last executing test programs: 7.458301872s ago: executing program 4 (id=1954): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={r1, 0x0, 0x0}, 0x10) 7.413765052s ago: executing program 4 (id=1955): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000003000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) socket$inet6(0xa, 0x3, 0x2) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x4) syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0xfeecc7049659a41, 0x9, 0xfffc, 0x0, 0x5}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='kfree\x00', 0xffffffffffffffff, 0x0, 0x10000000000}, 0x18) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000400000004000000280300003f"], 0x50) r5 = socket$inet(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, 0x0, &(0x7f0000000180)) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback, r2}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000000000611148000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r7}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/resume', 0x141b82, 0x0) 7.408548562s ago: executing program 0 (id=1956): socket$inet(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x200041, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@noload}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x46) 7.373396622s ago: executing program 4 (id=1957): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 6.974606411s ago: executing program 4 (id=1958): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000740)=@base={0x10, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) epoll_create1(0x80000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 5.794095281s ago: executing program 0 (id=1959): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 4.588406441s ago: executing program 0 (id=1962): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) unshare(0x62040200) 4.586744371s ago: executing program 1 (id=1963): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000280), 0xff, 0x493, &(0x7f0000000640)="$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") r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x2}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r4, 0x6}, 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r5, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r7 = dup(r6) r8 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) ftruncate(r8, 0xee72) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) sendfile(r7, r8, 0x0, 0x8000fffffffe) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0xd, 0x9, {"db913e569d8f8279bea73bff1ce752cb"}, 0x8, 0x1, 0x7}}}, 0x90) write(r7, &(0x7f0000000540)="1b1fdeafca739f0000011a005fff20f9f44f7c47858b34aa0180002000000000001fb2fe94becdfe7a6e02a8b86c95c862310e5d8dc354dc93bfae8021541210ba5dd1e0ec5e0c46d09d144b385f582e7a18545a2a29fc2f19a4b41cd9d23277fed1be107f0c628334176a693615fb24218198cafa0b8c96710f853a3ee253e82eb8155403893765fc6f92649228ac3e019fa8623dda4c313426bcd02e78e23a6315d4ae3ef510b9cf81138e32f0f8ef7d6bcf99001617dafe5b3ecf2c1febc2b1c665eb8fce0b8c7cf3281466245a1f21762e8a2bd84e6d6ae89745e7b87e4681e9af", 0xe3) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=@newsa={0x138, 0x10, 0x633, 0x0, 0x2, {{@in6=@private2, @in6=@dev={0xfe, 0x80, '\x00', 0xfd}, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback, 0x4d5, 0x32}, @in=@local, {}, {0x200000000, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xd7}, 0x2, 0x0, 0x2, 0x4, 0x0, 0x8}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 4.233635131s ago: executing program 3 (id=1965): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.088537981s ago: executing program 3 (id=1966): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='xdp_cpumap_kthread\x00', r2, 0x0, 0x8000000000000000}, 0x18) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a0012000200280000001900", 0x28}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="1000000000000000b4000000070000001c000000000000000000000008000000", @ANYRES32=r4], 0x30}, 0x40084) r5 = socket$packet(0x11, 0x3, 0x300) r6 = io_uring_setup(0x1691, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d9}) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0x400400}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r7}, 0x18) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x101080e, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESOCT], 0x1, 0x67e, &(0x7f0000001600)="$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") r8 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000268000/0x4000)=nil, 0x4000, 0x1000002, 0x4016012, r8, 0x0) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r5, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r9, &(0x7f00000002c0)=[{&(0x7f0000000280)='3', 0x1}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 3.839334231s ago: executing program 1 (id=1967): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket(0x28, 0x5, 0x0) r0 = socket(0x28, 0x5, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x3, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x5c) listen(r0, 0x0) 3.696458991s ago: executing program 0 (id=1968): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000740)=@base={0x10, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) epoll_create1(0x80000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 3.637999141s ago: executing program 3 (id=1969): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r6, 0x20, 0x6, 0x100002000) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040014001000030001302564aa58b9a64411f6bbf44dc48f57", 0xff4d}], 0x1) 2.890479341s ago: executing program 0 (id=1971): getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000009f910000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) timer_create(0x2, 0x0, &(0x7f0000000500)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x64000600) 1.98839056s ago: executing program 0 (id=1972): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000740)=@base={0x10, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) epoll_create1(0x80000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.98777448s ago: executing program 1 (id=1973): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_clone(0x0, &(0x7f0000001100), 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000009c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000380)=r2, 0x12) 1.91784105s ago: executing program 3 (id=1974): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000280), 0xff, 0x493, &(0x7f0000000640)="$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") r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x2}, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r6 = dup(r5) r7 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) ftruncate(r7, 0xee72) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) sendfile(r6, r7, 0x0, 0x8000fffffffe) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0xd, 0x9, {"db913e569d8f8279bea73bff1ce752cb"}, 0x8, 0x1, 0x7}}}, 0x90) write(r6, &(0x7f0000000540)="1b1fdeafca739f0000011a005fff20f9f44f7c47858b34aa0180002000000000001fb2fe94becdfe7a6e02a8b86c95c862310e5d8dc354dc93bfae8021541210ba5dd1e0ec5e0c46d09d144b385f582e7a18545a2a29fc2f19a4b41cd9d23277fed1be107f0c628334176a693615fb24218198cafa0b8c96710f853a3ee253e82eb8155403893765fc6f92649228ac3e019fa8623dda4c313426bcd02e78e23a6315d4ae3ef510b9cf81138e32f0f8ef7d6bcf99001617dafe5b3ecf2c1febc2b1c665eb8fce0b8c7cf3281466245a1f21762e8a2bd84e6d6ae89745e7b87e4681e9af", 0xe3) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=@newsa={0x138, 0x10, 0x633, 0x0, 0x2, {{@in6=@private2, @in6=@dev={0xfe, 0x80, '\x00', 0xfd}, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback, 0x4d5, 0x32}, @in=@local, {}, {0x200000000, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xd7}, 0x2, 0x0, 0x2, 0x4, 0x0, 0x8}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 1.84868315s ago: executing program 1 (id=1975): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000280), 0xff, 0x493, &(0x7f0000000640)="$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") r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x2}, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r6 = dup(r5) r7 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) ftruncate(r7, 0xee72) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) sendfile(r6, r7, 0x0, 0x8000fffffffe) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0xd, 0x9, {"db913e569d8f8279bea73bff1ce752cb"}, 0x8, 0x1, 0x7}}}, 0x90) write(r6, &(0x7f0000000540)="1b1fdeafca739f0000011a005fff20f9f44f7c47858b34aa0180002000000000001fb2fe94becdfe7a6e02a8b86c95c862310e5d8dc354dc93bfae8021541210ba5dd1e0ec5e0c46d09d144b385f582e7a18545a2a29fc2f19a4b41cd9d23277fed1be107f0c628334176a693615fb24218198cafa0b8c96710f853a3ee253e82eb8155403893765fc6f92649228ac3e019fa8623dda4c313426bcd02e78e23a6315d4ae3ef510b9cf81138e32f0f8ef7d6bcf99001617dafe5b3ecf2c1febc2b1c665eb8fce0b8c7cf3281466245a1f21762e8a2bd84e6d6ae89745e7b87e4681e9af", 0xe3) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=@newsa={0x138, 0x10, 0x633, 0x0, 0x2, {{@in6=@private2, @in6=@dev={0xfe, 0x80, '\x00', 0xfd}, 0x0, 0x0, 0x0, 0x10}, {@in6=@loopback, 0x4d5, 0x32}, @in=@local, {}, {0x200000000, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xd7}, 0x2, 0x0, 0x2, 0x4, 0x0, 0x8}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 1.69644069s ago: executing program 2 (id=1977): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = io_uring_setup(0x278d, &(0x7f00000003c0)={0x0, 0xffffffff, 0x40, 0x1, 0x49}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x4, 0x0, "7e12ddc5a89047bf00"}) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) read(r3, 0x0, 0x2006) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)) dup2(r3, r2) close_range(r1, 0xffffffffffffffff, 0x0) 1.46671311s ago: executing program 2 (id=1978): getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000009f910000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) timer_create(0x2, 0x0, &(0x7f0000000500)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x64000600) 1.45009895s ago: executing program 4 (id=1979): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) unshare(0x62040200) 317.85623ms ago: executing program 2 (id=1980): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000000000000000000000000040180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000020000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), 0x0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1, 0x0, 0x0, 0x803e}, 0x0) 308.1436ms ago: executing program 3 (id=1981): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000000000000000000000000040180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000020000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1, 0x0, 0x0, 0x803e}, 0x0) 294.49139ms ago: executing program 1 (id=1982): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) open(&(0x7f0000000080)='./file0\x00', 0x1c1c41, 0x6) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX]) 241.403519ms ago: executing program 1 (id=1983): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000740)=@base={0x10, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) epoll_create1(0x80000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 207.54493ms ago: executing program 4 (id=1984): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000740)=@base={0x10, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) epoll_create1(0x80000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 201.40955ms ago: executing program 3 (id=1985): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000280), 0xff, 0x493, &(0x7f0000000640)="$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") r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x2}, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r3, 0x6}, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r6 = dup(r5) r7 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) ftruncate(r7, 0xee72) open(0x0, 0x2a4c0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYBLOB]) sendfile(r6, r7, 0x0, 0x8000fffffffe) write$RDMA_USER_CM_CMD_BIND(r7, 0x0, 0x0) write(r6, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 194.83372ms ago: executing program 2 (id=1986): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x4, 0x0, "7e12ddc5a89047bf00"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) dup2(r1, r0) 112.702019ms ago: executing program 2 (id=1987): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 2 (id=1988): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = io_uring_setup(0x278d, &(0x7f00000003c0)={0x0, 0xffffffff, 0x40, 0x1, 0x49}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x4, 0x0, "7e12ddc5a89047bf00"}) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2) read(r4, 0x0, 0x2006) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)) dup2(r4, r3) close_range(r2, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ps until 2038-01-19 (0x7fffffff) [ 347.827832][ T9427] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1540'. [ 348.262619][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.300152][ T9432] loop0: detected capacity change from 0 to 512 [ 348.389589][ T9432] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.1542: casefold flag without casefold feature [ 348.420429][ T9432] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.1542: couldn't read orphan inode 15 (err -117) [ 348.450093][ T9432] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.473784][ T9429] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.564953][ T9429] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.583567][ T9443] 9pnet_fd: Insufficient options for proto=fd [ 348.610999][ T9429] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.694184][ T9429] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.747352][ T9429] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.760685][ T9429] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.782231][ T9429] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.802843][ T9429] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.199511][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 349.199528][ T29] audit: type=1400 audit(1736043742.284:1947): avc: denied { listen } for pid=9469 comm="syz.4.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 349.309244][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.370576][ T29] audit: type=1400 audit(1736043742.394:1948): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 349.392708][ T29] audit: type=1400 audit(1736043742.394:1949): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.414304][ T29] audit: type=1400 audit(1736043742.394:1950): avc: denied { open } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 349.436892][ T29] audit: type=1400 audit(1736043742.394:1951): avc: denied { getattr } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 349.459778][ T29] audit: type=1400 audit(1736043742.454:1952): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 349.653178][ T29] audit: type=1400 audit(1736043742.804:1953): avc: denied { create } for pid=9486 comm="syz.3.1551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 349.674648][ T9487] netlink: 'syz.3.1551': attribute type 4 has an invalid length. [ 349.731693][ T9488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1549'. [ 349.769861][ T29] audit: type=1400 audit(1736043742.894:1954): avc: denied { create } for pid=9480 comm="syz.0.1549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 349.853634][ T29] audit: type=1400 audit(1736043742.994:1955): avc: denied { read } for pid=9482 comm="syz.1.1550" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 349.876731][ T29] audit: type=1400 audit(1736043742.994:1956): avc: denied { open } for pid=9482 comm="syz.1.1550" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 350.479416][ T9501] loop4: detected capacity change from 0 to 512 [ 350.508057][ T9501] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 350.516204][ T9501] System zones: 0-2, 18-18, 34-34 [ 350.523839][ T9501] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1554: bg 0: block 248: padding at end of block bitmap is not set [ 350.540821][ T9501] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.1554: Failed to acquire dquot type 1 [ 350.721043][ T9501] EXT4-fs (loop4): 1 truncate cleaned up [ 350.727831][ T9501] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.740731][ T9501] ext4 filesystem being mounted at /292/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.817561][ T9507] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1555'. [ 351.361030][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.621834][ T9511] 9pnet_fd: Insufficient options for proto=fd [ 352.125445][ T9527] loop4: detected capacity change from 0 to 164 [ 352.253203][ T9527] syz.4.1563: attempt to access beyond end of device [ 352.253203][ T9527] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 352.267571][ T9527] syz.4.1563: attempt to access beyond end of device [ 352.267571][ T9527] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 352.443268][ T9538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1565'. [ 353.235796][ T9527] syz.4.1563: attempt to access beyond end of device [ 353.235796][ T9527] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 353.249700][ T9527] syz.4.1563: attempt to access beyond end of device [ 353.249700][ T9527] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 353.263305][ T9527] syz.4.1563: attempt to access beyond end of device [ 353.263305][ T9527] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 353.276923][ T9527] syz.4.1563: attempt to access beyond end of device [ 353.276923][ T9527] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 353.429695][ T9527] syz.4.1563: attempt to access beyond end of device [ 353.429695][ T9527] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 353.445034][ T9527] syz.4.1563: attempt to access beyond end of device [ 353.445034][ T9527] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 353.616502][ T9551] 9pnet_fd: Insufficient options for proto=fd [ 353.651460][ T9527] syz.4.1563: attempt to access beyond end of device [ 353.651460][ T9527] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 353.961145][ T9558] loop1: detected capacity change from 0 to 512 [ 353.969228][ T9558] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 354.140300][ T9558] EXT4-fs (loop1): orphan cleanup on readonly fs [ 354.148040][ T9558] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1571: bg 0: block 248: padding at end of block bitmap is not set [ 354.163596][ T9558] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.1571: Failed to acquire dquot type 1 [ 354.176338][ T9558] EXT4-fs (loop1): 1 truncate cleaned up [ 354.190070][ T9558] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 354.215812][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 354.215831][ T29] audit: type=1400 audit(1736043747.364:1964): avc: denied { connect } for pid=9555 comm="syz.1.1571" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 355.611291][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.154008][ T9579] loop0: detected capacity change from 0 to 512 [ 356.161169][ T9579] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 356.212876][ T9578] loop2: detected capacity change from 0 to 512 [ 356.239510][ T9578] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 356.248477][ T9578] EXT4-fs (loop2): invalid journal inode [ 356.255919][ T9578] EXT4-fs (loop2): can't get journal size [ 356.290899][ T9578] EXT4-fs (loop2): 1 truncate cleaned up [ 356.297164][ T9578] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.351982][ T29] audit: type=1400 audit(1736043749.504:1965): avc: denied { write } for pid=9577 comm="syz.2.1577" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 356.388938][ T29] audit: type=1400 audit(1736043749.534:1966): avc: denied { add_name } for pid=9577 comm="syz.2.1577" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 356.391008][ T9579] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.431081][ T29] audit: type=1400 audit(1736043749.534:1967): avc: denied { create } for pid=9577 comm="syz.2.1577" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 356.527658][ T29] audit: type=1400 audit(1736043749.654:1968): avc: denied { write open } for pid=9577 comm="syz.2.1577" path="/331/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 356.593384][ T29] audit: type=1400 audit(1736043749.654:1969): avc: denied { name_bind } for pid=9577 comm="syz.2.1577" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 356.638236][ T29] audit: type=1326 audit(1736043749.784:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9576 comm="syz.0.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d1be05d29 code=0x7ffc0000 [ 356.668857][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.093890][ T29] audit: type=1326 audit(1736043750.244:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9576 comm="syz.0.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d1be05d29 code=0x7ffc0000 [ 357.249132][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.260496][ T29] audit: type=1326 audit(1736043750.364:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9576 comm="syz.0.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d1be05d29 code=0x7ffc0000 [ 357.284000][ T29] audit: type=1326 audit(1736043750.364:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9576 comm="syz.0.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d1be05d29 code=0x7ffc0000 [ 357.999756][ T9608] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1584'. [ 358.394503][ T9613] loop3: detected capacity change from 0 to 512 [ 358.403844][ T9613] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 358.406888][ T9610] loop1: detected capacity change from 0 to 164 [ 358.413375][ T9613] EXT4-fs (loop3): invalid journal inode [ 358.424426][ T9613] EXT4-fs (loop3): can't get journal size [ 358.432059][ T9613] EXT4-fs (loop3): 1 truncate cleaned up [ 358.432055][ T9610] syz.1.1585: attempt to access beyond end of device [ 358.432055][ T9610] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 358.438251][ T9613] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.452110][ T9610] syz.1.1585: attempt to access beyond end of device [ 358.452110][ T9610] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 358.477172][ T9610] syz.1.1585: attempt to access beyond end of device [ 358.477172][ T9610] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 358.491064][ T9610] syz.1.1585: attempt to access beyond end of device [ 358.491064][ T9610] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 358.504954][ T9610] syz.1.1585: attempt to access beyond end of device [ 358.504954][ T9610] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 358.519805][ T9610] syz.1.1585: attempt to access beyond end of device [ 358.519805][ T9610] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 358.520286][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.533379][ T9610] syz.1.1585: attempt to access beyond end of device [ 358.533379][ T9610] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 358.705066][ T9629] serio: Serial port pts0 [ 358.709587][ T9627] serio: Serial port pts1 [ 359.134688][ T9648] 9pnet_fd: Insufficient options for proto=fd [ 359.219991][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 359.220008][ T29] audit: type=1400 audit(1736043752.374:2040): avc: denied { read } for pid=9649 comm="syz.4.1597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 359.273030][ T29] audit: type=1400 audit(1736043752.414:2041): avc: denied { bind } for pid=9649 comm="syz.4.1597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 359.295401][ T9650] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.322737][ T9655] loop1: detected capacity change from 0 to 512 [ 359.334085][ T9655] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 359.373110][ T9655] EXT4-fs (loop1): orphan cleanup on readonly fs [ 359.380629][ T29] audit: type=1400 audit(1736043752.424:2042): avc: denied { setopt } for pid=9649 comm="syz.4.1597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 359.416594][ T9655] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1598: bg 0: block 248: padding at end of block bitmap is not set [ 359.500881][ T9655] Quota error (device loop1): write_blk: dquota write failed [ 359.508571][ T9655] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 359.518508][ T9655] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.1598: Failed to acquire dquot type 1 [ 359.533810][ T9655] EXT4-fs (loop1): 1 truncate cleaned up [ 359.544428][ T9655] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 359.594509][ T29] audit: type=1400 audit(1736043752.734:2043): avc: denied { create } for pid=9651 comm="syz.1.1598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 359.614179][ T29] audit: type=1400 audit(1736043752.734:2044): avc: denied { connect } for pid=9651 comm="syz.1.1598" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 359.748226][ T9650] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.008762][ T9650] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.282540][ T9660] loop3: detected capacity change from 0 to 512 [ 360.320989][ T9650] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.341300][ T9660] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #15: comm syz.3.1600: casefold flag without casefold feature [ 360.378727][ T9660] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.1600: couldn't read orphan inode 15 (err -117) [ 360.411680][ T9650] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.452629][ T9650] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.462379][ T9660] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.492101][ T9650] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.553616][ T9650] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.561961][ T29] audit: type=1400 audit(1736043753.674:2045): avc: denied { mount } for pid=9659 comm="syz.3.1600" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 360.584218][ T29] audit: type=1400 audit(1736043753.674:2046): avc: denied { read append } for pid=9659 comm="syz.3.1600" path="/306/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 360.607432][ T29] audit: type=1400 audit(1736043753.674:2047): avc: denied { mounton } for pid=9659 comm="syz.3.1600" path="/306/file1/file0" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 360.730929][ T9669] serio: Serial port pts0 [ 360.940861][ T9679] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.041349][ T9679] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.100966][ T9679] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.152826][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.190978][ T9679] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.204660][ T9688] serio: Serial port pts0 [ 361.255728][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.364382][ T9696] loop1: detected capacity change from 0 to 512 [ 361.440778][ T9696] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.1606: casefold flag without casefold feature [ 361.455002][ T9696] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.1606: couldn't read orphan inode 15 (err -117) [ 361.471471][ T9696] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.536052][ T9708] 9pnet_fd: Insufficient options for proto=fd [ 361.577826][ T9712] loop3: detected capacity change from 0 to 512 [ 361.705029][ T9712] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 361.786154][ T9712] EXT4-fs (loop3): invalid journal inode [ 361.833517][ T9712] EXT4-fs (loop3): can't get journal size [ 361.883020][ T9712] EXT4-fs (loop3): 1 truncate cleaned up [ 361.923203][ T9712] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.010566][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.076402][ T9730] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.131303][ T9730] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.181628][ T9730] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.293716][ T9730] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.321329][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.438095][ T9730] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.452506][ T9730] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.463902][ T9730] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.466792][ T9749] loop1: detected capacity change from 0 to 164 [ 362.482860][ T9730] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.499090][ T9749] syz.1.1614: attempt to access beyond end of device [ 362.499090][ T9749] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 362.519654][ T9749] syz.1.1614: attempt to access beyond end of device [ 362.519654][ T9749] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 362.546038][ T9749] syz.1.1614: attempt to access beyond end of device [ 362.546038][ T9749] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 363.291648][ T9764] netlink: 'syz.2.1618': attribute type 4 has an invalid length. [ 363.376402][ T9767] 9pnet_fd: Insufficient options for proto=fd [ 363.483803][ T9769] loop3: detected capacity change from 0 to 512 [ 363.501229][ T9769] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 363.513158][ T9769] EXT4-fs (loop3): 1 truncate cleaned up [ 363.529844][ T9769] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.565529][ T9775] loop2: detected capacity change from 0 to 512 [ 363.573371][ T9775] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.1622: casefold flag without casefold feature [ 363.587135][ T9775] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1622: couldn't read orphan inode 15 (err -117) [ 363.604642][ T9769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.704400][ T9775] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.037071][ T9804] loop3: detected capacity change from 0 to 512 [ 364.051857][ T9804] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 364.060042][ T9804] System zones: 0-2, 18-18, 34-34 [ 364.067408][ T9804] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1624: bg 0: block 248: padding at end of block bitmap is not set [ 364.083147][ T9804] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.1624: Failed to acquire dquot type 1 [ 364.095563][ T9804] EXT4-fs (loop3): 1 truncate cleaned up [ 364.102458][ T9804] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.115000][ T9804] ext4 filesystem being mounted at /314/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.440178][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.781115][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.801665][ T9818] usb usb8: usbfs: process 9818 (syz.2.1625) did not claim interface 2 before use [ 364.814751][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 364.814767][ T29] audit: type=1400 audit(1736043757.924:2076): avc: denied { write } for pid=9814 comm="syz.2.1625" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 365.085164][ T9824] loop3: detected capacity change from 0 to 512 [ 365.094457][ T9824] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #15: comm syz.3.1626: casefold flag without casefold feature [ 365.107724][ T9824] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.1626: couldn't read orphan inode 15 (err -117) [ 365.121347][ T9824] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.394072][ T29] audit: type=1326 audit(1736043758.544:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9823 comm="syz.3.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e81d35d29 code=0x7ffc0000 [ 365.417574][ T29] audit: type=1326 audit(1736043758.544:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9823 comm="syz.3.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e81d35d29 code=0x7ffc0000 [ 365.474979][ T9839] loop0: detected capacity change from 0 to 2048 [ 365.596325][ T9847] loop2: detected capacity change from 0 to 512 [ 365.649879][ T9847] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 365.718804][ T9839] Alternate GPT is invalid, using primary GPT. [ 365.725373][ T9839] loop0: p2 p3 p7 [ 365.731660][ T9847] EXT4-fs (loop2): orphan cleanup on readonly fs [ 365.738882][ T9847] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1630: bg 0: block 248: padding at end of block bitmap is not set [ 365.755461][ T9847] Quota error (device loop2): write_blk: dquota write failed [ 365.762883][ T9847] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 365.772900][ T9847] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.1630: Failed to acquire dquot type 1 [ 365.787290][ T9847] EXT4-fs (loop2): 1 truncate cleaned up [ 365.794803][ T9847] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 365.968854][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.780722][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.797218][ T9679] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.810943][ T9679] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.860549][ T9679] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.901058][ T9679] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.913420][ T9862] loop2: detected capacity change from 0 to 164 [ 367.921303][ T9862] bio_check_eod: 8 callbacks suppressed [ 367.921320][ T9862] syz.2.1633: attempt to access beyond end of device [ 367.921320][ T9862] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 368.003598][ T9869] loop1: detected capacity change from 0 to 512 [ 368.012056][ T9869] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 368.045041][ T9862] syz.2.1633: attempt to access beyond end of device [ 368.045041][ T9862] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 368.058861][ T9862] syz.2.1633: attempt to access beyond end of device [ 368.058861][ T9862] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 368.074448][ T9869] EXT4-fs (loop1): orphan cleanup on readonly fs [ 368.082547][ T9869] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1634: bg 0: block 248: padding at end of block bitmap is not set [ 368.098774][ T9869] Quota error (device loop1): write_blk: dquota write failed [ 368.106210][ T9869] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 368.116164][ T9869] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.1634: Failed to acquire dquot type 1 [ 368.129997][ T9869] EXT4-fs (loop1): 1 truncate cleaned up [ 368.136515][ T9869] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 368.194526][ T9862] syz.2.1633: attempt to access beyond end of device [ 368.194526][ T9862] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 368.415731][ T9879] loop4: detected capacity change from 0 to 512 [ 368.461334][ T9879] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 368.537791][ T9879] EXT4-fs (loop4): 1 truncate cleaned up [ 368.566427][ T9879] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.650841][ T9879] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.960087][ T9887] loop0: detected capacity change from 0 to 512 [ 368.997946][ T9887] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 369.020684][ T9890] netlink: 'syz.2.1641': attribute type 4 has an invalid length. [ 369.044240][ T9887] EXT4-fs (loop0): invalid journal inode [ 369.190609][ T9887] EXT4-fs (loop0): can't get journal size [ 369.221513][ T9887] EXT4-fs (loop0): 1 truncate cleaned up [ 369.227429][ T9887] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.689065][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.706575][ T9900] serio: Serial port pts0 [ 369.789227][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.809341][ T9904] loop2: detected capacity change from 0 to 512 [ 369.819548][ T9904] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 369.838238][ T9907] loop0: detected capacity change from 0 to 128 [ 369.846034][ T9904] EXT4-fs (loop2): orphan cleanup on readonly fs [ 369.853146][ T9904] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1644: bg 0: block 248: padding at end of block bitmap is not set [ 369.869693][ T9904] Quota error (device loop2): write_blk: dquota write failed [ 369.877118][ T9904] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 369.887230][ T9904] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.1644: Failed to acquire dquot type 1 [ 369.989897][ T9904] EXT4-fs (loop2): 1 truncate cleaned up [ 370.012123][ T9910] loop4: detected capacity change from 0 to 512 [ 370.019006][ T9910] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 370.029083][ T9907] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 370.038129][ T9910] EXT4-fs (loop4): invalid journal inode [ 370.046486][ T9907] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 370.065063][ T9907] ext2 filesystem being mounted at /338/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 370.098532][ T9910] EXT4-fs (loop4): can't get journal size [ 370.105304][ T9910] EXT4-fs (loop4): 1 truncate cleaned up [ 370.112885][ T9910] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.779350][ T9904] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 370.798172][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.807799][ T3297] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 370.855339][ T29] audit: type=1326 audit(1736043764.004:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9918 comm="syz.1.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5839f5d29 code=0x7ffc0000 [ 370.949514][ T29] audit: type=1326 audit(1736043764.034:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9918 comm="syz.1.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7fc5839f5d29 code=0x7ffc0000 [ 371.179497][ T29] audit: type=1326 audit(1736043764.254:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9918 comm="syz.1.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5839f5d29 code=0x7ffc0000 [ 371.203112][ T29] audit: type=1326 audit(1736043764.254:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9918 comm="syz.1.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5839f5d29 code=0x7ffc0000 [ 371.231866][ T9921] loop0: detected capacity change from 0 to 164 [ 371.271257][ T9921] syz.0.1649: attempt to access beyond end of device [ 371.271257][ T9921] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 371.318065][ T9921] syz.0.1649: attempt to access beyond end of device [ 371.318065][ T9921] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 371.331806][ T9921] syz.0.1649: attempt to access beyond end of device [ 371.331806][ T9921] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 371.332074][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.346018][ T9921] syz.0.1649: attempt to access beyond end of device [ 371.346018][ T9921] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 371.368348][ T9921] syz.0.1649: attempt to access beyond end of device [ 371.368348][ T9921] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 371.639076][ T9941] netlink: 'syz.3.1655': attribute type 4 has an invalid length. [ 371.879567][ T29] audit: type=1400 audit(1736043764.854:2083): avc: denied { create } for pid=9933 comm="syz.1.1654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 372.956139][ T9953] serio: Serial port pts0 [ 373.380392][ T29] audit: type=1326 audit(1736043766.524:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9970 comm="syz.3.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e81d35d29 code=0x7ffc0000 [ 373.404014][ T29] audit: type=1326 audit(1736043766.524:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9970 comm="syz.3.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e81d35d29 code=0x7ffc0000 [ 373.427584][ T29] audit: type=1326 audit(1736043766.524:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9970 comm="syz.3.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f8e81d35d29 code=0x7ffc0000 [ 373.741470][ T9977] netlink: 'syz.1.1666': attribute type 4 has an invalid length. [ 374.249565][ T9994] loop4: detected capacity change from 0 to 512 [ 374.284519][ T9996] loop2: detected capacity change from 0 to 128 [ 374.304610][ T9996] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 374.313140][ T9994] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 374.349215][ T9994] EXT4-fs (loop4): invalid journal inode [ 374.355262][ T9994] EXT4-fs (loop4): can't get journal size [ 374.366328][ T9996] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 374.381821][ T9994] EXT4-fs (loop4): 1 truncate cleaned up [ 374.387929][ T9996] ext2 filesystem being mounted at /351/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 374.426501][ T9994] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.590926][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.645505][ T3298] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 374.754750][T10014] loop1: detected capacity change from 0 to 512 [ 374.802305][T10014] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.1678: casefold flag without casefold feature [ 374.815918][T10014] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.1678: couldn't read orphan inode 15 (err -117) [ 374.830035][T10014] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.902235][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 374.902287][ T29] audit: type=1400 audit(1736043768.054:2090): avc: denied { append } for pid=10013 comm="syz.1.1678" path="/342/file1/bus" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 374.966031][ T29] audit: type=1400 audit(1736043768.054:2091): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 374.988191][ T29] audit: type=1400 audit(1736043768.054:2092): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 375.009835][ T29] audit: type=1400 audit(1736043768.054:2093): avc: denied { append } for pid=2981 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 375.032223][ T29] audit: type=1400 audit(1736043768.054:2094): avc: denied { open } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 375.055115][ T29] audit: type=1400 audit(1736043768.064:2095): avc: denied { getattr } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 375.200031][ T29] audit: type=1400 audit(1736043768.164:2096): avc: denied { create } for pid=10013 comm="syz.1.1678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 375.220391][ T29] audit: type=1400 audit(1736043768.164:2097): avc: denied { write } for pid=10013 comm="syz.1.1678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 375.240654][ T29] audit: type=1400 audit(1736043768.164:2098): avc: denied { nlmsg_write } for pid=10013 comm="syz.1.1678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 375.261705][ T29] audit: type=1400 audit(1736043768.184:2099): avc: denied { read write } for pid=3297 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 375.313784][T10030] netlink: 'syz.3.1680': attribute type 4 has an invalid length. [ 375.645150][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.044209][T10054] serio: Serial port pts0 [ 376.429991][T10063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1685'. [ 376.717206][T10066] loop2: detected capacity change from 0 to 1024 [ 376.807949][T10066] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.251065][T10080] loop3: detected capacity change from 0 to 128 [ 377.297661][T10080] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 377.429024][T10082] loop0: detected capacity change from 0 to 512 [ 377.479176][T10080] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 377.501354][T10082] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.1691: casefold flag without casefold feature [ 377.519406][T10080] ext2 filesystem being mounted at /330/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 377.564456][T10082] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.1691: couldn't read orphan inode 15 (err -117) [ 377.589351][T10082] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.616849][ T3305] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 377.655354][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.682115][T10093] netlink: 'syz.3.1695': attribute type 4 has an invalid length. [ 377.689470][T10096] loop2: detected capacity change from 0 to 512 [ 377.704061][T10096] journal_path: Non-blockdev passed as './bus' [ 377.710350][T10096] EXT4-fs: error: could not find journal device path [ 377.781228][T10100] loop3: detected capacity change from 0 to 164 [ 377.791597][T10100] syz.3.1696: attempt to access beyond end of device [ 377.791597][T10100] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 377.806695][T10100] syz.3.1696: attempt to access beyond end of device [ 377.806695][T10100] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 377.825702][T10100] syz.3.1696: attempt to access beyond end of device [ 377.825702][T10100] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 377.842756][T10100] syz.3.1696: attempt to access beyond end of device [ 377.842756][T10100] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 377.848933][T10111] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 377.864211][T10100] syz.3.1696: attempt to access beyond end of device [ 377.864211][T10100] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 377.882780][T10100] syz.3.1696: attempt to access beyond end of device [ 377.882780][T10100] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 377.942558][T10124] loop1: detected capacity change from 0 to 512 [ 377.958339][T10124] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.1700: casefold flag without casefold feature [ 377.974791][T10124] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.1700: couldn't read orphan inode 15 (err -117) [ 377.988932][T10124] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.058451][T10136] loop2: detected capacity change from 0 to 512 [ 378.065957][T10136] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 378.090856][T10136] EXT4-fs (loop2): orphan cleanup on readonly fs [ 378.098098][T10136] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1701: bg 0: block 248: padding at end of block bitmap is not set [ 378.115104][T10136] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.1701: Failed to acquire dquot type 1 [ 378.127789][T10136] EXT4-fs (loop2): 1 truncate cleaned up [ 378.135147][T10136] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 378.267720][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.976633][T10149] loop0: detected capacity change from 0 to 1024 [ 379.012040][T10149] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.722640][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.765579][T10148] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.911754][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.926625][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 379.926642][ T29] audit: type=1400 audit(1736043773.074:2179): avc: denied { create } for pid=10160 comm="syz.4.1707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 379.953363][ T29] audit: type=1400 audit(1736043773.074:2180): avc: denied { write } for pid=10160 comm="syz.4.1707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 379.973942][ T29] audit: type=1400 audit(1736043773.074:2181): avc: denied { read } for pid=10160 comm="syz.4.1707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 379.986063][T10166] loop0: detected capacity change from 0 to 512 [ 379.994344][ T29] audit: type=1400 audit(1736043773.074:2182): avc: denied { bind } for pid=10160 comm="syz.4.1707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 379.994427][ T29] audit: type=1400 audit(1736043773.074:2183): avc: denied { setopt } for pid=10160 comm="syz.4.1707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 380.019159][T10166] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 380.059811][T10167] loop3: detected capacity change from 0 to 512 [ 380.083478][T10166] EXT4-fs (loop0): invalid journal inode [ 380.089305][T10166] EXT4-fs (loop0): can't get journal size [ 380.103224][T10161] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.232979][T10161] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.295795][T10167] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 380.304057][T10167] System zones: 0-2, 18-18, 34-34 [ 380.311761][T10161] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.327628][T10167] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1706: bg 0: block 248: padding at end of block bitmap is not set [ 380.343547][T10167] Quota error (device loop3): write_blk: dquota write failed [ 380.350994][T10167] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 380.361000][T10167] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.1706: Failed to acquire dquot type 1 [ 380.371188][T10166] EXT4-fs (loop0): 1 truncate cleaned up [ 380.378732][T10166] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.391310][T10167] EXT4-fs (loop3): 1 truncate cleaned up [ 380.397411][T10167] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.405324][ T29] audit: type=1400 audit(1736043773.554:2184): avc: denied { name_bind } for pid=10165 comm="syz.0.1709" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 380.432099][T10167] ext4 filesystem being mounted at /334/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.433894][ T29] audit: type=1400 audit(1736043773.564:2185): avc: denied { create } for pid=10165 comm="syz.0.1709" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 380.495107][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.508038][T10161] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.583286][T10180] serio: Serial port pts0 [ 380.616392][T10161] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.627469][T10161] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.639332][T10161] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.651156][T10161] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.720077][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.809470][ T29] audit: type=1400 audit(1736043773.924:2186): avc: denied { map } for pid=10183 comm="syz.1.1714" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=28007 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 382.348332][T10224] loop2: detected capacity change from 0 to 164 [ 382.366309][T10224] syz.2.1725: attempt to access beyond end of device [ 382.366309][T10224] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 382.389640][T10229] loop0: detected capacity change from 0 to 512 [ 382.531935][T10229] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 382.540097][T10229] System zones: 0-2, 18-18, 34-34 [ 382.547087][T10229] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1724: bg 0: block 248: padding at end of block bitmap is not set [ 382.562928][T10229] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.1724: Failed to acquire dquot type 1 [ 382.575382][T10229] EXT4-fs (loop0): 1 truncate cleaned up [ 382.581820][T10229] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.594728][T10229] ext4 filesystem being mounted at /351/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.615429][T10224] syz.2.1725: attempt to access beyond end of device [ 382.615429][T10224] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 382.752868][T10224] syz.2.1725: attempt to access beyond end of device [ 382.752868][T10224] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 383.080774][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.174380][T10245] loop0: detected capacity change from 0 to 512 [ 383.312065][T10245] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 383.330538][T10245] EXT4-fs (loop0): invalid journal inode [ 383.346347][T10245] EXT4-fs (loop0): can't get journal size [ 383.362266][T10245] EXT4-fs (loop0): 1 truncate cleaned up [ 383.369899][T10245] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.407529][T10250] loop2: detected capacity change from 0 to 512 [ 383.608579][T10250] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 383.629518][T10250] System zones: 0-2, 18-18, 34-34 [ 383.640483][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.648041][T10250] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1732: bg 0: block 248: padding at end of block bitmap is not set [ 383.676269][T10258] netlink: 'syz.0.1734': attribute type 4 has an invalid length. [ 383.712002][T10250] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.1732: Failed to acquire dquot type 1 [ 383.742873][T10250] EXT4-fs (loop2): 1 truncate cleaned up [ 383.759296][T10250] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.793018][T10250] ext4 filesystem being mounted at /365/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 383.930879][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.973665][T10260] loop0: detected capacity change from 0 to 164 [ 384.002536][T10260] syz.0.1735: attempt to access beyond end of device [ 384.002536][T10260] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 384.017724][T10260] syz.0.1735: attempt to access beyond end of device [ 384.017724][T10260] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 384.033292][T10260] syz.0.1735: attempt to access beyond end of device [ 384.033292][T10260] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 384.046985][T10260] syz.0.1735: attempt to access beyond end of device [ 384.046985][T10260] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 384.060551][T10260] syz.0.1735: attempt to access beyond end of device [ 384.060551][T10260] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 384.074025][T10260] syz.0.1735: attempt to access beyond end of device [ 384.074025][T10260] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 384.087577][T10260] syz.0.1735: attempt to access beyond end of device [ 384.087577][T10260] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 384.102082][T10260] syz.0.1735: attempt to access beyond end of device [ 384.102082][T10260] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 384.120089][T10266] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.129055][T10260] syz.0.1735: attempt to access beyond end of device [ 384.129055][T10260] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 384.247308][T10266] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.269087][T10281] netlink: 'syz.1.1743': attribute type 4 has an invalid length. [ 384.306805][T10266] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.339146][T10284] loop3: detected capacity change from 0 to 512 [ 384.352853][T10284] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #15: comm syz.3.1744: casefold flag without casefold feature [ 384.371432][T10266] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.379612][T10284] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.1744: couldn't read orphan inode 15 (err -117) [ 384.401274][T10288] netlink: 'syz.1.1745': attribute type 4 has an invalid length. [ 384.415803][T10284] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.437807][T10266] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.449369][T10266] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.460892][T10266] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.472633][T10266] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.029523][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 385.029543][ T29] audit: type=1400 audit(1736043778.044:2255): avc: denied { create } for pid=10289 comm="syz.1.1746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 385.207931][ T29] audit: type=1400 audit(1736043778.224:2256): avc: denied { map_create } for pid=10291 comm="syz.2.1748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 385.227318][ T29] audit: type=1400 audit(1736043778.224:2257): avc: denied { read } for pid=10291 comm="syz.2.1748" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 385.250442][ T29] audit: type=1400 audit(1736043778.224:2258): avc: denied { open } for pid=10291 comm="syz.2.1748" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 385.274068][ T29] audit: type=1400 audit(1736043778.234:2259): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 385.296132][ T29] audit: type=1400 audit(1736043778.234:2260): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 385.317743][ T29] audit: type=1400 audit(1736043778.234:2261): avc: denied { append } for pid=2981 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 385.340096][ T29] audit: type=1400 audit(1736043778.234:2262): avc: denied { open } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 385.362630][ T29] audit: type=1400 audit(1736043778.234:2263): avc: denied { getattr } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 385.385569][ T29] audit: type=1400 audit(1736043778.264:2264): avc: denied { create } for pid=10283 comm="syz.3.1744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 385.582604][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.665463][T10309] loop1: detected capacity change from 0 to 164 [ 385.693986][T10309] syz.1.1749: attempt to access beyond end of device [ 385.693986][T10309] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 385.826265][T10323] loop3: detected capacity change from 0 to 512 [ 385.900577][T10323] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 385.912408][T10323] EXT4-fs (loop3): orphan cleanup on readonly fs [ 385.920305][T10323] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1752: bg 0: block 248: padding at end of block bitmap is not set [ 385.936047][T10323] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.1752: Failed to acquire dquot type 1 [ 385.948420][T10323] EXT4-fs (loop3): 1 truncate cleaned up [ 385.955755][T10323] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 386.433791][T10329] loop0: detected capacity change from 0 to 512 [ 386.689953][T10329] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 386.730158][T10329] EXT4-fs (loop0): invalid journal inode [ 386.751322][T10329] EXT4-fs (loop0): can't get journal size [ 386.780699][T10329] EXT4-fs (loop0): 1 truncate cleaned up [ 386.786669][T10329] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.918018][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.001569][T10338] netlink: 'syz.0.1757': attribute type 4 has an invalid length. [ 387.196376][T10351] loop0: detected capacity change from 0 to 512 [ 387.220005][T10351] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 387.271158][T10351] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.286530][T10355] loop2: detected capacity change from 0 to 512 [ 387.321880][T10355] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.505663][T10355] ext4 filesystem being mounted at /369/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.524515][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.543451][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.608321][T10373] loop1: detected capacity change from 0 to 512 [ 387.659641][T10373] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 387.667750][T10373] System zones: 0-2, 18-18, 34-34 [ 387.675796][T10373] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1762: bg 0: block 248: padding at end of block bitmap is not set [ 387.691906][T10373] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.1762: Failed to acquire dquot type 1 [ 387.705153][T10373] EXT4-fs (loop1): 1 truncate cleaned up [ 387.711990][T10373] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.724564][T10373] ext4 filesystem being mounted at /360/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.062766][T10386] loop0: detected capacity change from 0 to 512 [ 388.070953][T10386] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 388.079893][T10386] EXT4-fs (loop0): invalid journal inode [ 388.085754][T10386] EXT4-fs (loop0): can't get journal size [ 388.093287][T10386] EXT4-fs (loop0): 1 truncate cleaned up [ 388.100133][T10386] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.130117][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.282315][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.318241][T10395] loop1: detected capacity change from 0 to 512 [ 388.319562][T10397] loop0: detected capacity change from 0 to 512 [ 388.327031][T10395] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.1768: casefold flag without casefold feature [ 388.343890][T10395] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.1768: couldn't read orphan inode 15 (err -117) [ 388.344036][T10397] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 388.357023][T10395] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.393012][T10397] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.444733][T10397] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.492449][T10397] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.551577][T10397] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.601388][T10397] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.661154][T10397] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.687550][T10397] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.713699][T10397] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.736690][T10397] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.837624][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.867917][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.967131][T10440] loop0: detected capacity change from 0 to 512 [ 388.994636][T10440] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.1771: casefold flag without casefold feature [ 389.097253][T10440] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.1771: couldn't read orphan inode 15 (err -117) [ 389.152497][T10440] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.182100][T10444] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1770'. [ 389.205256][T10444] 1猉功D龌: renamed from 00猉功D龌 (while UP) [ 389.498513][T10464] loop4: detected capacity change from 0 to 512 [ 389.514453][T10464] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 389.544037][T10464] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.593002][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.768800][T10478] loop4: detected capacity change from 0 to 512 [ 389.785261][T10478] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 389.816471][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.834609][T10478] EXT4-fs (loop4): invalid journal inode [ 389.853091][T10478] EXT4-fs (loop4): can't get journal size [ 389.871440][T10478] EXT4-fs (loop4): 1 truncate cleaned up [ 389.898659][T10478] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.011106][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.234153][T10491] loop0: detected capacity change from 0 to 164 [ 390.289679][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.301344][T10489] bio_check_eod: 725 callbacks suppressed [ 390.301364][T10489] syz.0.1779: attempt to access beyond end of device [ 390.301364][T10489] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 390.340479][T10489] syz.0.1779: attempt to access beyond end of device [ 390.340479][T10489] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 390.374330][T10489] syz.0.1779: attempt to access beyond end of device [ 390.374330][T10489] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 390.417087][T10489] syz.0.1779: attempt to access beyond end of device [ 390.417087][T10489] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 390.430669][T10489] syz.0.1779: attempt to access beyond end of device [ 390.430669][T10489] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 390.444525][T10489] syz.0.1779: attempt to access beyond end of device [ 390.444525][T10489] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 390.458011][T10489] syz.0.1779: attempt to access beyond end of device [ 390.458011][T10489] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 390.471575][T10489] syz.0.1779: attempt to access beyond end of device [ 390.471575][T10489] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 390.489480][T10489] syz.0.1779: attempt to access beyond end of device [ 390.489480][T10489] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 390.584698][T10500] loop3: detected capacity change from 0 to 512 [ 390.591831][T10500] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 390.621350][T10500] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.640414][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 390.640432][ T29] audit: type=1326 audit(1736043783.794:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10499 comm="syz.3.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e81d35d29 code=0x7ffc0000 [ 390.670750][ T29] audit: type=1326 audit(1736043783.794:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10499 comm="syz.3.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e81d35d29 code=0x7ffc0000 [ 390.694276][ T29] audit: type=1326 audit(1736043783.824:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10499 comm="syz.3.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e81d35d29 code=0x7ffc0000 [ 390.717851][ T29] audit: type=1326 audit(1736043783.824:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10499 comm="syz.3.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e81d35d29 code=0x7ffc0000 [ 390.720729][T10503] loop2: detected capacity change from 0 to 512 [ 390.741391][ T29] audit: type=1326 audit(1736043783.824:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10499 comm="syz.3.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e81d35d29 code=0x7ffc0000 [ 390.781663][ T29] audit: type=1326 audit(1736043783.854:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10499 comm="syz.3.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e81d35d29 code=0x7ffc0000 [ 390.782660][T10500] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.805216][ T29] audit: type=1326 audit(1736043783.854:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10499 comm="syz.3.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e81d35d29 code=0x7ffc0000 [ 390.838544][ T29] audit: type=1326 audit(1736043783.854:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10499 comm="syz.3.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e81d35d29 code=0x7ffc0000 [ 390.862282][ T29] audit: type=1326 audit(1736043783.854:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10499 comm="syz.3.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e81d35d29 code=0x7ffc0000 [ 390.877224][T10503] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 390.885847][ T29] audit: type=1326 audit(1736043783.854:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10499 comm="syz.3.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e81d35d29 code=0x7ffc0000 [ 390.939647][T10503] System zones: 0-2, 18-18, 34-34 [ 390.951315][T10500] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.004893][T10503] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1780: bg 0: block 248: padding at end of block bitmap is not set [ 391.020311][T10500] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.057559][T10503] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.1780: Failed to acquire dquot type 1 [ 391.071964][T10503] EXT4-fs (loop2): 1 truncate cleaned up [ 391.078066][T10503] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.092449][T10503] ext4 filesystem being mounted at /370/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.104623][T10511] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.121895][T10500] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.152411][T10511] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.216585][T10500] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.236293][T10500] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.254089][T10516] netlink: 'syz.1.1787': attribute type 4 has an invalid length. [ 391.268436][T10518] loop0: detected capacity change from 0 to 512 [ 391.271349][T10500] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.280368][T10518] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 391.293209][T10518] EXT4-fs (loop0): invalid journal inode [ 391.298960][T10518] EXT4-fs (loop0): can't get journal size [ 391.305933][T10518] EXT4-fs (loop0): 1 truncate cleaned up [ 391.313073][T10518] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.314659][T10500] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.348706][T10511] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.378701][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.398075][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.417377][T10511] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.515392][T10526] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.518571][T10529] loop1: detected capacity change from 0 to 128 [ 391.527303][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.568520][T10532] 9pnet_fd: Insufficient options for proto=fd [ 391.582878][T10511] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.596497][T10511] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.626238][T10511] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.657623][T10536] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1791'. [ 391.697382][T10511] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.752332][T10526] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.811757][T10526] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.871725][T10526] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.080907][T10541] loop4: detected capacity change from 0 to 512 [ 392.088970][T10541] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 392.100436][T10541] EXT4-fs (loop4): orphan cleanup on readonly fs [ 392.108266][T10541] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1795: bg 0: block 248: padding at end of block bitmap is not set [ 392.123040][T10541] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.1795: Failed to acquire dquot type 1 [ 392.135282][T10541] EXT4-fs (loop4): 1 truncate cleaned up [ 392.143645][T10541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 392.179364][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.201222][T10544] serio: Serial port pts0 [ 392.503511][T10553] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 392.529170][T10558] netlink: 'syz.1.1800': attribute type 4 has an invalid length. [ 392.562399][T10561] serio: Serial port pts0 [ 392.611626][T10562] loop4: detected capacity change from 0 to 128 [ 392.901671][T10570] loop1: detected capacity change from 0 to 512 [ 392.940740][T10570] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 392.951902][T10570] EXT4-fs (loop1): invalid journal inode [ 392.957648][T10570] EXT4-fs (loop1): can't get journal size [ 392.965513][T10570] EXT4-fs (loop1): 1 truncate cleaned up [ 392.973410][T10570] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.011270][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.104702][T10526] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.116104][T10526] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.127120][T10526] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.138178][T10526] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.455308][T10589] loop3: detected capacity change from 0 to 512 [ 393.632253][T10589] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 393.640361][T10589] System zones: 0-2, 18-18, 34-34 [ 393.646691][T10589] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1807: bg 0: block 248: padding at end of block bitmap is not set [ 393.674551][T10589] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.1807: Failed to acquire dquot type 1 [ 393.690631][T10589] EXT4-fs (loop3): 1 truncate cleaned up [ 393.697626][T10589] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.710228][T10589] ext4 filesystem being mounted at /350/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.775545][T10585] loop0: detected capacity change from 0 to 164 [ 393.825192][T10591] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 393.884810][T10585] syz.0.1808: attempt to access beyond end of device [ 393.884810][T10585] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 394.358575][T10606] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1809'. [ 394.458747][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.603349][T10606] 1猉功D龌: renamed from 00猉功D龌 (while UP) [ 394.877516][T10615] serio: Serial port pts0 [ 395.306437][T10622] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.420949][T10622] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.512000][T10622] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.570858][T10622] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.657238][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 395.657256][ T29] audit: type=1400 audit(1736043788.804:2432): avc: denied { map_create } for pid=10609 comm="syz.1.1815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 395.691935][ T29] audit: type=1400 audit(1736043788.804:2433): avc: denied { bpf } for pid=10609 comm="syz.1.1815" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 395.712600][ T29] audit: type=1400 audit(1736043788.804:2434): avc: denied { map_read map_write } for pid=10609 comm="syz.1.1815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 395.748376][ T29] audit: type=1400 audit(1736043788.894:2435): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 395.772680][ T29] audit: type=1400 audit(1736043788.894:2436): avc: denied { open } for pid=3305 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 395.796823][ T29] audit: type=1400 audit(1736043788.894:2437): avc: denied { ioctl } for pid=3305 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 395.828329][ T29] audit: type=1400 audit(1736043788.974:2438): avc: denied { prog_load } for pid=10627 comm="syz.3.1820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 395.847614][ T29] audit: type=1400 audit(1736043788.974:2439): avc: denied { perfmon } for pid=10627 comm="syz.3.1820" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 395.875106][T10628] loop3: detected capacity change from 0 to 164 [ 395.893260][T10628] bio_check_eod: 1977 callbacks suppressed [ 395.893279][T10628] syz.3.1820: attempt to access beyond end of device [ 395.893279][T10628] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 395.895993][ T29] audit: type=1400 audit(1736043789.014:2440): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 395.899324][T10628] syz.3.1820: attempt to access beyond end of device [ 395.899324][T10628] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 395.913011][ T29] audit: type=1400 audit(1736043789.014:2441): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 395.953212][T10628] syz.3.1820: attempt to access beyond end of device [ 395.953212][T10628] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 395.997027][T10628] syz.3.1820: attempt to access beyond end of device [ 395.997027][T10628] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 396.012497][T10628] syz.3.1820: attempt to access beyond end of device [ 396.012497][T10628] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 396.036496][T10628] syz.3.1820: attempt to access beyond end of device [ 396.036496][T10628] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 396.054784][T10628] syz.3.1820: attempt to access beyond end of device [ 396.054784][T10628] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 397.289758][T10650] loop2: detected capacity change from 0 to 512 [ 397.305702][T10650] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 397.316408][T10650] EXT4-fs (loop2): invalid journal inode [ 397.600901][T10650] EXT4-fs (loop2): can't get journal size [ 397.659689][T10650] EXT4-fs (loop2): 1 truncate cleaned up [ 397.665878][T10650] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.129444][T10645] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1824'. [ 398.221895][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.231475][T10655] loop4: detected capacity change from 0 to 512 [ 398.257723][T10655] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 398.293245][T10656] loop3: detected capacity change from 0 to 164 [ 398.301609][T10656] syz.3.1827: attempt to access beyond end of device [ 398.301609][T10656] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 398.321151][T10655] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.333881][T10656] syz.3.1827: attempt to access beyond end of device [ 398.333881][T10656] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 398.350117][T10656] syz.3.1827: attempt to access beyond end of device [ 398.350117][T10656] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 398.470283][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.340638][T10678] loop3: detected capacity change from 0 to 512 [ 399.387387][T10673] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1830'. [ 399.397175][T10673] 0猉功D龌: renamed from 01猉功D龌 (while UP) [ 399.405516][T10678] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 399.413620][T10678] System zones: 0-2, 18-18, 34-34 [ 399.420644][T10678] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1832: bg 0: block 248: padding at end of block bitmap is not set [ 399.444731][T10678] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.1832: Failed to acquire dquot type 1 [ 399.458295][T10678] EXT4-fs (loop3): 1 truncate cleaned up [ 399.464801][T10678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.477674][T10678] ext4 filesystem being mounted at /355/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.720217][T10684] loop4: detected capacity change from 0 to 512 [ 399.771781][T10684] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.804105][T10684] ext4 filesystem being mounted at /341/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 400.007032][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.321394][T10699] loop1: detected capacity change from 0 to 512 [ 400.331453][T10699] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.1838: casefold flag without casefold feature [ 400.348911][T10699] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.1838: couldn't read orphan inode 15 (err -117) [ 400.367162][T10699] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.596298][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.692619][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 400.692636][ T29] audit: type=1400 audit(1736043793.844:2527): avc: denied { create } for pid=10707 comm="syz.4.1839" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 400.726411][T10708] serio: Serial port pts0 [ 400.938693][T10622] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.950995][T10622] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.965748][T10622] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.014190][T10622] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.077358][ T29] audit: type=1400 audit(1736043794.214:2528): avc: denied { watch watch_reads } for pid=10715 comm="syz.2.1840" path="/384" dev="tmpfs" ino=2098 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 401.226581][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.249115][ T29] audit: type=1400 audit(1736043794.394:2529): avc: denied { mounton } for pid=10732 comm="syz.1.1844" path="/379/file0" dev="tmpfs" ino=2058 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 401.323551][ T29] audit: type=1400 audit(1736043794.394:2530): avc: denied { create } for pid=10721 comm="syz.0.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 401.346761][T10736] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1840'. [ 401.380820][T10737] loop4: detected capacity change from 0 to 512 [ 401.389220][T10737] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 401.408308][T10737] EXT4-fs (loop4): orphan cleanup on readonly fs [ 401.421004][T10737] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1843: bg 0: block 248: padding at end of block bitmap is not set [ 401.437315][T10737] Quota error (device loop4): write_blk: dquota write failed [ 401.444789][T10737] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 401.454848][T10737] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.1843: Failed to acquire dquot type 1 [ 401.472812][T10737] EXT4-fs (loop4): 1 truncate cleaned up [ 401.517744][T10737] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 401.560875][ T29] audit: type=1400 audit(1736043794.704:2531): avc: denied { create } for pid=10727 comm="syz.4.1843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 401.580668][ T29] audit: type=1400 audit(1736043794.704:2532): avc: denied { connect } for pid=10727 comm="syz.4.1843" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 401.837109][ T29] audit: type=1400 audit(1736043794.984:2533): avc: denied { create } for pid=10739 comm="syz.1.1845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 402.264768][ T29] audit: type=1400 audit(1736043795.414:2534): avc: denied { ioctl } for pid=10739 comm="syz.1.1845" path="socket:[30157]" dev="sockfs" ino=30157 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 402.861233][T10749] loop1: detected capacity change from 0 to 164 [ 402.906123][T10744] loop2: detected capacity change from 0 to 164 [ 402.931701][T10740] bio_check_eod: 1 callbacks suppressed [ 402.931726][T10740] syz.1.1845: attempt to access beyond end of device [ 402.931726][T10740] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 402.952863][T10744] syz.2.1847: attempt to access beyond end of device [ 402.952863][T10744] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 403.259712][T10740] syz.1.1845: attempt to access beyond end of device [ 403.259712][T10740] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 403.295589][T10744] syz.2.1847: attempt to access beyond end of device [ 403.295589][T10744] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 403.867392][T10756] loop3: detected capacity change from 0 to 512 [ 403.935541][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.992305][T10756] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 404.000460][T10756] System zones: 0-2, 18-18, 34-34 [ 404.007761][T10756] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1848: bg 0: block 248: padding at end of block bitmap is not set [ 404.026689][T10756] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.1848: Failed to acquire dquot type 1 [ 404.038866][T10756] EXT4-fs (loop3): 1 truncate cleaned up [ 404.045346][T10756] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.058124][T10756] ext4 filesystem being mounted at /359/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.080312][T10761] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.143252][T10763] loop4: detected capacity change from 0 to 128 [ 404.190423][T10761] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.347590][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.382231][T10761] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.426197][T10773] serio: Serial port pts0 [ 404.476040][T10767] syz.4.1850: attempt to access beyond end of device [ 404.476040][T10767] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 404.491505][T10761] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.621546][ T57] kworker/u8:4: attempt to access beyond end of device [ 404.621546][ T57] loop4: rw=1, sector=289, nr_sectors = 16 limit=128 [ 404.714122][T10783] loop4: detected capacity change from 0 to 512 [ 404.731412][T10783] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 404.755888][T10783] EXT4-fs (loop4): invalid journal inode [ 404.772704][T10783] EXT4-fs (loop4): can't get journal size [ 404.794979][T10783] EXT4-fs (loop4): 1 truncate cleaned up [ 405.106665][T10790] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1857'. [ 405.897615][T10797] loop4: detected capacity change from 0 to 128 [ 405.938188][T10804] netlink: 'syz.1.1862': attribute type 4 has an invalid length. [ 405.975012][T10808] loop1: detected capacity change from 0 to 128 [ 406.163427][T10813] loop2: detected capacity change from 0 to 512 [ 406.323534][T10813] ext4 filesystem being mounted at /390/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.575975][ T28] kworker/u8:1: attempt to access beyond end of device [ 406.575975][ T28] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 406.588720][T10797] syz.4.1860: attempt to access beyond end of device [ 406.588720][T10797] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 406.676897][T10821] serio: Serial port pts0 [ 406.761511][T10823] loop2: detected capacity change from 0 to 164 [ 406.769809][T10823] syz.2.1868: attempt to access beyond end of device [ 406.769809][T10823] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 406.783748][T10823] syz.2.1868: attempt to access beyond end of device [ 406.783748][T10823] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 406.914154][T10832] loop3: detected capacity change from 0 to 512 [ 406.922859][T10832] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #15: comm syz.3.1869: casefold flag without casefold feature [ 407.035008][T10832] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.1869: couldn't read orphan inode 15 (err -117) [ 407.117951][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 407.117968][ T29] audit: type=1326 audit(1736043800.264:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10831 comm="syz.3.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e81d35d29 code=0x7ffc0000 [ 407.162071][ T29] audit: type=1326 audit(1736043800.294:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10831 comm="syz.3.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e81d35d29 code=0x7ffc0000 [ 407.398106][T10851] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1871'. [ 407.904908][T10761] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.932312][T10761] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.969546][T10761] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.995192][T10761] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.012724][ T29] audit: type=1400 audit(1736043801.164:2557): avc: denied { write } for pid=10865 comm="syz.4.1875" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 408.139749][T10870] loop0: detected capacity change from 0 to 512 [ 408.187620][T10870] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.1877: casefold flag without casefold feature [ 408.218341][T10870] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.1877: couldn't read orphan inode 15 (err -117) [ 408.373814][ T29] audit: type=1326 audit(1736043801.524:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10869 comm="syz.0.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d1be05d29 code=0x7ffc0000 [ 408.412870][ T29] audit: type=1326 audit(1736043801.524:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10869 comm="syz.0.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d1be05d29 code=0x7ffc0000 [ 408.746360][T10901] serio: Serial port pts0 [ 408.894001][T10916] loop3: detected capacity change from 0 to 512 [ 408.910317][T10916] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 408.918371][T10916] System zones: 0-2, 18-18, 34-34 [ 408.924975][T10916] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1879: bg 0: block 248: padding at end of block bitmap is not set [ 408.940518][T10916] Quota error (device loop3): write_blk: dquota write failed [ 408.947951][T10916] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 408.957891][T10916] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.1879: Failed to acquire dquot type 1 [ 408.971204][T10916] EXT4-fs (loop3): 1 truncate cleaned up [ 408.977309][T10916] ext4 filesystem being mounted at /367/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 409.059999][ T3297] EXT4-fs unmount: 8 callbacks suppressed [ 409.060018][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.331439][T10921] loop4: detected capacity change from 0 to 164 [ 409.369529][T10921] bio_check_eod: 2797 callbacks suppressed [ 409.369575][T10921] syz.4.1882: attempt to access beyond end of device [ 409.369575][T10921] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 409.399605][T10921] syz.4.1882: attempt to access beyond end of device [ 409.399605][T10921] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 409.466705][T10921] syz.4.1882: attempt to access beyond end of device [ 409.466705][T10921] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 409.553951][T10921] syz.4.1882: attempt to access beyond end of device [ 409.553951][T10921] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 409.838419][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.350849][ T29] audit: type=1400 audit(1736043803.264:2560): avc: denied { create } for pid=10928 comm="syz.3.1883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 410.787969][T10946] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1887'. [ 410.927447][T10950] loop4: detected capacity change from 0 to 128 [ 411.070315][T10952] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.124534][T10952] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.210838][T10952] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.251597][T10952] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.337083][T10952] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.372682][T10952] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.403890][T10952] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.431642][T10952] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.544321][ T50] kworker/u8:3: attempt to access beyond end of device [ 411.544321][ T50] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 411.797198][ T29] audit: type=1400 audit(1736043804.944:2561): avc: denied { read write } for pid=3300 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 411.821679][ T29] audit: type=1400 audit(1736043804.944:2562): avc: denied { open } for pid=3300 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 411.977997][T10975] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1893'. [ 411.990886][T10972] loop2: detected capacity change from 0 to 164 [ 412.005706][T10972] syz.2.1897: attempt to access beyond end of device [ 412.005706][T10972] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 412.029177][T10975] 0猉功D龌: renamed from 01猉功D龌 (while UP) [ 412.035615][T10972] syz.2.1897: attempt to access beyond end of device [ 412.035615][T10972] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 412.052637][T10972] syz.2.1897: attempt to access beyond end of device [ 412.052637][T10972] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 412.069150][T10972] syz.2.1897: attempt to access beyond end of device [ 412.069150][T10972] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 412.740195][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 412.740211][ T29] audit: type=1400 audit(1736043805.894:2585): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 412.983346][T10987] loop2: detected capacity change from 0 to 512 [ 413.019870][T10987] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 413.027912][T10987] System zones: 0-2, 18-18, 34-34 [ 413.034093][T10987] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1899: bg 0: block 248: padding at end of block bitmap is not set [ 413.056221][T10987] Quota error (device loop2): write_blk: dquota write failed [ 413.063742][T10987] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 413.073768][T10987] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.1899: Failed to acquire dquot type 1 [ 413.097214][T10987] EXT4-fs (loop2): 1 truncate cleaned up [ 413.103308][T10987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.116044][T10987] ext4 filesystem being mounted at /398/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.116846][ T29] audit: type=1400 audit(1736043806.264:2586): avc: denied { mount } for pid=10985 comm="syz.2.1899" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 413.509890][ T29] audit: type=1400 audit(1736043806.664:2587): avc: denied { watch watch_reads } for pid=10991 comm="syz.4.1900" path="/355" dev="tmpfs" ino=1945 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 413.710779][ T29] audit: type=1400 audit(1736043806.814:2588): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 413.733597][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.744577][T10997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1900'. [ 413.789469][ T29] audit: type=1400 audit(1736043806.914:2589): avc: denied { create } for pid=10991 comm="syz.4.1900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 413.980573][T11000] loop2: detected capacity change from 0 to 512 [ 414.072408][T11003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1902'. [ 414.082425][ T29] audit: type=1400 audit(1736043807.234:2590): avc: denied { module_request } for pid=10996 comm="syz.0.1902" kmod="rtnl-link-b" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 414.156116][T11000] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.1903: casefold flag without casefold feature [ 414.203285][T11000] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1903: couldn't read orphan inode 15 (err -117) [ 414.278908][T11000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.445779][ T29] audit: type=1400 audit(1736043807.594:2591): avc: denied { mount } for pid=10999 comm="syz.2.1903" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 414.468074][ T29] audit: type=1400 audit(1736043807.594:2592): avc: denied { write } for pid=10999 comm="syz.2.1903" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 414.500241][T11008] loop4: detected capacity change from 0 to 512 [ 414.507531][T11008] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 414.528571][T11008] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.548861][T11008] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.635375][T11008] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.674487][T11031] loop0: detected capacity change from 0 to 512 [ 414.685280][T11031] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.1908: casefold flag without casefold feature [ 414.707304][T11031] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.1908: couldn't read orphan inode 15 (err -117) [ 414.708081][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.723622][T11031] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.770497][T11008] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.779284][T11038] loop2: detected capacity change from 0 to 512 [ 414.811891][T11038] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.1909: casefold flag without casefold feature [ 414.827777][T11008] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.929807][T11038] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1909: couldn't read orphan inode 15 (err -117) [ 414.942996][T11038] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.009247][T11008] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.021986][T11008] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.060532][T11008] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.096690][T11008] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.292430][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.557155][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.603818][T11085] serio: Serial port pts0 [ 415.631623][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.380108][T11102] loop3: detected capacity change from 0 to 128 [ 416.594441][T11106] loop2: detected capacity change from 0 to 512 [ 416.619351][T11106] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.1919: casefold flag without casefold feature [ 416.635004][T11106] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1919: couldn't read orphan inode 15 (err -117) [ 416.648050][T11106] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.870605][T11112] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1918'. [ 417.404773][T11141] loop1: detected capacity change from 0 to 128 [ 417.440578][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.482504][ T57] kworker/u8:4: attempt to access beyond end of device [ 417.482504][ T57] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 417.509099][T11145] serio: Serial port pts0 [ 417.558081][T11150] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.586347][T11151] loop2: detected capacity change from 0 to 512 [ 417.594482][T11151] EXT4-fs: Ignoring removed nomblk_io_submit option [ 417.601782][T11151] EXT4-fs: Ignoring removed mblk_io_submit option [ 417.610540][T11151] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 417.618607][T11151] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 417.628129][T11151] EXT4-fs (loop2): 1 truncate cleaned up [ 417.634859][T11151] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.651437][T11150] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.981604][T11150] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.664647][T11150] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.681792][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 418.681809][ T29] audit: type=1400 audit(1736043811.814:2654): avc: denied { create } for pid=11159 comm="syz.4.1929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 418.715526][T11160] netlink: 'syz.4.1929': attribute type 4 has an invalid length. [ 418.793513][T11162] loop0: detected capacity change from 0 to 128 [ 418.802065][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.817758][T11150] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.857932][T11164] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.907340][ T50] kworker/u8:3: attempt to access beyond end of device [ 418.907340][ T50] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 418.928024][T11166] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.953833][T11168] loop0: detected capacity change from 0 to 512 [ 418.963687][T11168] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.1933: casefold flag without casefold feature [ 418.976886][T11168] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.1933: couldn't read orphan inode 15 (err -117) [ 418.991602][T11150] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.003301][T11150] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.013132][T11164] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.025532][T11166] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.038779][T11168] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.109131][T11150] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.128010][T11164] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.152092][ T29] audit: type=1326 audit(1736043812.304:2655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11167 comm="syz.0.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d1be05d29 code=0x7ffc0000 [ 419.180664][T11166] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.193614][ T29] audit: type=1326 audit(1736043812.304:2656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11167 comm="syz.0.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d1be05d29 code=0x7ffc0000 [ 419.194261][T11185] loop1: detected capacity change from 0 to 512 [ 419.230713][T11164] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.242621][T11185] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.1935: casefold flag without casefold feature [ 419.255735][T11185] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.1935: couldn't read orphan inode 15 (err -117) [ 419.300282][T11166] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.302152][T11185] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.337207][T11164] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.348952][T11164] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.360823][T11164] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.372180][T11164] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.474137][ T29] audit: type=1326 audit(1736043812.624:2657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11182 comm="syz.1.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5839f5d29 code=0x7ffc0000 [ 419.531696][ T29] audit: type=1326 audit(1736043812.644:2658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11182 comm="syz.1.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5839f5d29 code=0x7ffc0000 [ 419.714416][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.027414][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.208927][T11250] loop1: detected capacity change from 0 to 512 [ 420.218128][T11250] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.1939: casefold flag without casefold feature [ 420.232737][T11250] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.1939: couldn't read orphan inode 15 (err -117) [ 420.287763][T11250] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.532292][ T29] audit: type=1326 audit(1736043813.684:2659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11249 comm="syz.1.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5839f5d29 code=0x7ffc0000 [ 420.556005][ T29] audit: type=1326 audit(1736043813.684:2660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11249 comm="syz.1.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5839f5d29 code=0x7ffc0000 [ 420.787984][T11271] loop0: detected capacity change from 0 to 512 [ 420.826631][T11271] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 420.841859][T11166] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.874341][T11166] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.885131][T11271] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.890151][T11166] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.912263][T11166] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.949716][T11289] netlink: 'syz.4.1943': attribute type 4 has an invalid length. [ 420.963378][T11290] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.991362][T11287] serio: Serial port pts0 [ 421.000147][ T29] audit: type=1326 audit(1736043814.144:2661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11270 comm="syz.0.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d1be05d29 code=0x7ffc0000 [ 421.023786][ T29] audit: type=1326 audit(1736043814.144:2662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11270 comm="syz.0.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d1be05d29 code=0x7ffc0000 [ 421.047351][ T29] audit: type=1326 audit(1736043814.144:2663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11270 comm="syz.0.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d1be05d29 code=0x7ffc0000 [ 421.096219][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.118688][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.140988][T11290] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.365448][T11290] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.537580][T11290] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.607650][T11304] loop1: detected capacity change from 0 to 164 [ 421.640805][T11304] syz.1.1946: attempt to access beyond end of device [ 421.640805][T11304] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 421.657043][T11304] syz.1.1946: attempt to access beyond end of device [ 421.657043][T11304] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 421.672639][T11304] syz.1.1946: attempt to access beyond end of device [ 421.672639][T11304] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 423.194352][T11334] netlink: 'syz.4.1955': attribute type 4 has an invalid length. [ 423.309416][T11339] loop0: detected capacity change from 0 to 512 [ 423.316510][T11339] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 423.481783][T11339] EXT4-fs (loop0): orphan cleanup on readonly fs [ 423.488904][T11339] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1956: bg 0: block 248: padding at end of block bitmap is not set [ 423.504864][T11339] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.1956: Failed to acquire dquot type 1 [ 423.516812][T11339] EXT4-fs (loop0): 1 truncate cleaned up [ 423.524423][T11339] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 423.704520][T11347] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.720022][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 423.720104][ T29] audit: type=1400 audit(1736043816.874:2729): avc: denied { append } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 423.849246][T11347] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.870607][ T29] audit: type=1400 audit(1736043817.024:2730): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 423.892701][ T29] audit: type=1400 audit(1736043817.024:2731): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 423.914370][ T29] audit: type=1400 audit(1736043817.024:2732): avc: denied { open } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 423.936965][ T29] audit: type=1400 audit(1736043817.024:2733): avc: denied { getattr } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 424.123665][T11347] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.211770][T11347] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.803143][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.818977][ T29] audit: type=1400 audit(1736043817.954:2734): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 424.844210][T11349] loop1: detected capacity change from 0 to 512 [ 424.851198][T11349] EXT4-fs: Ignoring removed nomblk_io_submit option [ 424.851856][ T29] audit: type=1400 audit(1736043818.004:2735): avc: denied { mounton } for pid=11348 comm="syz.1.1960" path="/399/file0" dev="tmpfs" ino=2166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 424.857826][T11349] EXT4-fs: Ignoring removed mblk_io_submit option [ 424.901488][ T29] audit: type=1400 audit(1736043818.054:2736): avc: denied { execmem } for pid=11350 comm="syz.0.1959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 424.952010][T11349] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 424.960095][T11349] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 424.968631][T11349] EXT4-fs (loop1): 1 truncate cleaned up [ 424.981027][T11349] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.013654][T11355] loop3: detected capacity change from 0 to 164 [ 425.020924][ T29] audit: type=1400 audit(1736043818.134:2737): avc: denied { prog_run } for pid=11354 comm="syz.3.1961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 425.040040][ T29] audit: type=1400 audit(1736043818.144:2738): avc: denied { sqpoll } for pid=11354 comm="syz.3.1961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 425.061245][T11355] syz.3.1961: attempt to access beyond end of device [ 425.061245][T11355] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 425.075346][T11355] syz.3.1961: attempt to access beyond end of device [ 425.075346][T11355] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 425.088962][T11355] syz.3.1961: attempt to access beyond end of device [ 425.088962][T11355] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 425.102541][T11355] syz.3.1961: attempt to access beyond end of device [ 425.102541][T11355] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 425.336269][T11355] syz.3.1961: attempt to access beyond end of device [ 425.336269][T11355] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 425.352817][T11355] syz.3.1961: attempt to access beyond end of device [ 425.352817][T11355] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 426.005797][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.043669][T11366] loop1: detected capacity change from 0 to 512 [ 426.059687][T11366] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.1963: casefold flag without casefold feature [ 426.108641][T11366] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.1963: couldn't read orphan inode 15 (err -117) [ 426.121838][T11366] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.608931][T11389] loop3: detected capacity change from 0 to 164 [ 426.618216][T11389] syz.3.1966: attempt to access beyond end of device [ 426.618216][T11389] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 426.632168][T11389] syz.3.1966: attempt to access beyond end of device [ 426.632168][T11389] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 426.645730][T11389] syz.3.1966: attempt to access beyond end of device [ 426.645730][T11389] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 426.659260][T11389] syz.3.1966: attempt to access beyond end of device [ 426.659260][T11389] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 426.758391][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.928296][T11414] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.063686][T11414] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.161451][T11414] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.201314][T11414] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.219177][T11420] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1969'. [ 427.250013][T11420] 0猉功D龌: renamed from 01猉功D龌 (while UP) [ 427.289648][T11414] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.302935][T11414] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.331624][T11290] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.365776][T11414] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.442622][T11290] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.478359][T11414] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.533600][T11290] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.563514][T11290] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.878232][T11427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1970'. [ 428.704261][T11435] loop3: detected capacity change from 0 to 512 [ 428.727065][T11431] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.757002][T11435] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #15: comm syz.3.1974: casefold flag without casefold feature [ 428.771026][T11435] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.1974: couldn't read orphan inode 15 (err -117) [ 428.784174][T11435] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.801185][T11431] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.817086][T11440] loop1: detected capacity change from 0 to 512 [ 428.825186][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 428.825199][ T29] audit: type=1400 audit(1736043821.974:2797): avc: denied { mount } for pid=11434 comm="syz.3.1974" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 428.841740][T11440] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.1975: casefold flag without casefold feature [ 428.870433][T11447] serio: Serial port pts0 [ 428.875324][T11440] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.1975: couldn't read orphan inode 15 (err -117) [ 428.887969][T11440] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.902538][T11431] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.960761][T11431] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.982976][ T29] audit: type=1326 audit(1736043822.134:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11434 comm="syz.3.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e81d35d29 code=0x7ffc0000 [ 429.008321][ T29] audit: type=1326 audit(1736043822.134:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11438 comm="syz.1.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5839f5d29 code=0x7ffc0000 [ 429.031932][ T29] audit: type=1326 audit(1736043822.134:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11438 comm="syz.1.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5839f5d29 code=0x7ffc0000 [ 429.055445][ T29] audit: type=1326 audit(1736043822.154:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11434 comm="syz.3.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e81d35d29 code=0x7ffc0000 [ 429.087057][T11347] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.098654][T11347] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.110148][T11347] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.121541][T11347] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.288797][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.305885][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.333566][T11497] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 430.367523][T11500] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.405315][T11504] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.416450][T11508] loop3: detected capacity change from 0 to 512 [ 430.424879][T11508] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #15: comm syz.3.1985: casefold flag without casefold feature [ 430.438218][T11508] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.1985: couldn't read orphan inode 15 (err -117) [ 430.438469][T11500] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.451808][T11508] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.491323][T11504] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.528083][T11500] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.553244][T11522] serio: Serial port pts0 [ 430.560871][T11504] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.572860][ T29] audit: type=1326 audit(1736043823.724:2802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11505 comm="syz.3.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e81d35d29 code=0x7ffc0000 [ 430.598223][ T29] audit: type=1326 audit(1736043823.724:2803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11505 comm="syz.3.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e81d35d29 code=0x7ffc0000 [ 430.624128][T11500] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.682265][T11504] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.738621][T11500] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.750419][T11530] ================================================================== [ 430.758515][T11530] BUG: KCSAN: data-race in __fput / __tty_hangup [ 430.764863][T11530] [ 430.767209][T11530] write to 0xffff8881033d7790 of 8 bytes by task 11537 on cpu 1: [ 430.774934][T11530] __tty_hangup+0x1d6/0x530 [ 430.779459][T11530] tty_vhangup+0x17/0x20 [ 430.783714][T11530] pty_close+0x262/0x280 [ 430.787966][T11530] tty_release+0x206/0x930 [ 430.792395][T11530] __fput+0x17a/0x6d0 [ 430.796386][T11530] ____fput+0x1c/0x30 [ 430.800374][T11530] task_work_run+0x13a/0x1a0 [ 430.804971][T11530] syscall_exit_to_user_mode+0xa8/0x120 [ 430.810540][T11530] do_syscall_64+0xd6/0x1c0 [ 430.815051][T11530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.820986][T11530] [ 430.823307][T11530] read to 0xffff8881033d7790 of 8 bytes by task 11530 on cpu 0: [ 430.830938][T11530] __fput+0x14e/0x6d0 [ 430.834931][T11530] ____fput+0x1c/0x30 [ 430.839097][T11530] task_work_run+0x13a/0x1a0 [ 430.843694][T11530] syscall_exit_to_user_mode+0xa8/0x120 [ 430.849254][T11530] do_syscall_64+0xd6/0x1c0 [ 430.853760][T11530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.859680][T11530] [ 430.861999][T11530] value changed: 0xffffffff8569e598 -> 0xffffffff8569e430 [ 430.869107][T11530] [ 430.871436][T11530] Reported by Kernel Concurrency Sanitizer on: [ 430.877620][T11530] CPU: 0 UID: 0 PID: 11530 Comm: syz.2.1988 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 430.888384][T11530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 430.898454][T11530] ================================================================== [ 430.910445][T11500] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.922489][T11500] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.933938][T11500] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.943605][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.504808][T11431] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.515762][T11431] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.526895][T11431] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.537971][T11431] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.054390][T11504] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.065210][T11504] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.076116][T11504] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.086965][T11504] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0