capacity change from 0 to 128 [ 117.879024][T11225] EXT4-fs: Ignoring removed nobh option [ 117.888834][T11225] ext4 filesystem being mounted at /569/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 117.907395][T11223] EXT4-fs (loop5): too many log groups per flexible block group [ 117.915160][T11223] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 117.952297][T11223] EXT4-fs (loop5): mount failed [ 117.998348][T11240] loop6: detected capacity change from 0 to 512 [ 118.005184][T11240] EXT4-fs: Ignoring removed orlov option [ 118.023041][T11240] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 118.087380][T11253] loop2: detected capacity change from 0 to 512 [ 118.095363][T11240] EXT4-fs (loop6): 1 orphan inode deleted [ 118.101175][T11240] EXT4-fs (loop6): 1 truncate cleaned up [ 118.111520][T11240] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 118.148373][T11253] ext4 filesystem being mounted at /681/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.181545][T11259] loop6: detected capacity change from 0 to 512 [ 118.218821][T11259] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 118.230156][T11263] loop0: detected capacity change from 0 to 128 [ 118.240869][T11263] EXT4-fs: Ignoring removed nobh option [ 118.275874][T11259] EXT4-fs (loop6): 1 truncate cleaned up [ 118.293950][T11263] ext4 filesystem being mounted at /700/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 118.318466][T11259] EXT4-fs error (device loop6): ext4_xattr_inode_iget:440: comm syz.6.3257: inode #1073372648: comm syz.6.3257: iget: illegal inode # [ 118.349870][T11259] EXT4-fs error (device loop6): ext4_xattr_inode_iget:445: comm syz.6.3257: error while reading EA inode 1073372648 err=-117 [ 118.378473][T11273] SELinux: syz.5.3263 (11273) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 118.381236][T11259] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2977: inode #15: comm syz.6.3257: corrupted xattr block 33: invalid header [ 118.410846][T11259] EXT4-fs warning (device loop6): ext4_evict_inode:276: xattr delete (err -117) [ 118.490524][T11284] loop5: detected capacity change from 0 to 2048 [ 118.598986][ T3891] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 118.631361][T11300] loop6: detected capacity change from 0 to 128 [ 123.313096][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 123.313130][ T29] audit: type=1400 audit(1733511583.037:5091): avc: denied { mounton } for pid=11304 comm="syz.6.3278" path="/syzcgroup/unified/syz6" dev="cgroup2" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 123.343335][ T29] audit: type=1400 audit(1733511583.037:5092): avc: denied { mount } for pid=11304 comm="syz.6.3278" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 123.365284][T11317] SELinux: policydb version 0 does not match my version range 15-33 [ 123.368963][ T29] audit: type=1400 audit(1733511583.047:5093): avc: denied { mounton } for pid=11310 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 123.395110][ T29] audit: type=1400 audit(1733511583.087:5094): avc: denied { execute } for pid=11307 comm="syz.2.3280" path="/685/cpu.stat" dev="tmpfs" ino=3569 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 123.408509][T11317] SELinux: failed to load policy [ 123.509055][T11310] chnl_net:caif_netlink_parms(): no params data found [ 123.543130][T11310] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.550241][T11310] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.557719][T11310] bridge_slave_0: entered allmulticast mode [ 123.564166][T11310] bridge_slave_0: entered promiscuous mode [ 123.570887][T11310] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.578006][T11310] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.585213][T11310] bridge_slave_1: entered allmulticast mode [ 123.591914][T11310] bridge_slave_1: entered promiscuous mode [ 123.613449][ T1410] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.627616][T11310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.639303][T11310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.663988][T11310] team0: Port device team_slave_0 added [ 123.670635][T11310] team0: Port device team_slave_1 added [ 123.688945][T11310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.696024][T11310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.722023][T11310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.737149][ T1410] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.750165][T11310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.757343][T11310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.783325][T11310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.800770][ T1410] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.824214][T11310] hsr_slave_0: entered promiscuous mode [ 123.830326][T11310] hsr_slave_1: entered promiscuous mode [ 123.836184][T11310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.843776][T11310] Cannot create hsr debugfs directory [ 123.869945][ T1410] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.920081][T11310] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 123.930727][T11310] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 123.941710][T11310] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 123.952362][T11310] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 123.963970][ T1410] bridge_slave_1: left allmulticast mode [ 123.969707][ T1410] bridge_slave_1: left promiscuous mode [ 123.975349][ T1410] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.983306][ T1410] bridge_slave_0: left allmulticast mode [ 123.989104][ T1410] bridge_slave_0: left promiscuous mode [ 123.994937][ T1410] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.078112][ T1410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.088920][ T1410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.098696][ T1410] bond0 (unregistering): Released all slaves [ 124.140982][ T1410] hsr_slave_0: left promiscuous mode [ 124.146798][ T1410] hsr_slave_1: left promiscuous mode [ 124.152621][ T1410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.160215][ T1410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.167816][ T1410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.175298][ T1410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.184383][ T1410] veth1_macvtap: left promiscuous mode [ 124.189935][ T1410] veth0_macvtap: left promiscuous mode [ 124.195442][ T1410] veth1_vlan: left promiscuous mode [ 124.200821][ T1410] veth0_vlan: left promiscuous mode [ 124.260199][ T1410] team0 (unregistering): Port device team_slave_1 removed [ 124.270643][ T1410] team0 (unregistering): Port device team_slave_0 removed [ 124.302060][T11310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.314511][T11310] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.324756][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.331856][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.344792][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.351904][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.417242][T11310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.536163][T11310] veth0_vlan: entered promiscuous mode [ 124.543928][T11310] veth1_vlan: entered promiscuous mode [ 124.560013][T11310] veth0_macvtap: entered promiscuous mode [ 124.567524][T11310] veth1_macvtap: entered promiscuous mode [ 124.577420][T11310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.587920][T11310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.598500][T11310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.608653][T11310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.619241][T11310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.629725][T11310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.639273][T11310] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.648177][T11310] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.656927][T11310] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.665635][T11310] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.684549][ T29] audit: type=1400 audit(1733511584.417:5095): avc: denied { mounton } for pid=11310 comm="syz-executor" path="/root/syzkaller.7lAUIU/syz-tmp" dev="sda1" ino=1956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 124.709890][ T29] audit: type=1400 audit(1733511584.417:5096): avc: denied { mounton } for pid=11310 comm="syz-executor" path="/root/syzkaller.7lAUIU/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 124.736975][ T29] audit: type=1400 audit(1733511584.417:5097): avc: denied { mounton } for pid=11310 comm="syz-executor" path="/root/syzkaller.7lAUIU/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=30102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 124.765713][ T29] audit: type=1400 audit(1733511584.447:5098): avc: denied { mounton } for pid=11310 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 124.796136][T11347] loop7: detected capacity change from 0 to 128 [ 124.814064][ T29] audit: type=1326 audit(1733511584.547:5099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11352 comm="syz.5.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2171e2fed9 code=0x7ffc0000 [ 124.837624][ T29] audit: type=1326 audit(1733511584.547:5100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11352 comm="syz.5.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2171e2fed9 code=0x7ffc0000 [ 124.840356][T11347] EXT4-fs: Ignoring removed nobh option [ 124.885750][T11347] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 124.931791][T11364] loop7: detected capacity change from 0 to 512 [ 124.939583][T11364] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 125.015880][T11364] EXT4-fs (loop7): 1 truncate cleaned up [ 125.057459][T11364] EXT4-fs error (device loop7): ext4_xattr_inode_iget:440: comm syz.7.3281: inode #1073372648: comm syz.7.3281: iget: illegal inode # [ 125.077739][T11364] EXT4-fs error (device loop7): ext4_xattr_inode_iget:445: comm syz.7.3281: error while reading EA inode 1073372648 err=-117 [ 125.103366][T11364] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2977: inode #15: comm syz.7.3281: corrupted xattr block 33: invalid header [ 125.119925][T11364] EXT4-fs warning (device loop7): ext4_evict_inode:276: xattr delete (err -117) [ 125.172949][T11399] loop0: detected capacity change from 0 to 2048 [ 125.201187][T11399] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 125.253915][T11397] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 125.266325][T11397] EXT4-fs (loop0): This should not happen!! Data will be lost [ 125.266325][T11397] [ 125.276131][T11397] EXT4-fs (loop0): Total free blocks count 0 [ 125.282124][T11397] EXT4-fs (loop0): Free/Dirty block details [ 125.288188][T11397] EXT4-fs (loop0): free_blocks=66060288 [ 125.294598][T11397] EXT4-fs (loop0): dirty_blocks=32 [ 125.299793][T11397] EXT4-fs (loop0): Block reservation details [ 125.305924][T11397] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 125.359927][T11414] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:52770. Sending cookies. [ 125.452570][T11421] loop6: detected capacity change from 0 to 4096 [ 125.463827][T11430] loop7: detected capacity change from 0 to 512 [ 125.470951][T11430] EXT4-fs: Ignoring removed mblk_io_submit option [ 125.479412][T11430] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 125.503842][T11430] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 125.512103][T11430] System zones: 1-12 [ 125.516488][T11430] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.3320: corrupted in-inode xattr: e_value size too large [ 125.531304][T11430] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.3320: couldn't read orphan inode 15 (err -117) [ 125.588279][T11446] syz.0.3325[11446] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.588352][T11446] syz.0.3325[11446] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.601729][T11446] syz.0.3325[11446] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.616897][T11446] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11446 comm=syz.0.3325 [ 125.629102][T11447] loop7: detected capacity change from 0 to 8192 [ 125.696714][T11447] loop7: p2 p3 p4 [ 125.700542][T11447] loop7: p2 start 14935 is beyond EOD, truncated [ 125.707068][T11447] loop7: p3 size 196608 extends beyond EOD, truncated [ 125.714713][T11447] loop7: p4 start 4026530307 is beyond EOD, truncated [ 125.804736][T11465] sock: sock_set_timeout: `syz.0.3335' (pid 11465) tries to set negative timeout [ 125.889161][T11477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3340'. [ 126.063956][T11507] xt_hashlimit: max too large, truncated to 1048576 [ 126.227720][T11525] loop2: detected capacity change from 0 to 512 [ 126.235589][T11525] EXT4-fs: Ignoring removed i_version option [ 126.244399][T11525] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 126.258573][T11525] EXT4-fs (loop2): 1 truncate cleaned up [ 126.325704][T11539] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3371'. [ 126.331541][T11535] loop6: detected capacity change from 0 to 2048 [ 126.370152][T11545] loop7: detected capacity change from 0 to 256 [ 126.403723][T11545] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 126.413942][T11545] FAT-fs (loop7): Filesystem has been set read-only [ 126.426163][T11545] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 126.436606][T11545] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 126.578216][T11575] syz.7.3387[11575] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.578292][T11575] syz.7.3387[11575] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.590064][T11575] syz.7.3387[11575] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.639968][T11581] loop2: detected capacity change from 0 to 2048 [ 126.685702][ T28] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 126.701503][ T28] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 126.713852][ T28] EXT4-fs (loop2): This should not happen!! Data will be lost [ 126.713852][ T28] [ 126.723606][ T28] EXT4-fs (loop2): Total free blocks count 0 [ 126.729684][ T28] EXT4-fs (loop2): Free/Dirty block details [ 126.735615][ T28] EXT4-fs (loop2): free_blocks=2415919104 [ 126.741415][ T28] EXT4-fs (loop2): dirty_blocks=16 [ 126.746597][ T28] EXT4-fs (loop2): Block reservation details [ 126.752690][ T28] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 126.958607][T11619] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3407'. [ 127.119542][T11642] usb usb5: usbfs: process 11642 (syz.5.3418) did not claim interface 4 before use [ 127.341246][T11666] loop2: detected capacity change from 0 to 1024 [ 127.401172][T11673] loop2: detected capacity change from 0 to 512 [ 127.407991][T11673] EXT4-fs: Ignoring removed orlov option [ 127.414016][T11673] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 127.425279][T11673] EXT4-fs (loop2): 1 orphan inode deleted [ 127.431153][T11673] EXT4-fs (loop2): 1 truncate cleaned up [ 127.440164][T11673] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 127.497838][T11676] netlink: 'syz.2.3433': attribute type 11 has an invalid length. [ 127.823221][T11699] raw_sendmsg: syz.0.3444 forgot to set AF_INET. Fix it! [ 127.929336][T11712] SELinux: security policydb version 18 (MLS) not backwards compatible [ 127.937941][T11712] SELinux: failed to load policy [ 128.019790][T11722] @: renamed from vlan0 (while UP) [ 128.153681][T11741] devtmpfs: Unknown parameter 'di¼CÆ5F\LÑž' [ 128.353633][ T29] kauditd_printk_skb: 218 callbacks suppressed [ 128.353653][ T29] audit: type=1400 audit(1733511588.087:5319): avc: denied { connect } for pid=11765 comm="syz.0.3474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 128.407581][T11773] loop7: detected capacity change from 0 to 512 [ 128.470800][T11782] loop5: detected capacity change from 0 to 164 [ 128.483478][T11773] EXT4-fs mount: 48 callbacks suppressed [ 128.483496][T11773] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.504085][T11773] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.535849][ T29] audit: type=1400 audit(1733511588.257:5320): avc: denied { mount } for pid=11781 comm="syz.5.3480" name="/" dev="loop5" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 128.558377][ T29] audit: type=1400 audit(1733511588.287:5321): avc: denied { unmount } for pid=3891 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 128.576752][T11786] random: crng reseeded on system resumption [ 128.578722][ T29] audit: type=1400 audit(1733511588.317:5322): avc: denied { append } for pid=11785 comm="syz.6.3483" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 128.608566][ T29] audit: type=1400 audit(1733511588.317:5323): avc: denied { open } for pid=11785 comm="syz.6.3483" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 128.637517][ T29] audit: type=1400 audit(1733511588.377:5324): avc: denied { mount } for pid=11789 comm="syz.2.3486" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 128.670608][ T29] audit: type=1400 audit(1733511588.407:5325): avc: denied { append } for pid=11791 comm="syz.5.3485" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 128.716317][T11310] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.725382][ T29] audit: type=1400 audit(1733511588.447:5326): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 128.747836][T11792] program syz.5.3485 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.774209][ T29] audit: type=1400 audit(1733511588.507:5327): avc: denied { tracepoint } for pid=11793 comm="syz.2.3488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 128.932418][ T29] audit: type=1400 audit(1733511588.667:5328): avc: denied { read } for pid=11822 comm="syz.7.3500" name="usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 128.957461][T11820] usb usb8: usbfs: process 11820 (syz.6.3498) did not claim interface 63 before use [ 128.989149][T11828] tmpfs: Unknown parameter 'mp' [ 129.071568][T11838] netlink: 'syz.5.3507': attribute type 3 has an invalid length. [ 129.073665][T11836] sctp: [Deprecated]: syz.6.3506 (pid 11836) Use of struct sctp_assoc_value in delayed_ack socket option. [ 129.073665][T11836] Use struct sctp_sack_info instead [ 129.079412][T11838] netlink: 566 bytes leftover after parsing attributes in process `syz.5.3507'. [ 129.112964][T11840] netlink: 'syz.7.3508': attribute type 13 has an invalid length. [ 129.120899][T11840] netlink: 152 bytes leftover after parsing attributes in process `syz.7.3508'. [ 129.131806][T11842] mmap: syz.5.3509 (11842): VmData 167489536 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 129.137604][T11840] syz_tun: refused to change device tx_queue_len [ 129.150939][T11840] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 129.174128][T11844] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3510'. [ 129.183248][T11844] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3510'. [ 129.262217][T11854] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3516'. [ 129.296873][T11859] syz.2.3518[11859] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.296963][T11859] syz.2.3518[11859] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.315963][T11859] syz.2.3518[11859] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.349512][T11864] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3520'. [ 129.420077][T11864] x_tables: ip_tables: udp match: only valid for protocol 17 [ 129.438738][T11877] loop5: detected capacity change from 0 to 512 [ 129.442679][T11878] loop2: detected capacity change from 0 to 512 [ 129.455944][T11877] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 129.481790][T11877] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.3527: bad orphan inode 131083 [ 129.483688][T11878] EXT4-fs: Ignoring removed orlov option [ 129.502199][T11877] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.524666][T11878] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 129.544797][ T3891] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.573876][T11878] EXT4-fs (loop2): 1 orphan inode deleted [ 129.579840][T11878] EXT4-fs (loop2): 1 truncate cleaned up [ 129.587330][T11893] IPv6: NLM_F_CREATE should be specified when creating new route [ 129.600407][T11878] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.627575][T11878] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 129.660592][T11902] SELinux: syz.5.3537 (11902) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 129.680571][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.680789][T11904] netlink: 256 bytes leftover after parsing attributes in process `syz.7.3539'. [ 129.708708][T11907] SELinux: syz.2.3540 (11907) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 129.851049][T11921] tmpfs: Unknown parameter 'GPL' [ 129.978905][T11952] loop0: detected capacity change from 0 to 512 [ 130.013878][T11952] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.027925][T11952] ext4 filesystem being mounted at /763/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.141046][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.176620][T11971] netlink: 'syz.0.3566': attribute type 4 has an invalid length. [ 130.251585][T11982] futex_wake_op: syz.6.3574 tries to shift op by 144; fix this program [ 130.601889][T11996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.610387][T11996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.258860][T12057] loop0: detected capacity change from 0 to 256 [ 131.279252][T12057] FAT-fs (loop0): Directory bread(block 64) failed [ 131.291943][T12057] FAT-fs (loop0): Directory bread(block 65) failed [ 131.298891][T12057] FAT-fs (loop0): Directory bread(block 66) failed [ 131.306999][T12057] FAT-fs (loop0): Directory bread(block 67) failed [ 131.315262][T12057] FAT-fs (loop0): Directory bread(block 68) failed [ 131.333969][T12057] FAT-fs (loop0): Directory bread(block 69) failed [ 131.344081][T12057] FAT-fs (loop0): Directory bread(block 70) failed [ 131.357259][T12057] FAT-fs (loop0): Directory bread(block 71) failed [ 131.364296][T12057] FAT-fs (loop0): Directory bread(block 72) failed [ 131.373228][T12057] FAT-fs (loop0): Directory bread(block 73) failed [ 131.403102][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888104439200: rx timeout, send abort [ 131.411638][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888104439200: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 131.462605][T12073] loop7: detected capacity change from 0 to 1024 [ 131.530156][T12073] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.613764][T11310] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.634825][T12101] loop6: detected capacity change from 0 to 2048 [ 131.653793][T12101] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.721732][T12106] ================================================================== [ 131.729970][T12106] BUG: KCSAN: data-race in do_sys_poll / pollwake [ 131.736463][T12106] [ 131.738798][T12106] write to 0xffffc90001593bd0 of 4 bytes by task 12100 on cpu 1: [ 131.746561][T12106] pollwake+0xbe/0x110 [ 131.750757][T12106] __wake_up+0x65/0xb0 [ 131.754863][T12106] unix_dgram_peer_wake_relay+0xd4/0xf0 [ 131.760437][T12106] __wake_up_sync_key+0x51/0x80 [ 131.765405][T12106] __unix_dgram_recvmsg+0x3bc/0x860 [ 131.770838][T12106] unix_dgram_recvmsg+0x81/0x90 [ 131.775710][T12106] sock_recvmsg_nosec+0x107/0x140 [ 131.780786][T12106] ____sys_recvmsg+0x271/0x280 [ 131.785570][T12106] do_recvmmsg+0x2aa/0x6d0 [ 131.790030][T12106] __x64_sys_recvmmsg+0xe2/0x170 [ 131.794990][T12106] x64_sys_call+0x2a9a/0x2dc0 [ 131.799686][T12106] do_syscall_64+0xc9/0x1c0 [ 131.804217][T12106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.810142][T12106] [ 131.812480][T12106] read to 0xffffc90001593bd0 of 4 bytes by task 12106 on cpu 0: [ 131.820142][T12106] do_sys_poll+0x95d/0xc20 [ 131.824592][T12106] __se_sys_ppoll+0x1af/0x1f0 [ 131.829296][T12106] __x64_sys_ppoll+0x67/0x80 [ 131.833951][T12106] x64_sys_call+0x2acc/0x2dc0 [ 131.838647][T12106] do_syscall_64+0xc9/0x1c0 [ 131.843192][T12106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.849224][T12106] [ 131.851556][T12106] value changed: 0x00000000 -> 0x00000001 [ 131.857412][T12106] [ 131.859757][T12106] Reported by Kernel Concurrency Sanitizer on: [ 131.866020][T12106] CPU: 0 UID: 0 PID: 12106 Comm: syz.5.3624 Not tainted 6.13.0-rc1-syzkaller-00182-gb8f52214c61a #0 [ 131.876816][T12106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 131.886896][T12106] ================================================================== [ 131.911893][T12108] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 131.918504][T12108] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 131.925971][T12108] vhci_hcd vhci_hcd.0: Device attached [ 131.933367][T12111] vhci_hcd: connection closed [ 131.933930][ T4057] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.948143][ T36] vhci_hcd: stop threads [ 131.952418][ T36] vhci_hcd: release socket [ 131.956900][ T36] vhci_hcd: disconnect device