last executing test programs: 1m6.614993966s ago: executing program 3 (id=132): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0xf}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 1m6.546747138s ago: executing program 3 (id=138): r0 = io_uring_setup(0x4f81, &(0x7f0000001380)={0x0, 0xcf54, 0x800, 0xfffffffc, 0x87}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000280)=""/4094, 0xffe}], 0x0}, 0x20) 1m6.513651688s ago: executing program 3 (id=141): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0xfe, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x2, @loopback, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m6.228801134s ago: executing program 3 (id=158): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@dioread_lock}, {@data_err_ignore}, {@discard}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x87) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) 1m6.073076857s ago: executing program 2 (id=166): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 1m6.031172488s ago: executing program 2 (id=167): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00', @ANYRESDEC=r2], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1m6.018350928s ago: executing program 3 (id=169): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x800, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x2008, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xc, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1a, r1, 0x1, 0xf, 0x6, @multicast}, 0x14) sendto$packet(r0, &(0x7f0000000180)="0b0312002e1264000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r1}, 0x14) 1m5.90988455s ago: executing program 2 (id=172): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, r0, r0) 1m5.887848311s ago: executing program 2 (id=174): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='\x00', 0x89901) move_mount(r0, &(0x7f0000000500)='.\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0/file0\x00', 0x0) 1m5.871837211s ago: executing program 2 (id=176): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$selinux_access(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) 1m5.747378553s ago: executing program 3 (id=183): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) time(&(0x7f0000000680)) 1m5.735270394s ago: executing program 32 (id=183): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) time(&(0x7f0000000680)) 1m5.655402555s ago: executing program 2 (id=188): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300030000000903000038000000fcffffff0e000000000020000100050000010000000000000300000008000000f30000007f00000004"], 0x58) close(r1) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 1m5.655302775s ago: executing program 33 (id=188): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300030000000903000038000000fcffffff0e000000000020000100050000010000000000000300000008000000f30000007f00000004"], 0x58) close(r1) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 1m1.270525111s ago: executing program 5 (id=318): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) listen(0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)) 1m1.235768152s ago: executing program 5 (id=322): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e21, 0x3, @mcast2}, {0xa, 0xffff, 0x0, @rand_addr=' \x01\x00', 0x404}, r1, 0x7}}, 0x48) 1m1.205126913s ago: executing program 5 (id=325): r0 = open(&(0x7f0000000200)='.\x00', 0x42480, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 1m1.167586043s ago: executing program 5 (id=327): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008082, &(0x7f00000004c0)={[{@nodioread_nolock}, {@nolazytime}, {@dioread_lock}, {@errors_continue}, {@dioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@nomblk_io_submit}, {@nobarrier}]}, 0x0, 0x5e9, &(0x7f00000005c0)="$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") sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="26fe25", 0x3}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) 1m1.008291767s ago: executing program 5 (id=333): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}}, 0x8010) 59.871452469s ago: executing program 5 (id=386): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000340)={0x23, 0x0, 0x0, 0x2}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000880)='kmem_cache_free\x00', r2, 0x0, 0x20000}, 0x18) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) 59.83768591s ago: executing program 34 (id=386): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000340)={0x23, 0x0, 0x0, 0x2}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000880)='kmem_cache_free\x00', r2, 0x0, 0x20000}, 0x18) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) 57.136797413s ago: executing program 0 (id=498): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) 57.092740424s ago: executing program 0 (id=500): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='iso9660\x00', 0x1000089, 0x0) 57.055849894s ago: executing program 0 (id=502): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, 0x80510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10001, 0x2, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$key(0xf, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x400000013) 57.022854555s ago: executing program 0 (id=504): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x24) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000240)='./file0/file0\x00', 0x9) 57.007924245s ago: executing program 0 (id=506): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007"], 0x0, 0xc}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd60"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 56.79461423s ago: executing program 0 (id=515): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) 56.79448155s ago: executing program 35 (id=515): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) 19.762934884s ago: executing program 8 (id=1985): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000020000000000008000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000020095"], &(0x7f00000007c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41002, 0x8, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) 19.558551118s ago: executing program 8 (id=1991): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r2 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) 19.501345199s ago: executing program 8 (id=1993): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r1}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20) 19.416281651s ago: executing program 8 (id=1998): prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r1, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}, 0x71d8e07a}], 0x1, 0x12020, 0x0) 19.360892812s ago: executing program 8 (id=2001): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) 19.295390103s ago: executing program 8 (id=2003): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) waitid(0x1, r0, 0x0, 0x1000008, 0x0) 4.814593185s ago: executing program 36 (id=2003): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) waitid(0x1, r0, 0x0, 0x1000008, 0x0) 1.087203419s ago: executing program 6 (id=2578): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000c1010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000059729ec6850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000200)=0x7dffeffc) close(r2) 920.435511ms ago: executing program 6 (id=2594): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) 895.558012ms ago: executing program 6 (id=2596): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x2a, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 869.054822ms ago: executing program 6 (id=2588): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x23) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6}, {0x1000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {0xffffffff}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x7}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x10000000}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x800000}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x4, 0xc000000}, {}, {0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x23}, {0x0, 0x0, 0x0, 0x404}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {0x0, 0x0, 0x9f, 0x0, 0x0, 0x1}, {0x20000, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x747}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {0x40000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {}, {}, {0x0, 0x78}, {0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x2}], [{0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) 815.042753ms ago: executing program 9 (id=2604): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0) close(r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) 799.864124ms ago: executing program 4 (id=2593): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000e905e700000700000028000010"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd29}, 0x14}}, 0x40000) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000eeff12"], 0x30}}, 0x0) 776.047114ms ago: executing program 6 (id=2597): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") sendmmsg$inet(0xffffffffffffffff, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7", 0x36}], 0x1}}], 0x1, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') syz_emit_ethernet(0xc6, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080047deffb700000000001190780000000000000000940400000007032800004e20009c61fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f772b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe"], 0x0) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$msr(r0, &(0x7f0000000d40)=""/43, 0x2b) 774.238384ms ago: executing program 4 (id=2598): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) 733.098935ms ago: executing program 9 (id=2599): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0xffffd000) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x800, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0}}], 0x1, 0x60040000) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0xdb30}], 0x1, 0x40002042, 0x0) 728.220385ms ago: executing program 6 (id=2600): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d843b61bf79a3879fa0", 0x37) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 721.772925ms ago: executing program 4 (id=2602): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x2204803, &(0x7f0000000300)) 693.769545ms ago: executing program 9 (id=2603): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) close_range(r1, 0xffffffffffffffff, 0x0) 670.086807ms ago: executing program 4 (id=2606): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_delrule={0x1c, 0x21, 0x1, 0x0, 0x25dfdbfe}, 0x1c}}, 0x44044) 631.783767ms ago: executing program 9 (id=2607): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x54, 0x2c, 0xd27, 0x703d25, 0x2, {0x0, 0x0, 0x0, r2, {0x10, 0xf}, {}, {0x8, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x1e, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0xfb3a}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe0, 0x7}}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0x6}}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x54}}, 0xd4) 513.568009ms ago: executing program 9 (id=2610): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r1, 0x0, 0x2, 0x4000}}, 0x20) 483.93009ms ago: executing program 9 (id=2612): r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) 404.261992ms ago: executing program 1 (id=2614): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_clone3(&(0x7f0000001880)={0x120000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) wait4(0x0, 0x0, 0x40000000, 0x0) 369.998402ms ago: executing program 4 (id=2625): r0 = syz_io_uring_setup(0x3b51, &(0x7f00000006c0)={0x0, 0x7758, 0x1000, 0x8004, 0xdd}, &(0x7f0000000040)=0x0, &(0x7f0000000ac0)=0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r0, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0) 290.701964ms ago: executing program 7 (id=2617): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105500, &(0x7f0000000040)=@usbdevfs_connect={0x6a0}) 221.093685ms ago: executing program 7 (id=2618): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r2 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) 198.907485ms ago: executing program 1 (id=2619): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2140, 0x25) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00') 178.659096ms ago: executing program 1 (id=2620): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000000)="aa", 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) 167.506236ms ago: executing program 7 (id=2621): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) setrlimit(0x4, &(0x7f0000000280)={0x101, 0x7ff}) 119.457227ms ago: executing program 1 (id=2622): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xa00, 0x1c2) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0x3a) 119.304947ms ago: executing program 7 (id=2623): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 88.885558ms ago: executing program 7 (id=2624): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x6, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x80005, 0x0, 0x0, 0x4, 0x8, 0x0, 0x100000, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7fffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x40000000, 0x3, 0x3, 0x6, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x3, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10000000, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x8, 0xe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x44, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffd, 0x1, 0x1, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x8000, 0x1ff, 0x23, 0x20aaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xf, 0x0, 0x1, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) 79.165488ms ago: executing program 4 (id=2626): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==") 48.832698ms ago: executing program 7 (id=2627): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, &(0x7f0000000000)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000580)={0x9, 0x80}, 0xe) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/91, 0x5b}}], 0x1, 0x40000023, 0x0) 48.470978ms ago: executing program 1 (id=2628): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 0s ago: executing program 1 (id=2629): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) kernel console output (not intermixed with test programs): bridge0: port 2(bridge_slave_1) entered disabled state [ 43.142989][ T4749] bridge_slave_1: entered allmulticast mode [ 43.157609][ T4810] netlink: 'syz.1.538': attribute type 10 has an invalid length. [ 43.165390][ T4810] netlink: 40 bytes leftover after parsing attributes in process `syz.1.538'. [ 43.175477][ T4749] bridge_slave_1: entered promiscuous mode [ 43.184638][ T51] hsr_slave_0: left promiscuous mode [ 43.191060][ T51] hsr_slave_1: left promiscuous mode [ 43.196596][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.204176][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.212936][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.220549][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.232558][ T51] veth1_macvtap: left promiscuous mode [ 43.238282][ T51] veth0_macvtap: left promiscuous mode [ 43.243906][ T51] veth1_vlan: left promiscuous mode [ 43.249315][ T51] veth0_vlan: left promiscuous mode [ 43.315906][ T51] team0 (unregistering): Port device team_slave_1 removed [ 43.324941][ T51] team0 (unregistering): Port device team_slave_0 removed [ 43.354302][ T4812] netlink: 96 bytes leftover after parsing attributes in process `syz.7.539'. [ 43.387801][ T4749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.404615][ T4749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.437471][ T4828] net_ratelimit: 2 callbacks suppressed [ 43.443068][ T4828] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 43.449823][ T4828] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 43.456553][ T4828] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 43.463284][ T4828] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 43.470086][ T4828] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 43.476830][ T4828] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 43.483513][ T4828] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 43.490217][ T4828] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 43.496919][ T4828] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 43.503625][ T4828] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 43.535182][ T4822] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.559276][ T4749] team0: Port device team_slave_0 added [ 43.577780][ T4749] team0: Port device team_slave_1 added [ 43.613223][ T4822] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.633307][ T4749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.640314][ T4749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.666297][ T4749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.678184][ T4749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.685308][ T4749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.711337][ T4749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.748853][ T4822] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.769344][ T4749] hsr_slave_0: entered promiscuous mode [ 43.775628][ T4749] hsr_slave_1: entered promiscuous mode [ 43.782151][ T4749] debugfs: 'hsr0' already exists in 'hsr' [ 43.787917][ T4749] Cannot create hsr debugfs directory [ 43.834066][ T4822] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.850757][ T4849] sch_fq: defrate 4294967295 ignored. [ 43.888943][ T3450] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.903162][ T3450] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.917055][ T1085] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.929368][ T4749] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 43.942249][ T1085] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.950814][ T4749] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 43.963450][ T4749] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 43.980210][ T4749] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 44.012476][ T4860] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 44.032632][ T4860] block device autoloading is deprecated and will be removed. [ 44.075061][ T4749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.113734][ T4749] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.128816][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.135891][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.165415][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.172620][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.182585][ T4881] hsr_slave_0: left promiscuous mode [ 44.188292][ T4881] hsr_slave_1: left promiscuous mode [ 44.270036][ T4896] loop6: detected capacity change from 0 to 164 [ 44.292877][ T4749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.354056][ T4910] loop6: detected capacity change from 0 to 2048 [ 44.381010][ T4916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.388629][ T4916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.396873][ T4910] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.397736][ T4916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.409078][ T4910] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.416302][ T4916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.537190][ T4749] veth0_vlan: entered promiscuous mode [ 44.554778][ T3918] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.566244][ T4749] veth1_vlan: entered promiscuous mode [ 44.578158][ T4749] veth0_macvtap: entered promiscuous mode [ 44.593562][ T4749] veth1_macvtap: entered promiscuous mode [ 44.606191][ T4749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.617313][ T4749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.630543][ T1085] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.646979][ T4943] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.659496][ T1085] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.672483][ T1085] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.683300][ T1085] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.707537][ T4943] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.780405][ T4954] __nla_validate_parse: 5 callbacks suppressed [ 44.780421][ T4954] netlink: 4 bytes leftover after parsing attributes in process `syz.6.588'. [ 44.793522][ T36] IPVS: starting estimator thread 0... [ 44.818709][ T4943] bond0: (slave netdevsim1): Releasing backup interface [ 44.827313][ T4943] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.861110][ T4954] hsr_slave_0: left promiscuous mode [ 44.870808][ T4954] hsr_slave_1: left promiscuous mode [ 44.896481][ T4962] netlink: 8 bytes leftover after parsing attributes in process `syz.7.591'. [ 44.913873][ T4964] loop8: detected capacity change from 0 to 2048 [ 44.913902][ T4956] IPVS: using max 2736 ests per chain, 136800 per kthread [ 44.943844][ T4943] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.956100][ T4969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.956299][ T4964] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.963521][ T4969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.975883][ T4964] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.008641][ T4969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.016159][ T4969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.036350][ T291] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.055655][ T291] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.065098][ T291] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.075027][ T291] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.128604][ T4749] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.254972][ T4987] loop4: detected capacity change from 0 to 1024 [ 45.261893][ T4987] EXT4-fs: Ignoring removed nobh option [ 45.268249][ T4987] EXT4-fs: Ignoring removed bh option [ 45.289126][ T4987] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.304093][ T29] kauditd_printk_skb: 240 callbacks suppressed [ 45.304107][ T29] audit: type=1400 audit(1757102947.903:1213): avc: denied { read write open } for pid=4986 comm="syz.4.602" path="/138/file1/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.318656][ T4987] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.602: Allocating blocks 481-513 which overlap fs metadata [ 45.334153][ T29] audit: type=1400 audit(1757102947.903:1214): avc: denied { map } for pid=4986 comm="syz.4.602" path="/138/file1/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.381529][ T4987] EXT4-fs (loop4): pa ffff888107296070: logic 352, phys. 465, len 3 [ 45.389742][ T4987] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 45.419368][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.453725][ T4997] netlink: 8 bytes leftover after parsing attributes in process `syz.8.605'. [ 45.464064][ T4997] netlink: 8 bytes leftover after parsing attributes in process `syz.8.605'. [ 45.474668][ T4997] netlink: 8 bytes leftover after parsing attributes in process `syz.8.605'. [ 45.484832][ T4997] netlink: 8 bytes leftover after parsing attributes in process `syz.8.605'. [ 45.493798][ T3411] IPVS: starting estimator thread 0... [ 45.590548][ T4999] IPVS: using max 2736 ests per chain, 136800 per kthread [ 45.722221][ T5009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.729684][ T5009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.737728][ T5009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.745378][ T5009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.877474][ T29] audit: type=1326 audit(1757102948.502:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5014 comm="syz.1.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63710ebe9 code=0x7ffc0000 [ 45.901012][ T29] audit: type=1326 audit(1757102948.502:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5014 comm="syz.1.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63710ebe9 code=0x7ffc0000 [ 45.924551][ T29] audit: type=1326 audit(1757102948.502:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5014 comm="syz.1.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fc63710ebe9 code=0x7ffc0000 [ 45.947956][ T29] audit: type=1326 audit(1757102948.502:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5014 comm="syz.1.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63710ebe9 code=0x7ffc0000 [ 45.980629][ T29] audit: type=1400 audit(1757102948.596:1219): avc: denied { read } for pid=5016 comm="syz.8.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 46.021198][ T29] audit: type=1400 audit(1757102948.649:1220): avc: denied { ioctl } for pid=5020 comm="syz.1.616" path="socket:[11209]" dev="sockfs" ino=11209 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.037195][ T5021] bond_slave_0: entered promiscuous mode [ 46.051636][ T5021] bond_slave_1: entered promiscuous mode [ 46.060224][ T5021] macsec1: entered allmulticast mode [ 46.065543][ T5021] bond0: entered allmulticast mode [ 46.070729][ T5021] bond_slave_0: entered allmulticast mode [ 46.076524][ T5021] bond_slave_1: entered allmulticast mode [ 46.096505][ T5021] bond0: left allmulticast mode [ 46.101459][ T5021] bond_slave_0: left allmulticast mode [ 46.106978][ T5021] bond_slave_1: left allmulticast mode [ 46.112458][ T5021] bond_slave_0: left promiscuous mode [ 46.117990][ T5021] bond_slave_1: left promiscuous mode [ 46.154109][ T29] audit: type=1326 audit(1757102948.796:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5030 comm="syz.7.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a86febe9 code=0x7ffc0000 [ 46.177594][ T29] audit: type=1326 audit(1757102948.796:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5030 comm="syz.7.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a86febe9 code=0x7ffc0000 [ 46.225905][ T5036] loop7: detected capacity change from 0 to 2048 [ 46.259532][ T5044] veth0_to_team: entered promiscuous mode [ 46.268208][ T5036] Alternate GPT is invalid, using primary GPT. [ 46.274573][ T5036] loop7: p1 p2 p3 [ 46.313280][ T5051] dvmrp0: entered allmulticast mode [ 46.481599][ T5062] loop1: detected capacity change from 0 to 128 [ 46.493010][ T5062] syz.1.634: attempt to access beyond end of device [ 46.493010][ T5062] loop1: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 46.508232][ T5062] syz.1.634: attempt to access beyond end of device [ 46.508232][ T5062] loop1: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 46.521850][ T5062] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 46.533247][ T5062] syz.1.634: attempt to access beyond end of device [ 46.533247][ T5062] loop1: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 46.551387][ T5062] syz.1.634: attempt to access beyond end of device [ 46.551387][ T5062] loop1: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 46.564750][ T5062] Buffer I/O error on dev loop1, logical block 84, lost async page write [ 46.574696][ T5062] syz.1.634: attempt to access beyond end of device [ 46.574696][ T5062] loop1: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 46.588921][ T5062] syz.1.634: attempt to access beyond end of device [ 46.588921][ T5062] loop1: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 46.602294][ T5062] Buffer I/O error on dev loop1, logical block 96, lost async page write [ 46.611911][ T5062] syz.1.634: attempt to access beyond end of device [ 46.611911][ T5062] loop1: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 46.625624][ T5062] syz.1.634: attempt to access beyond end of device [ 46.625624][ T5062] loop1: rw=2049, sector=200, nr_sectors = 2 limit=128 [ 46.638994][ T5062] Buffer I/O error on dev loop1, logical block 100, lost async page write [ 46.648547][ T5062] syz.1.634: attempt to access beyond end of device [ 46.648547][ T5062] loop1: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 46.667779][ T5062] syz.1.634: attempt to access beyond end of device [ 46.667779][ T5062] loop1: rw=2049, sector=224, nr_sectors = 2 limit=128 [ 46.681174][ T5062] Buffer I/O error on dev loop1, logical block 112, lost async page write [ 46.691404][ T5062] Buffer I/O error on dev loop1, logical block 116, lost async page write [ 46.701721][ T5062] Buffer I/O error on dev loop1, logical block 88, lost async page write [ 46.711506][ T5062] Buffer I/O error on dev loop1, logical block 92, lost async page write [ 46.721450][ T5062] Buffer I/O error on dev loop1, logical block 120, lost async page write [ 46.731144][ T5062] Buffer I/O error on dev loop1, logical block 124, lost async page write [ 46.877065][ T3391] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3391 comm=kworker/0:4 [ 46.890432][ T5082] 9pnet: p9_errstr2errno: server reported unknown error  [ 47.331272][ T5119] loop8: detected capacity change from 0 to 512 [ 47.360014][ T5119] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 47.369603][ T5119] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 47.378999][ T5119] EXT4-fs (loop8): 1 truncate cleaned up [ 47.386007][ T5119] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.509902][ T4749] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.660951][ T5143] loop8: detected capacity change from 0 to 1024 [ 47.681727][ T5143] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.699366][ T5143] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.731256][ T4749] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.776975][ T5158] rdma_op ffff8881048a3580 conn xmit_rdma 0000000000000000 [ 47.838010][ T5164] loop7: detected capacity change from 0 to 512 [ 47.850098][ T5164] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 47.866377][ T5164] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 47.895890][ T5164] EXT4-fs (loop7): 1 truncate cleaned up [ 47.901950][ T5164] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.078322][ T4439] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.136704][ T5182] loop4: detected capacity change from 0 to 1024 [ 48.210354][ T5182] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.223284][ T5182] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.272116][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.356633][ T5206] loop4: detected capacity change from 0 to 512 [ 48.382463][ T5206] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 48.399400][ T5217] unsupported nla_type 52263 [ 48.399496][ T5206] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 48.415148][ T5206] EXT4-fs (loop4): 1 truncate cleaned up [ 48.426491][ T5206] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.469491][ T5221] ALSA: seq fatal error: cannot create timer (-22) [ 48.535843][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.545128][ T5229] veth0_to_team: entered promiscuous mode [ 48.736755][ T5260] : renamed from veth0_to_bond (while UP) [ 48.752423][ T5266] SELinux: Context  is not valid (left unmapped). [ 48.817499][ T5278] netlink: 'syz.1.731': attribute type 21 has an invalid length. [ 48.831419][ T5278] netlink: 132 bytes leftover after parsing attributes in process `syz.1.731'. [ 48.835916][ T5280] loop8: detected capacity change from 0 to 1024 [ 48.883179][ T5280] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.913513][ T4749] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.979873][ T5301] netlink: 'syz.1.740': attribute type 21 has an invalid length. [ 49.002143][ T5301] netlink: 132 bytes leftover after parsing attributes in process `syz.1.740'. [ 49.080810][ T5317] netlink: 'syz.6.746': attribute type 21 has an invalid length. [ 49.088801][ T5317] netlink: 132 bytes leftover after parsing attributes in process `syz.6.746'. [ 49.127805][ T5321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.747'. [ 49.130778][ T5320] loop6: detected capacity change from 0 to 512 [ 49.142998][ T5321] hsr_slave_0: left promiscuous mode [ 49.144945][ T5320] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 49.156364][ T5321] hsr_slave_1: left promiscuous mode [ 49.156418][ T5320] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 49.170677][ T5320] EXT4-fs (loop6): 1 truncate cleaned up [ 49.176886][ T5320] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.225289][ T5324] loop1: detected capacity change from 0 to 1024 [ 49.232516][ T3918] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.239404][ T5324] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.267313][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.676101][ T5353] random: crng reseeded on system resumption [ 49.703515][ T5356] netlink: 4 bytes leftover after parsing attributes in process `syz.7.761'. [ 49.714560][ T5356] hsr_slave_0: left promiscuous mode [ 49.720317][ T5356] hsr_slave_1: left promiscuous mode [ 50.210985][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 50.211000][ T29] audit: type=1326 audit(1757102953.048:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5367 comm="syz.7.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a86febe9 code=0x7ffc0000 [ 50.244690][ T29] audit: type=1326 audit(1757102953.079:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5367 comm="syz.7.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f16a86febe9 code=0x7ffc0000 [ 50.268068][ T29] audit: type=1326 audit(1757102953.079:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5367 comm="syz.7.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a86febe9 code=0x7ffc0000 [ 50.291426][ T29] audit: type=1326 audit(1757102953.079:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5367 comm="syz.7.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a86febe9 code=0x7ffc0000 [ 50.291591][ T5363] loop1: detected capacity change from 0 to 512 [ 50.314785][ T29] audit: type=1326 audit(1757102953.079:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5367 comm="syz.7.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f16a86febe9 code=0x7ffc0000 [ 50.314824][ T29] audit: type=1326 audit(1757102953.079:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5367 comm="syz.7.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a86febe9 code=0x7ffc0000 [ 50.314850][ T29] audit: type=1326 audit(1757102953.079:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5367 comm="syz.7.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a86febe9 code=0x7ffc0000 [ 50.370477][ T29] audit: type=1400 audit(1757102953.216:1400): avc: denied { bind } for pid=5369 comm="syz.8.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.410831][ T29] audit: type=1400 audit(1757102953.216:1401): avc: denied { name_bind } for pid=5369 comm="syz.8.767" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 50.431614][ T29] audit: type=1400 audit(1757102953.216:1402): avc: denied { node_bind } for pid=5369 comm="syz.8.767" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 50.454231][ T5363] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 50.470285][ T5363] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 50.480670][ T5363] EXT4-fs (loop1): 1 truncate cleaned up [ 50.487007][ T5363] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.558796][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.808809][ T5424] net_ratelimit: 3319 callbacks suppressed [ 50.808871][ T5424] IPv4: Oversized IP packet from 127.202.26.0 [ 50.866065][ T5432] 9pnet_fd: p9_fd_create_tcp (5432): problem connecting socket to 127.0.0.1 [ 50.898773][ T5434] hub 9-0:1.0: USB hub found [ 50.907922][ T5434] hub 9-0:1.0: 8 ports detected [ 51.403794][ T5477] loop6: detected capacity change from 0 to 164 [ 51.420665][ T1035] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 51.428170][ T1035] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 51.435657][ T1035] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 51.461977][ T5477] bio_check_eod: 19 callbacks suppressed [ 51.461991][ T5477] syz.6.817: attempt to access beyond end of device [ 51.461991][ T5477] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 51.466179][ T1035] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 51.485611][ T5477] syz.6.817: attempt to access beyond end of device [ 51.485611][ T5477] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 51.488903][ T1035] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 51.509700][ T1035] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 51.517098][ T1035] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 51.524609][ T1035] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 51.531991][ T1035] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 51.539390][ T1035] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 51.564068][ T1035] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz0] on syz1 [ 51.594886][ T5483] atomic_op ffff88811a1aed28 conn xmit_atomic 0000000000000000 [ 51.875762][ T5542] random: crng reseeded on system resumption [ 51.905847][ T5545] netlink: 4 bytes leftover after parsing attributes in process `syz.8.849'. [ 51.915827][ T5545] netlink: 4 bytes leftover after parsing attributes in process `syz.8.849'. [ 51.958822][ T5551] netlink: 14 bytes leftover after parsing attributes in process `syz.1.852'. [ 51.978035][ T5554] openvswitch: netlink: Message has 6 unknown bytes. [ 51.978113][ T5555] @: renamed from vlan0 (while UP) [ 52.149128][ T5572] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22 [ 52.157388][ T5572] netdevsim netdevsim8: Direct firmware load for . failed with error -22 [ 52.203938][ T5577] random: crng reseeded on system resumption [ 52.323456][ T5588] openvswitch: netlink: Message has 6 unknown bytes. [ 53.161955][ T5613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.881'. [ 53.278375][ T5620] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5620 comm=syz.1.884 [ 53.580724][ T5673] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 53.596177][ T5671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.909'. [ 53.646429][ T5673] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 53.693836][ T5673] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 53.828846][ T5703] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.836654][ T5703] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.863516][ T5703] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.870971][ T5703] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.037600][ T5730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.055420][ T5737] loop7: detected capacity change from 0 to 1024 [ 54.061908][ T5730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.065130][ T5737] EXT4-fs: inline encryption not supported [ 54.131182][ T5737] EXT4-fs: Ignoring removed bh option [ 54.146553][ T5745] loop1: detected capacity change from 0 to 512 [ 54.163302][ T5737] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.184020][ T5745] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.203687][ T5745] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.237796][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.238421][ T5737] loop7: detected capacity change from 1024 to 64 [ 54.301754][ T4439] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /112/file1: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0 [ 54.328531][ T4439] EXT4-fs (loop7): Remounting filesystem read-only [ 54.359878][ T5054] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.369954][ T5746] kmmpd-loop7: attempt to access beyond end of device [ 54.369954][ T5746] loop7: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 54.383477][ T5746] buffer_io_error: 4 callbacks suppressed [ 54.383488][ T5746] Buffer I/O error on dev loop7, logical block 64, lost sync page write [ 54.588928][ T3450] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.630929][ T3450] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.669733][ T3450] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.716815][ T3450] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.752060][ T5761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.759673][ T5761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.767581][ T5761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.775018][ T5761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.788970][ T5763] netlink: 48 bytes leftover after parsing attributes in process `syz.4.949'. [ 54.842986][ T5760] loop1: detected capacity change from 0 to 8192 [ 54.852602][ T3450] bridge_slave_1: left allmulticast mode [ 54.858327][ T3450] bridge_slave_1: left promiscuous mode [ 54.864102][ T3450] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.873310][ T3450] bridge_slave_0: left allmulticast mode [ 54.879043][ T3450] bridge_slave_0: left promiscuous mode [ 54.884696][ T3450] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.983341][ T3450] dvmrp0 (unregistering): left allmulticast mode [ 54.989989][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 54.990003][ T29] audit: type=1326 audit(2000000001.742:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5785 comm="syz.4.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117e65ebe9 code=0x7ffc0000 [ 55.020154][ T29] audit: type=1326 audit(2000000001.753:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5785 comm="syz.4.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117e65ebe9 code=0x7ffc0000 [ 55.020264][ T29] audit: type=1326 audit(2000000001.753:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5785 comm="syz.4.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117e65ebe9 code=0x7ffc0000 [ 55.020333][ T29] audit: type=1326 audit(2000000001.753:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5785 comm="syz.4.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117e65ebe9 code=0x7ffc0000 [ 55.020356][ T29] audit: type=1326 audit(2000000001.753:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5785 comm="syz.4.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117e65ebe9 code=0x7ffc0000 [ 55.020381][ T29] audit: type=1326 audit(2000000001.753:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5785 comm="syz.4.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117e65ebe9 code=0x7ffc0000 [ 55.020405][ T29] audit: type=1326 audit(2000000001.753:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5785 comm="syz.4.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117e65ebe9 code=0x7ffc0000 [ 55.020495][ T29] audit: type=1326 audit(2000000001.753:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5785 comm="syz.4.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117e65ebe9 code=0x7ffc0000 [ 55.020517][ T29] audit: type=1326 audit(2000000001.753:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5785 comm="syz.4.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117e65ebe9 code=0x7ffc0000 [ 55.020581][ T29] audit: type=1326 audit(2000000001.753:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5785 comm="syz.4.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117e65ebe9 code=0x7ffc0000 [ 55.116679][ T3450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.242906][ T3450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.252520][ T3450] bond0 (unregistering): Released all slaves [ 55.306447][ T3450] veth1_macvtap: left promiscuous mode [ 55.318167][ T5801] loop1: detected capacity change from 0 to 1024 [ 55.330662][ T3450] veth0_macvtap: left promiscuous mode [ 55.338061][ T5801] ext2: Unknown parameter 'smackfsfloor' [ 55.340622][ T3450] veth1_vlan: left promiscuous mode [ 55.350515][ T5801] loop1: detected capacity change from 0 to 512 [ 55.355382][ T3450] veth0_vlan: left promiscuous mode [ 55.365277][ T5801] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.402250][ T5801] ext4 filesystem being mounted at /217/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.458644][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.472655][ T3450] team0 (unregistering): Port device team_slave_1 removed [ 55.494876][ T3450] team0 (unregistering): Port device team_slave_0 removed [ 55.538158][ T5819] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 55.565421][ T5819] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 55.611213][ T5819] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 55.650681][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 55.699420][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.706558][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.714548][ T5768] bridge_slave_0: entered allmulticast mode [ 55.721542][ T5768] bridge_slave_0: entered promiscuous mode [ 55.728983][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.736063][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.744971][ T5768] bridge_slave_1: entered allmulticast mode [ 55.751544][ T5768] bridge_slave_1: entered promiscuous mode [ 55.770315][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.783407][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.808806][ T5768] team0: Port device team_slave_0 added [ 55.818312][ T5768] team0: Port device team_slave_1 added [ 55.851924][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.858941][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.885192][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.896700][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.903655][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.929857][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.962258][ T5768] hsr_slave_0: entered promiscuous mode [ 55.983137][ T5768] hsr_slave_1: entered promiscuous mode [ 55.990070][ T5860] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5860 comm=syz.8.983 [ 56.006665][ T5862] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 56.030855][ T5862] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 56.039852][ T5866] netlink: 8 bytes leftover after parsing attributes in process `syz.8.985'. [ 56.066160][ T5862] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 56.251445][ T5768] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 56.260902][ T5768] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 56.269267][ T5768] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 56.277502][ T5768] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 56.295847][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.303074][ T5768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.310299][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.317319][ T5768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.341022][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.351801][ T1085] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.359932][ T1085] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.370512][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.380298][ T3450] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.387553][ T3450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.397690][ T2706] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.404784][ T2706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.456083][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.535665][ T5768] veth0_vlan: entered promiscuous mode [ 56.543302][ T5768] veth1_vlan: entered promiscuous mode [ 56.555814][ T5768] veth0_macvtap: entered promiscuous mode [ 56.566041][ T5768] veth1_macvtap: entered promiscuous mode [ 56.578963][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.602613][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.634217][ T51] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.687582][ T51] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.704287][ T51] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.718753][ T51] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.750876][ T5921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.771814][ T5921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.812547][ T5936] loop4: detected capacity change from 0 to 2048 [ 56.826195][ T5938] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.835235][ T5936] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.848201][ T5938] bridge0: port 3(bond1) entered blocking state [ 56.854483][ T5938] bridge0: port 3(bond1) entered disabled state [ 56.861182][ T5938] bond1: entered allmulticast mode [ 56.867348][ T5938] bond1: entered promiscuous mode [ 56.873936][ T5938] bridge0: port 3(bond1) entered blocking state [ 56.880301][ T5938] bridge0: port 3(bond1) entered forwarding state [ 56.890375][ T5936] EXT4-fs (loop4): shut down requested (0) [ 56.914856][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.016457][ T5952] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1010'. [ 57.284834][ T5956] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 57.297383][ T5959] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 57.371811][ T5969] loop1: detected capacity change from 0 to 256 [ 57.462917][ T5982] IPv6: Can't replace route, no match found [ 57.478889][ T3450] bridge0: port 3(bond1) entered disabled state [ 57.530722][ T5994] pim6reg1: entered promiscuous mode [ 57.536073][ T5994] pim6reg1: entered allmulticast mode [ 57.826411][ T6048] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.834347][ T6048] bridge0: port 3(bond1) entered blocking state [ 57.840787][ T6048] bridge0: port 3(bond1) entered disabled state [ 57.847214][ T6048] bond1: entered allmulticast mode [ 57.853205][ T6048] bond1: entered promiscuous mode [ 57.859171][ T6048] bridge0: port 3(bond1) entered blocking state [ 57.865473][ T6048] bridge0: port 3(bond1) entered forwarding state [ 58.030183][ T6066] loop1: detected capacity change from 0 to 2048 [ 58.040511][ T6066] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.055724][ T6066] EXT4-fs (loop1): shut down requested (0) [ 58.071211][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.125662][ T6076] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 58.125662][ T6076] program syz.1.1066 not setting count and/or reply_len properly [ 58.159077][ T6080] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6080 comm=syz.1.1069 [ 58.161529][ T6079] loop8: detected capacity change from 0 to 256 [ 58.209048][ T6084] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 58.209048][ T6084] program syz.1.1071 not setting count and/or reply_len properly [ 58.275108][ T6090] netlink: 'syz.1.1074': attribute type 1 has an invalid length. [ 58.282980][ T6090] netlink: 'syz.1.1074': attribute type 2 has an invalid length. [ 58.356270][ T6103] loop1: detected capacity change from 0 to 512 [ 58.363855][ T6103] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (40000) [ 58.447440][ T6118] loop8: detected capacity change from 0 to 512 [ 58.455954][ T6118] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.1086: bg 0: block 5: invalid block bitmap [ 58.468866][ T6118] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 58.477886][ T6118] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.1086: invalid indirect mapped block 3 (level 2) [ 58.478240][ T51] bridge0: port 3(bond1) entered disabled state [ 58.497981][ T6118] EXT4-fs (loop8): 2 truncates cleaned up [ 58.504011][ T6118] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.526259][ T4749] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.558423][ T6125] loop8: detected capacity change from 0 to 512 [ 58.574372][ T6125] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.587099][ T6125] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.609385][ T4749] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.663688][ T6137] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 58.663688][ T6137] program syz.4.1093 not setting count and/or reply_len properly [ 58.752669][ T6151] loop4: detected capacity change from 0 to 512 [ 58.759908][ T6151] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (40000) [ 59.013055][ T6182] loop4: detected capacity change from 0 to 128 [ 59.031794][ T6182] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 59.047134][ T6188] vhci_hcd: default hub control req: 2309 v0017 i0000 l0 [ 59.373482][ T6218] loop1: detected capacity change from 0 to 512 [ 59.381518][ T6218] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1129: iget: bad extended attribute block 1 [ 59.394502][ T6218] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1129: couldn't read orphan inode 15 (err -117) [ 59.407046][ T6218] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.420794][ T6218] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 59.443826][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.472071][ T6223] netlink: 'syz.1.1131': attribute type 2 has an invalid length. [ 59.479920][ T6223] netlink: 'syz.1.1131': attribute type 1 has an invalid length. [ 59.715219][ T6241] loop6: detected capacity change from 0 to 512 [ 59.726726][ T6241] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.739260][ T6241] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.763092][ T3918] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.804349][ T6249] loop6: detected capacity change from 0 to 512 [ 59.812808][ T6249] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.1143: bg 0: block 5: invalid block bitmap [ 59.825451][ T6249] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 59.834351][ T6249] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1143: invalid indirect mapped block 3 (level 2) [ 59.847718][ T6249] EXT4-fs (loop6): 2 truncates cleaned up [ 59.848112][ T29] kauditd_printk_skb: 304 callbacks suppressed [ 59.848124][ T29] audit: type=1400 audit(2000000006.844:1849): avc: denied { ioctl } for pid=6234 comm="syz.1.1137" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.854065][ T6249] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.906856][ T6252] netlink: 'syz.8.1144': attribute type 2 has an invalid length. [ 59.914623][ T6252] netlink: 'syz.8.1144': attribute type 1 has an invalid length. [ 59.922972][ T6252] __nla_validate_parse: 7 callbacks suppressed [ 59.922989][ T6252] netlink: 199820 bytes leftover after parsing attributes in process `syz.8.1144'. [ 59.949360][ T29] audit: type=1400 audit(2000000006.949:1850): avc: denied { module_request } for pid=6253 comm="syz.4.1145" kmod="nft-expr-7-dup" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 59.974701][ T3918] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.000646][ T29] audit: type=1326 audit(2000000007.002:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6259 comm="syz.7.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d38a7ebe9 code=0x7ffc0000 [ 60.025365][ T29] audit: type=1326 audit(2000000007.002:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6259 comm="syz.7.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d38a7ebe9 code=0x7ffc0000 [ 60.048879][ T29] audit: type=1326 audit(2000000007.012:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6259 comm="syz.7.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d38a7ebe9 code=0x7ffc0000 [ 60.072483][ T29] audit: type=1326 audit(2000000007.012:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6259 comm="syz.7.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d38a7ebe9 code=0x7ffc0000 [ 60.096019][ T29] audit: type=1326 audit(2000000007.012:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6259 comm="syz.7.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d38a7ebe9 code=0x7ffc0000 [ 60.119560][ T29] audit: type=1326 audit(2000000007.012:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6261 comm="syz.8.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b67c4ebe9 code=0x7ffc0000 [ 60.143889][ T29] audit: type=1326 audit(2000000007.012:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6261 comm="syz.8.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b67c4ebe9 code=0x7ffc0000 [ 60.167335][ T29] audit: type=1326 audit(2000000007.012:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6259 comm="syz.7.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d38a7ebe9 code=0x7ffc0000 [ 60.222629][ T6271] loop7: detected capacity change from 0 to 512 [ 60.257253][ T6271] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.271342][ T6271] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.298096][ T5768] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.322140][ T6286] pim6reg1: entered promiscuous mode [ 60.327586][ T6286] pim6reg1: entered allmulticast mode [ 60.439428][ T6314] loop1: detected capacity change from 0 to 512 [ 60.459906][ T6314] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.472610][ T6314] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.498029][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.516177][ T6321] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 60.599043][ T6333] 9p: Unknown Cache mode or invalid value fscac [ 60.601828][ T6332] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1175'. [ 60.614210][ T6332] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1175'. [ 60.681459][ T6341] loop1: detected capacity change from 0 to 512 [ 60.698310][ T6341] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 60.713947][ T6341] EXT4-fs (loop1): mount failed [ 60.745652][ T6351] loop6: detected capacity change from 0 to 512 [ 60.752226][ T6351] EXT4-fs: Ignoring removed bh option [ 60.758636][ T6351] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 60.767828][ T6351] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 60.777045][ T6351] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 60.789008][ T6351] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 60.795287][ T6354] pim6reg1: entered promiscuous mode [ 60.797999][ T6351] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.802334][ T6354] pim6reg1: entered allmulticast mode [ 60.847232][ T3918] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.876934][ T6358] loop6: detected capacity change from 0 to 1024 [ 60.885586][ T6358] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.914480][ T3918] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.213779][ T6399] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1200'. [ 61.388970][ T6436] loop4: detected capacity change from 0 to 512 [ 61.413516][ T6436] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 61.454260][ T6436] EXT4-fs (loop4): mount failed [ 61.501103][ T6458] loop7: detected capacity change from 0 to 512 [ 61.508287][ T6458] EXT4-fs: Ignoring removed bh option [ 61.514110][ T6458] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 61.523420][ T6458] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 61.535355][ T6458] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 61.562238][ T6458] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 61.846278][ T6511] loop7: detected capacity change from 0 to 512 [ 61.873995][ T6511] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 61.894635][ T6511] EXT4-fs (loop7): mount failed [ 62.124679][ T6553] loop7: detected capacity change from 0 to 512 [ 62.124827][ T6554] loop6: detected capacity change from 0 to 512 [ 62.138075][ T6553] EXT4-fs (loop7): blocks per group (95) and clusters per group (32768) inconsistent [ 62.146938][ T6554] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 62.163086][ T6554] EXT4-fs (loop6): mount failed [ 62.238986][ T6569] serio: Serial port ttyS3 [ 62.740016][ T6593] loop8: detected capacity change from 0 to 512 [ 62.756836][ T6593] EXT4-fs warning (device loop8): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 62.769425][ T6601] loop4: detected capacity change from 0 to 1024 [ 62.772383][ T6593] EXT4-fs (loop8): mount failed [ 62.885856][ T6619] loop8: detected capacity change from 0 to 512 [ 62.892723][ T6619] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.899735][ T6619] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 62.910614][ T6619] EXT4-fs (loop8): 1 truncate cleaned up [ 63.576708][ T6636] loop7: detected capacity change from 0 to 1024 [ 63.801298][ T6658] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1313'. [ 63.832119][ T6660] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1314'. [ 63.889883][ T6668] netlink: 'syz.4.1318': attribute type 1 has an invalid length. [ 64.000017][ T6687] sd 0:0:1:0: device reset [ 64.141115][ T6710] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1338'. [ 64.184294][ T6712] capability: warning: `syz.7.1339' uses 32-bit capabilities (legacy support in use) [ 64.252195][ T6721] SELinux: ebitmap: truncated map [ 64.258930][ T6721] SELinux: failed to load policy [ 64.393473][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1354'. [ 64.406415][ T6707] loop4: detected capacity change from 0 to 32768 [ 64.462268][ T6707] loop4: p1 p3 < > [ 64.469057][ T6707] loop4: p1 size 261888 extends beyond EOD, truncated [ 64.547211][ T6761] SELinux: ebitmap: truncated map [ 64.552662][ T6761] SELinux: failed to load policy [ 64.595879][ T6769] loop1: detected capacity change from 0 to 512 [ 64.608104][ T6769] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 64.626969][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 64.626983][ T29] audit: type=1400 audit(2000000011.862:2027): avc: denied { read write } for pid=6774 comm="syz.8.1369" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 64.633092][ T6769] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.1366: bad orphan inode 16 [ 64.633293][ T29] audit: type=1400 audit(2000000011.862:2028): avc: denied { open } for pid=6774 comm="syz.8.1369" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 64.673078][ T6777] audit: audit_backlog=65 > audit_backlog_limit=64 [ 64.692625][ T6769] ext4_test_bit(bit=15, block=4) = 0 [ 64.697160][ T6777] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 64.702472][ T6769] EXT4-fs (loop1): 1 orphan inode deleted [ 64.710083][ T6777] audit: backlog limit exceeded [ 64.723878][ T29] audit: type=1326 audit(2000000011.894:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6775 comm="syz.4.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f117e655ba7 code=0x7ffc0000 [ 64.747263][ T29] audit: type=1326 audit(2000000011.894:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6775 comm="syz.4.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f117e5fadb9 code=0x7ffc0000 [ 64.770643][ T29] audit: type=1326 audit(2000000011.894:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6775 comm="syz.4.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117e65ebe9 code=0x7ffc0000 [ 64.771648][ T6769] EXT4-fs mount: 8 callbacks suppressed [ 64.771660][ T6769] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.794856][ T29] audit: type=1326 audit(2000000011.894:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6775 comm="syz.4.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f117e655ba7 code=0x7ffc0000 [ 64.835810][ T29] audit: type=1326 audit(2000000011.894:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6775 comm="syz.4.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f117e5fadb9 code=0x7ffc0000 [ 64.855499][ T6769] EXT4-fs error (device loop1): __ext4_new_inode:1279: comm syz.1.1366: failed to insert inode 13: doubly allocated? [ 64.940610][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.079113][ T6812] Falling back ldisc for ttyS3. [ 65.082001][ T6821] loop7: detected capacity change from 0 to 512 [ 65.091261][ T6821] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 65.115800][ T6821] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.1387: bad orphan inode 16 [ 65.127431][ T6821] ext4_test_bit(bit=15, block=4) = 0 [ 65.132774][ T6821] EXT4-fs (loop7): 1 orphan inode deleted [ 65.140184][ T6821] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.156136][ T6821] EXT4-fs error (device loop7): __ext4_new_inode:1279: comm syz.7.1387: failed to insert inode 13: doubly allocated? [ 65.178874][ T5768] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.267957][ T6848] loop7: detected capacity change from 0 to 512 [ 65.274503][ T6848] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.281682][ T6848] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 65.293871][ T6848] EXT4-fs (loop7): 1 truncate cleaned up [ 65.299784][ T6848] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.744943][ T6858] loop8: detected capacity change from 0 to 512 [ 65.765430][ T6858] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 65.795742][ T6858] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.1401: bad orphan inode 16 [ 65.825657][ T6858] ext4_test_bit(bit=15, block=4) = 0 [ 65.831306][ T6858] EXT4-fs (loop8): 1 orphan inode deleted [ 65.837601][ T6858] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.862549][ T6858] EXT4-fs error (device loop8): __ext4_new_inode:1279: comm syz.8.1401: failed to insert inode 13: doubly allocated? [ 65.935481][ T4749] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.002256][ T6886] loop6: detected capacity change from 0 to 128 [ 66.017941][ T6886] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 66.065327][ T6886] ext4 filesystem being mounted at /235/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 66.177356][ T5768] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.221763][ T3918] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 66.373541][ T6941] loop8: detected capacity change from 0 to 128 [ 66.382016][ T6941] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 66.395277][ T6941] ext4 filesystem being mounted at /182/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 66.456881][ T4749] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 66.473313][ T6950] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6950 comm=syz.6.1439 [ 66.504256][ T6951] loop8: detected capacity change from 0 to 164 [ 66.627215][ T6970] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1447'. [ 66.636231][ T6970] netlink: 108 bytes leftover after parsing attributes in process `syz.8.1447'. [ 66.645588][ T6970] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1447'. [ 66.654866][ T6970] netlink: 108 bytes leftover after parsing attributes in process `syz.8.1447'. [ 66.664325][ T6970] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1447'. [ 66.689650][ T6975] loop1: detected capacity change from 0 to 128 [ 66.718280][ T6975] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 66.731255][ T6975] ext4 filesystem being mounted at /306/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 66.783001][ T3305] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.125149][ T7001] netlink: 'syz.4.1459': attribute type 1 has an invalid length. [ 67.132991][ T7001] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1459'. [ 67.188446][ T7014] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7014 comm=syz.4.1465 [ 67.674648][ T7027] loop6: detected capacity change from 0 to 128 [ 67.682768][ T7027] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 67.695382][ T7027] ext4 filesystem being mounted at /250/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 67.740440][ T3918] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.962987][ T7041] loop7: detected capacity change from 0 to 128 [ 67.971006][ T7041] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 67.994102][ T7041] ext4 filesystem being mounted at /88/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 68.065690][ T5768] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.116533][ T7067] loop6: detected capacity change from 0 to 1024 [ 68.143755][ T7067] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 68.169052][ T7067] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.184290][ T7067] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: comm syz.6.1484: lblock 0 mapped to illegal pblock 0 (length 1) [ 68.198320][ T7067] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 68.210753][ T7067] EXT4-fs (loop6): This should not happen!! Data will be lost [ 68.210753][ T7067] [ 68.223304][ T7067] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: comm syz.6.1484: lblock 0 mapped to illegal pblock 0 (length 1) [ 68.243657][ T7081] netlink: 'syz.4.1489': attribute type 12 has an invalid length. [ 68.251556][ T7081] netlink: 'syz.4.1489': attribute type 29 has an invalid length. [ 68.259422][ T7081] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1489'. [ 68.268447][ T7081] netlink: 'syz.4.1489': attribute type 1 has an invalid length. [ 68.276173][ T7081] netlink: 'syz.4.1489': attribute type 2 has an invalid length. [ 68.283936][ T7081] netlink: 39 bytes leftover after parsing attributes in process `syz.4.1489'. [ 68.293561][ T3918] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 68.327678][ T7087] loop4: detected capacity change from 0 to 128 [ 68.335562][ T7087] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 68.348486][ T7087] ext4 filesystem being mounted at /295/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 68.393619][ T3307] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.494949][ T7098] netlink: 'syz.4.1496': attribute type 1 has an invalid length. [ 68.552915][ T7106] loop4: detected capacity change from 0 to 1024 [ 68.559669][ T7106] EXT4-fs: Ignoring removed bh option [ 68.565364][ T7106] EXT4-fs: inline encryption not supported [ 68.571721][ T7106] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 68.583456][ T7106] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.1500: lblock 2 mapped to illegal pblock 2 (length 1) [ 68.597852][ T7106] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.1500: lblock 0 mapped to illegal pblock 48 (length 1) [ 68.612469][ T7106] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1500: Failed to acquire dquot type 0 [ 68.624409][ T7106] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 68.634254][ T7106] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.1500: mark_inode_dirty error [ 68.645805][ T7106] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 68.656163][ T7106] EXT4-fs (loop4): 1 orphan inode deleted [ 68.662515][ T7106] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.675033][ T2706] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 68.689617][ T2706] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:6: Failed to release dquot type 0 [ 68.718610][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.728089][ T3307] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 68.741000][ T3307] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 68.750557][ T3307] EXT4-fs error (device loop4): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 68.880349][ T7115] loop8: detected capacity change from 0 to 1024 [ 68.897907][ T7121] loop7: detected capacity change from 0 to 1024 [ 68.919561][ T7115] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.934981][ T7121] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.032282][ T7121] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.051712][ T4749] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.071292][ T7121] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1506: bg 0: block 393: padding at end of block bitmap is not set [ 69.093037][ T7157] netlink: 536 bytes leftover after parsing attributes in process `syz.8.1522'. [ 69.112502][ T7157] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1522'. [ 69.126405][ T5768] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.160815][ T7174] loop7: detected capacity change from 0 to 128 [ 69.178585][ T7174] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.192371][ T7174] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 69.249395][ T5768] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.466181][ T29] kauditd_printk_skb: 314 callbacks suppressed [ 69.466194][ T29] audit: type=1400 audit(2000000784.940:2345): avc: denied { ioctl } for pid=7234 comm="syz.4.1556" path="socket:[19174]" dev="sockfs" ino=19174 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.555407][ T29] audit: type=1326 audit(2000000785.034:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7240 comm="syz.6.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd86e25ebe9 code=0x7ffc0000 [ 69.578886][ T29] audit: type=1326 audit(2000000785.034:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7240 comm="syz.6.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd86e25ebe9 code=0x7ffc0000 [ 69.602358][ T29] audit: type=1326 audit(2000000785.034:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7240 comm="syz.6.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd86e25ebe9 code=0x7ffc0000 [ 69.625781][ T29] audit: type=1326 audit(2000000785.034:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7240 comm="syz.6.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd86e25ebe9 code=0x7ffc0000 [ 69.649243][ T29] audit: type=1326 audit(2000000785.034:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7240 comm="syz.6.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd86e25ebe9 code=0x7ffc0000 [ 69.672790][ T29] audit: type=1326 audit(2000000785.034:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7240 comm="syz.6.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd86e25ebe9 code=0x7ffc0000 [ 69.696321][ T29] audit: type=1326 audit(2000000785.034:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7240 comm="syz.6.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd86e25ebe9 code=0x7ffc0000 [ 69.719689][ T29] audit: type=1326 audit(2000000785.034:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7240 comm="syz.6.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd86e25ebe9 code=0x7ffc0000 [ 69.743209][ T29] audit: type=1326 audit(2000000785.034:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7240 comm="syz.6.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd86e25ebe9 code=0x7ffc0000 [ 69.949885][ T7267] loop6: detected capacity change from 0 to 1024 [ 69.959223][ T7273] capability: warning: `syz.7.1573' uses deprecated v2 capabilities in a way that may be insecure [ 69.979544][ T7267] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.994941][ T7267] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.008316][ T7267] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1572: bg 0: block 393: padding at end of block bitmap is not set [ 70.037804][ T3918] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.219526][ T7318] loop1: detected capacity change from 0 to 1024 [ 70.242760][ T7318] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.264409][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.925749][ T7459] loop8: detected capacity change from 0 to 164 [ 71.935262][ T7459] syz.8.1655: attempt to access beyond end of device [ 71.935262][ T7459] loop8: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 71.950533][ T7459] syz.8.1655: attempt to access beyond end of device [ 71.950533][ T7459] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 71.993642][ T7463] vhci_hcd: invalid port number 96 [ 71.998844][ T7463] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 72.024058][ T7473] loop7: detected capacity change from 0 to 1024 [ 72.032886][ T7473] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.045563][ T7473] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.062152][ T7473] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: block 1: comm syz.7.1663: lblock 1 mapped to illegal pblock 1 (length 3) [ 72.076762][ T7473] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 72.089165][ T7473] EXT4-fs (loop7): This should not happen!! Data will be lost [ 72.089165][ T7473] [ 72.099356][ T7473] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 72.128118][ T51] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 72.140794][ T51] EXT4-fs (loop7): This should not happen!! Data will be lost [ 72.140794][ T51] [ 72.150620][ T51] EXT4-fs (loop7): Total free blocks count 0 [ 72.156677][ T51] EXT4-fs (loop7): Free/Dirty block details [ 72.162568][ T51] EXT4-fs (loop7): free_blocks=4293918720 [ 72.168604][ T51] EXT4-fs (loop7): dirty_blocks=16 [ 72.173788][ T51] EXT4-fs (loop7): Block reservation details [ 72.278013][ T36] kernel write not supported for file /248/attr/exec (pid: 36 comm: kworker/1:1) [ 72.350197][ T7506] __nla_validate_parse: 2 callbacks suppressed [ 72.350212][ T7506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1675'. [ 72.365937][ T7506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1675'. [ 72.389763][ T7510] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1677'. [ 72.398824][ T7510] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1677'. [ 72.451597][ T9] kernel write not supported for file /741/attr/exec (pid: 9 comm: kworker/0:0) [ 72.591261][ T7541] loop4: detected capacity change from 0 to 128 [ 72.601050][ T7541] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.614381][ T7541] ext4 filesystem being mounted at /355/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 72.658022][ T3307] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.770655][ T7565] loop4: detected capacity change from 0 to 512 [ 72.778632][ T7565] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.787155][ T7565] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 72.798637][ T7565] EXT4-fs (loop4): 1 truncate cleaned up [ 72.804705][ T7565] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.861882][ T7570] loop6: detected capacity change from 0 to 164 [ 72.872826][ T7570] syz.6.1704: attempt to access beyond end of device [ 72.872826][ T7570] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 72.886831][ T7570] syz.6.1704: attempt to access beyond end of device [ 72.886831][ T7570] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 73.209279][ T7579] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1707'. [ 73.235193][ T7581] loop6: detected capacity change from 0 to 1024 [ 73.241948][ T7581] EXT4-fs: Ignoring removed orlov option [ 73.247697][ T7581] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.262457][ T7581] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.291732][ T3918] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.429294][ T7594] vhci_hcd: invalid port number 96 [ 73.434549][ T7594] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 73.496430][ T7605] loop6: detected capacity change from 0 to 1024 [ 73.508955][ T7605] EXT4-fs: Ignoring removed orlov option [ 73.519797][ T7605] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.551717][ T7605] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1718: bg 0: block 88: padding at end of block bitmap is not set [ 73.574812][ T7565] syz.4.1702 (7565) used greatest stack depth: 9288 bytes left [ 73.596007][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.600211][ T7605] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 73.631324][ T7615] SELinux: policydb version 6277 does not match my version range 15-35 [ 73.651174][ T7619] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1723'. [ 73.660246][ T7619] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1723'. [ 73.665191][ T7615] SELinux: failed to load policy [ 73.679527][ T3918] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.723887][ T7629] loop1: detected capacity change from 0 to 128 [ 73.757787][ T7629] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.776189][ T7629] ext4 filesystem being mounted at /356/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 73.793848][ T7638] loop4: detected capacity change from 0 to 1024 [ 73.826058][ T7638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.839906][ T7638] ext4 filesystem being mounted at /362/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.896409][ T7638] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 1: comm syz.4.1731: lblock 1 mapped to illegal pblock 1 (length 3) [ 73.897503][ T3305] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.926011][ T7638] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 73.938647][ T7638] EXT4-fs (loop4): This should not happen!! Data will be lost [ 73.938647][ T7638] [ 73.966211][ T7650] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1739'. [ 73.975209][ T7650] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1739'. [ 73.982561][ T7638] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 73.985607][ T7656] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1737'. [ 74.063570][ T41] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 74.065410][ T7669] loop1: detected capacity change from 0 to 512 [ 74.076485][ T41] EXT4-fs (loop4): This should not happen!! Data will be lost [ 74.076485][ T41] [ 74.076503][ T41] EXT4-fs (loop4): Total free blocks count 0 [ 74.076515][ T41] EXT4-fs (loop4): Free/Dirty block details [ 74.076527][ T41] EXT4-fs (loop4): free_blocks=4293918720 [ 74.076540][ T41] EXT4-fs (loop4): dirty_blocks=16 [ 74.076550][ T41] EXT4-fs (loop4): Block reservation details [ 74.083745][ T7669] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.130029][ T7663] vhci_hcd: invalid port number 96 [ 74.135216][ T7663] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 74.137177][ T7669] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 74.164674][ T7669] EXT4-fs (loop1): 1 truncate cleaned up [ 74.212085][ T7669] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.249912][ T29] kauditd_printk_skb: 376 callbacks suppressed [ 74.249926][ T29] audit: type=1326 audit(2000000789.959:2731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7673 comm="syz.6.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd86e25ebe9 code=0x7ffc0000 [ 74.280967][ T29] audit: type=1326 audit(2000000790.001:2732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7673 comm="syz.6.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd86e25ebe9 code=0x7ffc0000 [ 74.310027][ T29] audit: type=1400 audit(2000000790.032:2733): avc: denied { create } for pid=7682 comm="syz.7.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 74.330195][ T29] audit: type=1400 audit(2000000790.032:2734): avc: denied { write } for pid=7682 comm="syz.7.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 74.380448][ T29] audit: type=1326 audit(2000000790.095:2735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7688 comm="syz.4.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117e65ebe9 code=0x7ffc0000 [ 74.404044][ T29] audit: type=1326 audit(2000000790.095:2736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7688 comm="syz.4.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117e65ebe9 code=0x7ffc0000 [ 74.427486][ T29] audit: type=1326 audit(2000000790.095:2737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7688 comm="syz.4.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f117e65ebe9 code=0x7ffc0000 [ 74.451349][ T29] audit: type=1326 audit(2000000790.095:2738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7688 comm="syz.4.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117e65ebe9 code=0x7ffc0000 [ 74.474761][ T29] audit: type=1326 audit(2000000790.095:2739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7688 comm="syz.4.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117e65ebe9 code=0x7ffc0000 [ 74.502593][ T29] audit: type=1326 audit(2000000790.095:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7688 comm="syz.4.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f117e65ebe9 code=0x7ffc0000 [ 74.663928][ T7700] loop8: detected capacity change from 0 to 128 [ 74.686854][ T7700] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.707231][ T7700] ext4 filesystem being mounted at /254/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 74.737672][ T7706] vhci_hcd: invalid port number 96 [ 74.742838][ T7706] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 74.775746][ T4749] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.913018][ T7731] SELinux: failed to load policy [ 74.984832][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.146103][ T7774] program syz.4.1794 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.173949][ T7756] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 75.273654][ T7789] netlink: 'syz.6.1800': attribute type 3 has an invalid length. [ 75.316212][ T7795] loop6: detected capacity change from 0 to 128 [ 75.327959][ T7795] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.342661][ T7795] ext4 filesystem being mounted at /319/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 75.372215][ T3918] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.559121][ T7824] netlink: 'syz.4.1814': attribute type 3 has an invalid length. [ 75.592766][ T7811] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 75.641020][ T7834] program syz.7.1818 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.815830][ T7862] vhci_hcd: invalid port number 96 [ 75.821062][ T7862] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 75.844517][ T7869] program syz.8.1835 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.950928][ T7878] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 76.305322][ T7923] openvswitch: netlink: Message has 6 unknown bytes. [ 76.743030][ T7961] netlink: 'syz.1.1876': attribute type 2 has an invalid length. [ 76.943853][ T7985] loop8: detected capacity change from 0 to 256 [ 76.991339][ T7993] 9pnet_fd: Insufficient options for proto=fd [ 77.013417][ T7997] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 77.053419][ T8003] netlink: 'syz.6.1897': attribute type 1 has an invalid length. [ 77.100299][ T8006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.155345][ T8006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.180633][ T8006] bond0 (unregistering): Released all slaves [ 77.236472][ T8008] netlink: 'syz.1.1899': attribute type 27 has an invalid length. [ 77.278108][ T8008] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.285331][ T8008] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.289432][ T8018] loop8: detected capacity change from 0 to 512 [ 77.313407][ T8018] EXT4-fs: Ignoring removed orlov option [ 77.325533][ T8018] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 77.335064][ T8018] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 77.350287][ T8024] sd 0:0:1:0: device reset [ 77.355425][ T8018] EXT4-fs error (device loop8): ext4_iget_extra_inode:5104: inode #15: comm syz.8.1904: corrupted in-inode xattr: e_value size too large [ 77.369305][ T8008] veth0_to_team: left promiscuous mode [ 77.375694][ T8018] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.1904: couldn't read orphan inode 15 (err -117) [ 77.391212][ T8018] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.416787][ T4749] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.450740][ T8019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.464532][ T8019] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 77.480898][ T31] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.496202][ T31] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.515348][ T31] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.525546][ T31] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.627566][ T8047] __nla_validate_parse: 14 callbacks suppressed [ 77.627582][ T8047] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1916'. [ 77.999435][ T8086] netlink: 'syz.6.1932': attribute type 10 has an invalid length. [ 78.019850][ T8086] team0: Port device hsr_slave_0 added [ 78.565217][ T8123] loop8: detected capacity change from 0 to 1024 [ 78.572118][ T8123] EXT4-fs: Ignoring removed nobh option [ 78.578570][ T8123] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 78.593665][ T8123] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #11: comm syz.8.1949: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 78.612576][ T8123] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.1949: couldn't read orphan inode 11 (err -117) [ 78.631472][ T8123] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.680376][ T8123] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.1949: Invalid block bitmap block 0 in block_group 0 [ 78.718318][ T8123] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.1949: Failed to acquire dquot type 0 [ 78.765528][ T4749] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.784423][ T8147] smc: net device bond0 applied user defined pnetid SYZ0 [ 78.792214][ T8147] smc: net device bond0 erased user defined pnetid SYZ0 [ 78.863480][ T8159] random: crng reseeded on system resumption [ 78.896163][ T8169] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1970'. [ 78.905257][ T8169] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1970'. [ 78.957020][ T8172] random: crng reseeded on system resumption [ 78.980244][ T8172] vhci_hcd: invalid port number 23 [ 79.053815][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 79.053830][ T29] audit: type=1400 audit(2000000795.009:2962): avc: denied { watch watch_reads } for pid=8190 comm="syz.8.1980" path="/313" dev="tmpfs" ino=1626 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 79.165567][ T8202] sd 0:0:1:0: device reset [ 79.173801][ T29] audit: type=1326 audit(2000000795.135:2963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8203 comm="syz.4.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117e65ebe9 code=0x7ffc0000 [ 79.197284][ T29] audit: type=1326 audit(2000000795.135:2964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8203 comm="syz.4.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f117e65ebe9 code=0x7ffc0000 [ 79.220677][ T29] audit: type=1326 audit(2000000795.135:2965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8203 comm="syz.4.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117e65ebe9 code=0x7ffc0000 [ 79.244203][ T29] audit: type=1326 audit(2000000795.135:2966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8203 comm="syz.4.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117e65ebe9 code=0x7ffc0000 [ 79.318388][ T29] audit: type=1326 audit(2000000795.229:2967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8203 comm="syz.4.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f117e65ebe9 code=0x7ffc0000 [ 79.341831][ T29] audit: type=1326 audit(2000000795.229:2968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8203 comm="syz.4.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117e65ebe9 code=0x7ffc0000 [ 79.365375][ T29] audit: type=1326 audit(2000000795.229:2969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8203 comm="syz.4.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f117e65ebe9 code=0x7ffc0000 [ 79.365696][ T8183] loop1: detected capacity change from 0 to 32768 [ 79.388914][ T29] audit: type=1326 audit(2000000795.229:2970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8203 comm="syz.4.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117e65ebe9 code=0x7ffc0000 [ 79.418922][ T29] audit: type=1326 audit(2000000795.229:2971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8203 comm="syz.4.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f117e65ebe9 code=0x7ffc0000 [ 79.477248][ T8225] loop7: detected capacity change from 0 to 1024 [ 79.494550][ T8225] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 79.505551][ T8225] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 79.525885][ T8225] JBD2: no valid journal superblock found [ 79.531651][ T8225] EXT4-fs (loop7): Could not load journal inode [ 79.562445][ T8240] loop6: detected capacity change from 0 to 512 [ 79.570125][ T8240] EXT4-fs: Ignoring removed nobh option [ 79.589544][ T8240] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #3: comm syz.6.2002: corrupted inode contents [ 79.641945][ T8240] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #3: comm syz.6.2002: mark_inode_dirty error [ 79.668320][ T8240] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #3: comm syz.6.2002: corrupted inode contents [ 79.712702][ T8240] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.2002: mark_inode_dirty error [ 79.729118][ T8250] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2007'. [ 79.754107][ T8240] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.2002: Failed to acquire dquot type 0 [ 79.801491][ T8240] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.2002: corrupted inode contents [ 79.872153][ T8258] netlink: 120 bytes leftover after parsing attributes in process `syz.7.2011'. [ 79.883751][ T8240] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #16: comm syz.6.2002: mark_inode_dirty error [ 79.918538][ T8240] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.2002: corrupted inode contents [ 79.946487][ T8240] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.2002: mark_inode_dirty error [ 79.963257][ T8240] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.2002: corrupted inode contents [ 79.983517][ T8240] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 80.016477][ T8240] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.2002: corrupted inode contents [ 80.029842][ T8270] ÿÿÿÿÿÿ: renamed from vlan1 [ 80.030131][ T8273] loop7: detected capacity change from 0 to 512 [ 80.038104][ T8240] EXT4-fs error (device loop6): ext4_truncate:4666: inode #16: comm syz.6.2002: mark_inode_dirty error [ 80.052340][ T8240] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 80.061894][ T8240] EXT4-fs (loop6): 1 truncate cleaned up [ 80.068930][ T8240] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.099456][ T8240] ext4 filesystem being mounted at /362/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.128387][ T8240] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.545192][ T8334] SELinux: policydb version 0 does not match my version range 15-35 [ 80.566012][ T8337] netlink: 'syz.7.2050': attribute type 13 has an invalid length. [ 80.566229][ T8334] SELinux: failed to load policy [ 80.573855][ T8337] netlink: 'syz.7.2050': attribute type 17 has an invalid length. [ 80.595748][ T8337] gretap0: refused to change device tx_queue_len [ 80.602098][ T8337] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 80.696310][ T8346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.706037][ T8346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.742058][ T8350] atomic_op ffff8881311e0928 conn xmit_atomic 0000000000000000 [ 80.814924][ T8360] atomic_op ffff888125e83528 conn xmit_atomic 0000000000000000 [ 81.134340][ T8407] hub 9-0:1.0: USB hub found [ 81.145659][ T8407] hub 9-0:1.0: 8 ports detected [ 81.204717][ T8414] netlink: 'syz.7.2085': attribute type 3 has an invalid length. [ 81.269406][ T8445] loop4: detected capacity change from 0 to 512 [ 81.337767][ T8445] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.378420][ T8445] ext4 filesystem being mounted at /441/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.481067][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.032961][ T8527] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2105'. [ 82.326215][ T8566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2123'. [ 82.342532][ T8569] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2125'. [ 82.351544][ T8569] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2125'. [ 82.377175][ T8571] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2127'. [ 82.400127][ T8575] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2126'. [ 82.409151][ T8575] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2126'. [ 82.418499][ T8575] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2126'. [ 82.428415][ T8575] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2126'. [ 82.437659][ T8575] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2126'. [ 82.473003][ T8577] loop1: detected capacity change from 0 to 1024 [ 82.482657][ T8577] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 82.504938][ T8577] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 82.513223][ T8577] EXT4-fs (loop1): orphan cleanup on readonly fs [ 82.520187][ T8577] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.2129: Freeing blocks not in datazone - block = 0, count = 4096 [ 82.533982][ T8577] EXT4-fs (loop1): 1 orphan inode deleted [ 82.543752][ T8577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.588575][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.669558][ T8593] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2135'. [ 82.713027][ T8606] hub 9-0:1.0: USB hub found [ 82.717831][ T8606] hub 9-0:1.0: 8 ports detected [ 82.790647][ T8617] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 82.863513][ T8629] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 82.978115][ T8648] netlink: 51 bytes leftover after parsing attributes in process `syz.1.2161'. [ 83.116768][ T8668] random: crng reseeded on system resumption [ 83.138591][ T8670] loop6: detected capacity change from 0 to 512 [ 83.152882][ T8670] ext4 filesystem being mounted at /410/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.730557][ T8721] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 83.869694][ T29] kauditd_printk_skb: 312 callbacks suppressed [ 83.869709][ T29] audit: type=1400 audit(2000000800.059:3282): avc: denied { read write } for pid=8736 comm="syz.6.2202" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 83.899806][ T29] audit: type=1400 audit(2000000800.059:3283): avc: denied { open } for pid=8736 comm="syz.6.2202" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 83.924951][ T29] audit: type=1400 audit(2000000800.122:3284): avc: denied { read } for pid=8736 comm="syz.6.2202" dev="nsfs" ino=4026533283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 83.947001][ T29] audit: type=1400 audit(2000000800.122:3285): avc: denied { open } for pid=8736 comm="syz.6.2202" path="net:[4026533283]" dev="nsfs" ino=4026533283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 83.970253][ T29] audit: type=1400 audit(2000000800.122:3286): avc: denied { create } for pid=8736 comm="syz.6.2202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 83.992158][ T29] audit: type=1400 audit(2000000800.122:3287): avc: denied { write } for pid=8736 comm="syz.6.2202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 84.012648][ T29] audit: type=1400 audit(2000000800.122:3288): avc: denied { read } for pid=8736 comm="syz.6.2202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 84.033042][ T29] audit: type=1400 audit(2000000800.122:3289): avc: denied { ioctl } for pid=8736 comm="syz.6.2202" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.079706][ T29] audit: type=1400 audit(2000000800.280:3290): avc: denied { tracepoint } for pid=8743 comm="syz.4.2203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 84.101109][ T29] audit: type=1400 audit(2000000800.311:3291): avc: denied { write } for pid=8743 comm="syz.4.2203" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 84.267899][ T8752] loop4: detected capacity change from 0 to 512 [ 84.275505][ T8752] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 84.287200][ T8752] EXT4-fs (loop4): 1 truncate cleaned up [ 84.352988][ T8759] netlink: 'syz.4.2210': attribute type 2 has an invalid length. [ 84.360890][ T8759] netlink: 'syz.4.2210': attribute type 1 has an invalid length. [ 84.368651][ T8759] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.2210'. [ 84.391891][ T8761] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 84.399332][ T8761] vhci_hcd: invalid port number 253 [ 84.404544][ T8761] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 84.545372][ T8775] netlink: 'syz.4.2218': attribute type 13 has an invalid length. [ 84.558820][ T8775] gretap0: refused to change device tx_queue_len [ 84.565989][ T8775] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 84.633558][ C1] hrtimer: interrupt took 29782 ns [ 84.663299][ T8750] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2206'. [ 84.970210][ T8824] hub 9-0:1.0: USB hub found [ 84.974917][ T8824] hub 9-0:1.0: 8 ports detected [ 85.104443][ T8841] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2247'. [ 85.443971][ T8876] loop4: detected capacity change from 0 to 512 [ 85.479591][ T8876] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.2263: corrupted in-inode xattr: invalid ea_ino [ 85.509268][ T8876] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2263: couldn't read orphan inode 15 (err -117) [ 85.656966][ T8891] vlan2: entered allmulticast mode [ 85.868144][ T8905] infiniband syz!: set active [ 85.872889][ T8905] infiniband syz!: added team_slave_0 [ 85.884879][ T8905] RDS/IB: syz!: added [ 85.888927][ T8905] smc: adding ib device syz! with port count 1 [ 85.895240][ T8905] smc: ib device syz! port 1 has pnetid [ 86.040637][ T8919] loop4: detected capacity change from 0 to 512 [ 86.061181][ T8919] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.078113][ T8919] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 86.097632][ T8919] EXT4-fs (loop4): 1 truncate cleaned up [ 86.241582][ T8933] netlink: 'syz.1.2284': attribute type 2 has an invalid length. [ 86.249402][ T8933] netlink: 'syz.1.2284': attribute type 9 has an invalid length. [ 86.400845][ T8937] loop1: detected capacity change from 0 to 128 [ 86.625721][ T8948] loop1: detected capacity change from 0 to 764 [ 86.944367][ T8963] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 87.028008][ T8965] can: request_module (can-proto-0) failed. [ 87.303338][ T8999] loop7: detected capacity change from 0 to 128 [ 88.081679][ T9049] loop6: detected capacity change from 0 to 512 [ 88.089073][ T9049] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 88.101699][ T9049] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.2335: corrupted xattr block 19: overlapping e_value [ 88.116627][ T9049] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 88.258612][ T9072] program syz.6.2346 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.292541][ T9074] __nla_validate_parse: 8 callbacks suppressed [ 88.292559][ T9074] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2347'. [ 88.458276][ T9097] loop6: detected capacity change from 0 to 512 [ 88.597133][ T9113] netlink: 'syz.7.2364': attribute type 4 has an invalid length. [ 88.604930][ T9113] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2364'. [ 88.620166][ T9113] .`: renamed from bond0 (while UP) [ 88.676527][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 88.676543][ T29] audit: type=1400 audit(91.242:3472): avc: denied { listen } for pid=9120 comm="syz.7.2368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.702960][ T29] audit: type=1400 audit(91.274:3473): avc: denied { accept } for pid=9120 comm="syz.7.2368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.725362][ T9123] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2369'. [ 88.764033][ T29] audit: type=1326 audit(91.337:3474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.4.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117e65ebe9 code=0x7ffc0000 [ 88.813087][ T29] audit: type=1326 audit(91.337:3475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.4.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117e65ebe9 code=0x7ffc0000 [ 88.835851][ T29] audit: type=1326 audit(91.337:3476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.4.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f117e65ebe9 code=0x7ffc0000 [ 88.858543][ T29] audit: type=1326 audit(91.337:3477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.4.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117e65ebe9 code=0x7ffc0000 [ 88.862965][ T9131] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2372'. [ 88.881314][ T29] audit: type=1326 audit(91.337:3478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.4.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117e65ebe9 code=0x7ffc0000 [ 88.881345][ T29] audit: type=1326 audit(91.337:3479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.4.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f117e65ebe9 code=0x7ffc0000 [ 88.881396][ T29] audit: type=1326 audit(91.368:3480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.4.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117e65ebe9 code=0x7ffc0000 [ 88.958644][ T29] audit: type=1326 audit(91.368:3481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.4.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f117e65ebe9 code=0x7ffc0000 [ 89.104476][ T9145] netlink: 'syz.1.2379': attribute type 12 has an invalid length. [ 89.112429][ T9145] netlink: 'syz.1.2379': attribute type 29 has an invalid length. [ 89.120336][ T9145] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2379'. [ 89.129377][ T9145] netlink: 'syz.1.2379': attribute type 1 has an invalid length. [ 89.137088][ T9145] netlink: 47 bytes leftover after parsing attributes in process `syz.1.2379'. [ 89.166042][ T9148] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 89.196860][ T9150] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2381'. [ 89.972613][ T9184] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2397'. [ 90.031270][ T9189] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2399'. [ 90.056172][ T9189] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2399'. [ 90.107083][ T9195] IPVS: Error joining to the multicast group [ 90.689637][ T9242] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 90.945890][ T9258] loop6: detected capacity change from 0 to 128 [ 90.970155][ T9258] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 90.978008][ T9258] FAT-fs (loop6): Filesystem has been set read-only [ 90.994915][ T9258] syz.6.2429: attempt to access beyond end of device [ 90.994915][ T9258] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 91.024437][ T9258] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 91.032284][ T9258] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 91.040429][ T9258] syz.6.2429: attempt to access beyond end of device [ 91.040429][ T9258] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 91.054504][ T9258] syz.6.2429: attempt to access beyond end of device [ 91.054504][ T9258] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 91.077284][ T9263] SELinux: failed to load policy [ 91.226718][ T9270] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 91.398147][ T9290] pim6reg1: entered promiscuous mode [ 91.403483][ T9290] pim6reg1: entered allmulticast mode [ 91.627875][ T9314] vhci_hcd: invalid port number 96 [ 91.633024][ T9314] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 91.721992][ T9330] vhci_hcd: invalid port number 96 [ 91.727135][ T9330] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 94.137600][ T9337] __nla_validate_parse: 2 callbacks suppressed [ 94.137617][ T9337] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2464'. [ 94.156221][ T9337] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2464'. [ 94.165906][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 94.165918][ T29] audit: type=1400 audit(97.005:3542): avc: denied { mounton } for pid=9342 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 94.166032][ T9337] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2464'. [ 94.211554][ T9337] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2464'. [ 94.246850][ T9351] openvswitch: netlink: Message has 6 unknown bytes. [ 94.321182][ T29] audit: type=1400 audit(97.173:3543): avc: denied { ioctl } for pid=9361 comm="syz.4.2467" path="socket:[26179]" dev="sockfs" ino=26179 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.362251][ T41] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.387913][ T29] audit: type=1400 audit(97.236:3544): avc: denied { read } for pid=9367 comm="syz.7.2470" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 94.411350][ T29] audit: type=1400 audit(97.236:3545): avc: denied { open } for pid=9367 comm="syz.7.2470" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 94.452130][ T41] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.464112][ T29] audit: type=1400 audit(97.310:3546): avc: denied { create } for pid=9370 comm="syz.6.2486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.490855][ T9342] chnl_net:caif_netlink_parms(): no params data found [ 94.526726][ T41] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.541093][ T9381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2480'. [ 94.555555][ T9381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2480'. [ 94.565245][ T9381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2480'. [ 94.579828][ T9381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2480'. [ 94.588822][ T9342] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.595887][ T9342] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.603064][ T9342] bridge_slave_0: entered allmulticast mode [ 94.609796][ T9342] bridge_slave_0: entered promiscuous mode [ 94.624670][ T41] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.637741][ T9342] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.644899][ T9342] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.652814][ T9342] bridge_slave_1: entered allmulticast mode [ 94.660067][ T9342] bridge_slave_1: entered promiscuous mode [ 94.692892][ T9342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.713012][ T9342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.732252][ T29] audit: type=1400 audit(97.593:3547): avc: denied { validate_trans } for pid=9396 comm="syz.4.2484" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 94.766969][ T9342] team0: Port device team_slave_0 added [ 94.772905][ T41] bridge_slave_1: left allmulticast mode [ 94.778632][ T41] bridge_slave_1: left promiscuous mode [ 94.784443][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.792252][ T41] bridge_slave_0: left allmulticast mode [ 94.798090][ T41] bridge_slave_0: left promiscuous mode [ 94.803697][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.857300][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.867045][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.876479][ T41] bond0 (unregistering): Released all slaves [ 94.884284][ T41] bond1 (unregistering): Released all slaves [ 94.892334][ T41] bond2 (unregistering): Released all slaves [ 94.900411][ T9342] team0: Port device team_slave_1 added [ 94.916757][ T9342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.923747][ T9342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.951558][ T9342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.963549][ T9342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.970521][ T9342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.996560][ T9342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.027147][ T41] hsr_slave_0: left promiscuous mode [ 95.032735][ T41] hsr_slave_1: left promiscuous mode [ 95.040463][ T41] veth1_macvtap: left promiscuous mode [ 95.045996][ T41] veth0_macvtap: left promiscuous mode [ 95.051525][ T41] veth1_vlan: left promiscuous mode [ 95.057783][ T41] veth0_vlan: left promiscuous mode [ 95.108005][ T41] team0 (unregistering): Port device team_slave_1 removed [ 95.117059][ T41] team0 (unregistering): Port device team_slave_0 removed [ 95.145192][ T9342] hsr_slave_0: entered promiscuous mode [ 95.151254][ T9342] hsr_slave_1: entered promiscuous mode [ 95.157032][ T9342] debugfs: 'hsr0' already exists in 'hsr' [ 95.162811][ T9342] Cannot create hsr debugfs directory [ 95.220488][ T9342] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 95.229058][ T9342] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 95.237439][ T9342] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 95.245618][ T9342] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 95.274819][ T9342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.286233][ T9342] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.295538][ T8456] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.302590][ T8456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.312947][ T8471] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.320076][ T8471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.328948][ T41] IPVS: stop unused estimator thread 0... [ 95.372429][ T9342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.455593][ T9342] veth0_vlan: entered promiscuous mode [ 95.462931][ T9342] veth1_vlan: entered promiscuous mode [ 95.476695][ T9342] veth0_macvtap: entered promiscuous mode [ 95.484058][ T9342] veth1_macvtap: entered promiscuous mode [ 95.493768][ T9342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.504882][ T9342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.514844][ T8422] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.525589][ T8422] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.536240][ T8422] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.545380][ T8422] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.559554][ T29] audit: type=1400 audit(98.475:3548): avc: denied { mounton } for pid=9342 comm="syz-executor" path="/root/syzkaller.9YeXNM/syz-tmp" dev="sda1" ino=2057 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 95.583787][ T29] audit: type=1400 audit(98.475:3549): avc: denied { mount } for pid=9342 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 95.605181][ T29] audit: type=1400 audit(98.475:3550): avc: denied { mounton } for pid=9342 comm="syz-executor" path="/root/syzkaller.9YeXNM/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 95.631468][ T29] audit: type=1400 audit(98.475:3551): avc: denied { mounton } for pid=9342 comm="syz-executor" path="/root/syzkaller.9YeXNM/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=26462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 95.679289][ T9431] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2499'. [ 95.837234][ T9450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2495'. [ 95.892992][ T9457] loop4: detected capacity change from 0 to 256 [ 95.926179][ T9461] 9pnet_fd: Insufficient options for proto=fd [ 95.968543][ T9470] netlink: 'syz.9.2505': attribute type 1 has an invalid length. [ 96.012777][ T9478] sd 0:0:1:0: device reset [ 96.012914][ T9477] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 96.316335][ T9516] loop1: detected capacity change from 0 to 512 [ 96.328843][ T9516] EXT4-fs: Ignoring removed orlov option [ 96.335032][ T9516] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 96.343946][ T9516] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 96.361396][ T9516] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.2539: corrupted in-inode xattr: e_value size too large [ 96.379537][ T9516] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.2539: couldn't read orphan inode 15 (err -117) [ 96.392231][ T9516] EXT4-fs mount: 16 callbacks suppressed [ 96.392248][ T9516] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.415455][ T9495] netlink: 'syz.6.2520': attribute type 2 has an invalid length. [ 96.439559][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.493371][ T9535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.515259][ T9535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.536196][ T9535] bond0 (unregistering): Released all slaves [ 97.252807][ T9580] openvswitch: netlink: Message has 6 unknown bytes. [ 97.259606][ T9582] netlink: 'syz.4.2566': attribute type 27 has an invalid length. [ 97.327152][ T9582] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.334310][ T9582] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.435830][ T9585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.443951][ T9585] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.453177][ T9585] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 97.474718][ T8422] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.485582][ T8422] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.500252][ T8422] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.523059][ T8422] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.600172][ T9612] netlink: 'syz.4.2564': attribute type 10 has an invalid length. [ 97.626542][ T9612] team0: Port device hsr_slave_0 added [ 97.726455][ T9632] loop4: detected capacity change from 0 to 1024 [ 97.749522][ T9632] EXT4-fs: Ignoring removed nobh option [ 97.779368][ T9632] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 97.816748][ T9632] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.2575: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 97.883053][ T9632] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2575: couldn't read orphan inode 11 (err -117) [ 97.901034][ T9632] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.933748][ T9632] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2575: Invalid block bitmap block 0 in block_group 0 [ 97.948433][ T9632] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.2575: Failed to acquire dquot type 0 [ 97.974304][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.137514][ T9684] loop6: detected capacity change from 0 to 256 [ 98.195075][ T9696] loop6: detected capacity change from 0 to 512 [ 98.201894][ T9699] 9pnet_fd: Insufficient options for proto=fd [ 98.214866][ T9696] EXT4-fs: Ignoring removed mblk_io_submit option [ 98.221900][ T9696] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 98.236787][ T9694] sd 0:0:1:0: device reset [ 98.242313][ T9696] EXT4-fs (loop6): 1 truncate cleaned up [ 98.255760][ T9706] netlink: 'syz.7.2605': attribute type 1 has an invalid length. [ 98.279198][ T9696] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.456559][ T9705] netlink: 'syz.4.2606': attribute type 2 has an invalid length. [ 98.620623][ T9738] random: crng reseeded on system resumption [ 98.647957][ T9738] vhci_hcd: invalid port number 23 [ 98.835021][ T9752] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 98.897002][ T9754] loop4: detected capacity change from 0 to 1024 [ 98.906257][ T9696] ================================================================== [ 98.914352][ T9696] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 98.920839][ T9754] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 98.922420][ T9696] [ 98.922428][ T9696] write to 0xffff888118cfeca8 of 8 bytes by task 9714 on cpu 1: [ 98.933369][ T9754] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 98.935649][ T9696] filemap_splice_read+0x4f4/0x740 [ 98.957850][ T9696] ext4_file_splice_read+0x8f/0xb0 [ 98.962973][ T9696] splice_direct_to_actor+0x26f/0x680 [ 98.968353][ T9696] do_splice_direct+0xda/0x150 [ 98.973130][ T9696] do_sendfile+0x380/0x650 [ 98.977643][ T9696] __x64_sys_sendfile64+0x105/0x150 [ 98.982850][ T9696] x64_sys_call+0x2bb0/0x2ff0 [ 98.987535][ T9696] do_syscall_64+0xd2/0x200 [ 98.992053][ T9696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.997958][ T9696] [ 99.000277][ T9696] write to 0xffff888118cfeca8 of 8 bytes by task 9696 on cpu 0: [ 99.008068][ T9696] filemap_splice_read+0x4f4/0x740 [ 99.012482][ T9754] JBD2: no valid journal superblock found [ 99.013194][ T9696] ext4_file_splice_read+0x8f/0xb0 [ 99.018920][ T9754] EXT4-fs (loop4): Could not load journal inode [ 99.023997][ T9696] splice_direct_to_actor+0x26f/0x680 [ 99.024024][ T9696] do_splice_direct+0xda/0x150 [ 99.040451][ T9696] do_sendfile+0x380/0x650 [ 99.044973][ T9696] __x64_sys_sendfile64+0x105/0x150 [ 99.050178][ T9696] x64_sys_call+0x2bb0/0x2ff0 [ 99.054865][ T9696] do_syscall_64+0xd2/0x200 [ 99.059405][ T9696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.065301][ T9696] [ 99.067614][ T9696] value changed: 0x000000000000ac85 -> 0x000000000000acbc [ 99.074704][ T9696] [ 99.077021][ T9696] Reported by Kernel Concurrency Sanitizer on: [ 99.083171][ T9696] CPU: 0 UID: 0 PID: 9696 Comm: syz.6.2600 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 99.094498][ T9696] Tainted: [W]=WARN [ 99.098298][ T9696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 99.108346][ T9696] ================================================================== [ 99.184740][ T3918] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.