last executing test programs: 1m55.123896619s ago: executing program 32 (id=25): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 1m50.095579204s ago: executing program 33 (id=215): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r0, 0x0, 0xffffffff000) 1m36.595269871s ago: executing program 34 (id=332): prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?N2\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, &(0x7f0000002640)) 1m36.092074781s ago: executing program 35 (id=334): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) read(r0, &(0x7f0000000240)=""/28, 0xffd2) 1m31.703129724s ago: executing program 36 (id=348): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r0, 0x5, &(0x7f0000000340)={0x1, 0x1, 0x1000000007, 0xaa}) 1m1.036108867s ago: executing program 9 (id=1715): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0xda, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x15, 0x5, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000000000002fe, 0x61, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000006c0)=ANY=[@ANYRES64=r0], 0x20) ppoll(&(0x7f0000000540)=[{}], 0x5b, 0x0, 0x0, 0x0) 1m0.939354815s ago: executing program 9 (id=1720): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0xfffffffffffffff8}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101100000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aec180000060a0b04000000000000000002000000c0180480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d106c720000f5ffffffffffffff020000000a0001006f776e65720000003800018007000100727400002c00028008000240000000020800014000000014080001400000000a080002400000000108000240000000000c0001800700010072740000381801800a00010072616e676500000028180280441004800410010005962c100356ed69d838dfe9f911d0c2d22748aa21150c9e20a5546364402d074628a28cccbe047e0489aaf5f1e11e68383a2c048bb21539cfb5aa6b8742378a50adee4cefa910a655dfd5e246e7eeed67b4ec0230bbd9f06ceafa0939255fd8172c3931c10ef37cf85fd984476689d32c329c2a0b17648166651d8f58f876ed8302b77a3fc39bdc830d71bb39e613cda9e2971df443dde2d858c5c20024a7e13828e2882a4249e5febe3a1b06948152e7e2062d07be2d36008d4d4af3dd26d5ccf3bffcd844e8564096e31c2fd48157767e9b1dd481c2ffaed6393651332f0d9ed4ec042941def789a605126269576786252867af79f6e963bb2b4ab70e1f0b5c54f772104e4c36b1e77b4d38189557607eb673d8b6d5c18c844294541a458f7dbd8eae6fa0598665b34a55da6ba158d8ba9d4fcbbc9d3abd134eccd702daf46f17893d77b4e32f78b56cde2a6fe3764f58c55e6f6e5de59c24c0d8875ba4079565023f69c254015b7193b0924f0874bee7c089895852ab9f2946f2ffb47755371e22b937cd35fc03496fd7ee79d1cd98086b7525d682fe4a621f461b2cedae6e2046d76affe72e7ed340bf4414758690d733a1f0ee49f704ba26f1d0c6b9a9d04807f1aced0530a9faba539c85c870558496282db8b674a21b99cab5519f265b295e663507ade444b5bcabe6fa306e5179a62c911d162bc7b30ab3333bedf6133ea73d01875a3986605088c0af13b39fd09ebfa106617dce8b23aefaefb7deb3af4950e4b3d4b88ecc81d808589967b5519a482ff7f53f4ab76825af49f23f1c9e8dd71bcc457b727c1da5545e621c17e7fbc30bf048796815203f7778b2e90d7c68c8b45cd7361e7c0db9ea571e772fdd102455756175a6afd4f7f1bf574e9d60738c478dd65635491f38d31d1daf8f6323ad6c4c0704b2adb5f6192504217b86555b1e367cd8de2044662e091a54625a22769344ef541978dd7ae4a4ed8db2c908f5afe46a4256de3e6d585a99e5dc6c731308106e6c95c689124b12724b730cfed5ecc894398213d6d2b0c81e4808f24753a913ea853d0a78bdcf8edb68963402d16fda0215ea01cf1148b58ed4d8196baffc2fbe5ac7d4ab4465e785e0a65fcc76048a5ca113b1a853827b462e5d4fcc1ed1a6b3828ec803d30b3765383ba156c4890eee7fe64fcacb8e07b1796444063c5111b6a9379ec7d5b4746abe700f590c125827fa60e36258580dcf1367c3ef407f8a1d64ba611062d42fe79c34be8b7fc5aefcc728f104af6392182f093ab03e49e4c8936a8316f63bad118cc719a19a62507b7fb91e8ce065fd9c547940e5c4c97c1c19fc9ef9cbc2d211afba659a8c39e7464ac5ac286fcaed19ab747352914d02900a6b9dd03e22cfafd104fe25aae03d0d71b5059d778c1de00b54de8124ab6fc7df9ba15af2fe9e778d694ec9b152914268597dcabcd145146b3fcad5f2bfb8d107d010f39fd7015e5e1de00a179c01606754822747c92d57db653c87fa2fbafeffbdac7c5da421a1a158bbb502257e8bf7384a73eace3ba6b7b1e2cde7e1a03ab532f103fe077bfec4b70c8208c4ab4b3d0a87268785c828098e0ecefa1274d5f58583915d480fec83c2b113d4f45342ac313c3919ba6e979cedcf07bb76baee467e9117b4f955d134ce9612cc0b8f603b1088296b549dc92873c2ddac8baac9e494da5e035818e6a9d0e1099a21a1b23a950a58e323e04a418cca8aef019a5decfa9aa4192f213cb60ce8009a1f2358c5538bd6a35b3f7e3f3427ac92f7e842bf1e6bfcb79d913e5b91aa3aa05b2847a5ffe00888fb19f2d9e78cc45df642e55be037f8ae61bfd2c63547bf85d72afa28e50f7e4bf971e63bca90f313280b6ef62dde95735a3c79cbe8641174c3c4f48012947f2d25c36aa9939f0f5f151004c802b0074278aaa43debb4b33cc2e4b625b702024cb39550d7de22bb7f3782061311b5cc8b6e0ba8ce695b85d2846f16e9a72ed614d88e3e49d28fd0e47ba7d6d1743510445120a6d23d449391c96539d596495ca5bcaace3679d4d363dec23897d9d75ddedfbe5c3a38cdceef05b2a429c8f733b611282b4e6dc02289243e056d9ca66d2d120a7d7fff18494f9efd6285deff4a07ac475145f1bc27497fe8b7c2496a8211516dcc4658d6c10fe27367fbdeaa4b62b539e5b79c776e031c77414443f8abca5a0dc8ac3f8218fe453c8dab0808a7c29c7b6a473a87d90c87673466c5b54da11ba942ea3af03bd451357c23fbcb5621903a47ceaa6a89bde38aa490226c867ecb9c50d4f85d5161f058785d46cc6dd9888c15e307c1a673f594eb8635aaa1d94d12f36db7e83a578097e95b9538fc95b9c6e60e0bf055b58d836ed396238b7b357a3096058791f663069f0e1ce71fde80f7d858b50b2b7531041b6cc69a476321ba6e8542fbdc970f29ff421f005ee3a607c8eb4806c8e163dba82aad59547bc6feabed00819416dd66eb37a9d5bf289ba9a76a4e06d3bf0a8d44e116f5b4435d7e7b1fdc038933d9df24c74a72d5d7af1a96400835834db9ab57fcd53caea37a9ce2b698a6118fa4ceb2d74f9cdbcfaba54f5576c9711a99a2298746ac22d6e3d83176303a22f830df2c88f29c59a9e199e87612e78232bc93f59b8ff783f3b3ce96d978e40ae4e52a2fa3702bf58297be763861bdbb47a3d6b458953e7bcf985b534a2bc6467e9df0bcd095b4f69b4a344ebefeabfc6263ee8d16392aab57d23391ce721d64197a810481671551b13ea024c43514e6a70667cea1bf242a97882434c30c6948ee59e729d36ec9e6faf871914ca8fe7a1419153c11f8eb8bcdee4fd63246ced94c5179c44f58836e2d0a04477e7dd16610beb3385f6cb91a1049417ce5afe2989d254363db2a729b70ee2bb4f4f4b06667f51277fd9fa850b5960c54ce0dd72488005ed51ff409f3c0cba6ea5076ba2f35ceaa3b4e7ebcc9eeda28244e6dc0191018fb27078790b4cf1d351d22335884a2e1e7a176f274adaa16addf404dd3f665a5248ed346da5a382d99853250e7e8265c276e739c1cf5508f5f6bb6ba7abb00833081bc613c00174a03a28dd204d3cee5d2578286e25511448c1f88af397f4d98df1289e28f4c3b9119013c38fbdb47a41e1127eeed931d4e8f741c218776d7ff7ec5146d2cfdb2249e083b85b3dc3d83446e5f7d10a2340decdf4935e256fbac0370d249f4814593d45de2229c8366d0c04c5b73e4ffa4a73a9b4d060fc7c9165ec254478c989b08219932f0da57c9a140b0297571d6bc2a5db1f7f0d0477590f45596fdfe8bf7bd5ff79dd5d5b88863a88982794884b9be7793ebd10bd10c9cbae1e5243de5649881937355407f249d5ddc3efd3bd4114d9954fa25bc8b5d8205afece8c84b5dc5adeee875d021b010fd21640ff57ed4d410501dd861778cf50efebe1078eba0f5deb5e27f2c9454a2acb8c8698412e4ef7b79d3c7f5fd04ad125a491edf8c36ab2d03316f316c3ce18d7ba1816583ff0928f37a2043dfc072d3c28252e3702bdbc5c7d6d9dcce19adb3d75a53e9fb960d78e93302cc31792d3f15031374abed685baadef43245b9ea3a1aaafcf54b537825a3cf0087b5fee8d541b471c4963d44cbfed161edb6ce31e5008178712421c03ce5a69b39c9b0b1ca131ff35c6ccf2ebcaa59f56ae4618bcd054d8189cb794694913d6cae220a0128f8e106e7768ebe06f511bc371b90bfd4194e9e3f4e2ea614674255eddda568013806b198abc23d018d48aa8c23806ff9034f94397de26a1a7bfbbf9a59210ee51d156e02b5497abf60c6d807974637305d7d7bd966c5c8192d22a2993cad4fcab43f581d5330190d9eac2b4b97dfeb4f884cbecc89a2e48b6d5105669612607060c17cdb9db0998f5a436108693ce8e1475e9e4833ff8b477b815095dd524a2f70389753004599b005bc38d69a164b84c29be66885f07a88e35917747fdd99fdc3fc3a4830dd6c7a62dccbdbcf591cfafd30a205e1e5cdb9e72058d7c4b64df7fa6eae762448bfc8786a5977764cf41f29912f959079bb0e05e03c4c669065fb9f4f4103cf5f4ea477b4daf015f3ca4e846bc6058c1dc85953fb20830132ee822861da37da574f3f47581dacb77fe5182aae788755d620eef97e19f202b475c48f014d1f303b4161b750d17822bdca9768965ef2bc74c10eaa31d2aa133300191682bb603eff475b8d836322bdda0a2c08b27a2d2fa0c96e08c469b7a919e49b3c7115092a4e4fd273e3212716a70f82d570b7faaf72c1e9ad33a5d9955f4be79f58d78ae828de4029fbaee5e97fff02f8d9bda938f0c11384cdb136da4828a6cde17a729f311d7eb9538b83b1616b149f4461bd483a0560f4831fab9c412dde7d4f131230bdaa958fc1fd26f1726a24524d57a90c32c0a9fc7b368af1a38c09233d05db83f9d566ecfa12810551cb7fa69c448d564885f174773b90eefdc80c03f6305d43d0e8c72bb5e9d7523217ee04a1d2fe589a9335e6e291e65c694af9371e0ae4578492ca48eee9fe538d827b11118b199977cfd29f24fff38224e5c2796e7ed4817a7ab61f6769ed3ad3071a67b5c1098fe414ae9ee27141c725db4333ba4b26ef6ca257b6b2508c371812e7ead0aa93ec9468cbce337d7b48248d2c9743736c442a3121b0853a3c1fcc8fa8641a313d50b1420c63cb94ea923949b44250f711da51fd5fc0b0194815c698b1f38bae041583bc8bcfbfb9229512d1cbd61b20ff6ee1c960a3568c89e78423753d1b984712bb042516df57da793ca2db5de9a157efa6e3c6653551d1a13d274fa40aa68bcbfe82b9bf046f925f9e4e8e7ce0e4756bc3c2e7ce3f530bea0af8c53ca5fb1242108ad0e7838dad8d9f29125cb217f74718630c9f3f5907325189738a67b49b5e129298ab843a4f8fb88922ca53145a79e71b46867a1414e64d726a2d40730af24ad4ceb240eb6a1f2956307b42ec9c61de245b06bb8e28c0ad3e06f1ab42a1fc105b9bd6d0a45240addda2e938efdbce2df6201c9faba03813bcf5c3f6352fe00539dc53822f4e6f1fe6a62b1f7b703c970dcf8fc6ee52c59d665166bd7d27b1a4bf05242967c262fa61d4220895d9536556306ef1e6cfcaa594a63c8d15d0712fcb7693492f21e8326cc2cd14a68170f1fc2e21c5c54159783f9ab41a93d947b0b96793166b2c19cae3f5301f7c45bde97c3c0c4b8821f3cab3edd3de9e2cb07123b76aedeaef4d18e9751550b82ccfeca51992e4aa7f20f8c37c5fb45c232a07c15f87d6ca4aaabf5aacb19042379533787f93bd0640a05a382fbe0fe16ba2ffd98fbec20a0212af5975605d9db6dbda11ff839b173d9c37175ad14e404436f4140a3d97a1ea910aa67624fb9099258fdba38abfcef8e0c328eeb4745289529d0096441b932ec41ed5366341cbb7aa5bbc5843bc706a2277394d5bec290a545146abb20007b578a1e0990cb2e36d9354fc76b874b59edb74e14ca4cd9b816ebc302463ec6c2ff457d22ce9affa5afaa3517cfcce854eee78dbd0ddff52f632b2fd5ffab6af577aa22c81ebac2b6e2b45107a17ad5f80f2b17bd681df2492c979744cfbc66d1d33c4968908f3de0c0e7ad2c70ef676d274708d2791ad97cae7d412bcf9e9be23bbc3d32165010b4bca0dce2694d9a76b88d20effb6571c0e3517ec3883034f65deefe8b40fa2854d2e65e6a7cf11cef40d0b75961b5b70dfc765abf9831149a5dcc649740ce845875c9901b34a969ed43c1b7e31ddd897eeabb8288628c53c000280080003400000000208000180fffffffd080003400000000308000180fffffffc080003400000000308000180fffffffb08000180000000030800024000000000d002048044000280080003400000000308000180ffffffff080003400000000308000340000000030800034000000002080003400000000308000180fffffffb0800034000000003400002800900020073797a300000000008000340000000020900020073797a3000000000080003400000000108000180fffffffc0900020073797a32000000000c00028008000180fffffffca1000100a043a928690c708f1df9888914e1499396c72fc220102c222437bb432e05b0b7e998a303233471ca4afda2491a5c4329d5ade960138e2898127fad0bb06cc3c8abd37903d08cbf7ffd83e9e4082bbbd2092ccccdd5e7786f59937a911555a8b974a7cb3fd71dfa07affa2169573d51c317e7b0d7eed68a361b8cc3606f973f6da82279f31962c4e0d3eb348e2c9e8016d57a004522d667320e6103a9580000002e0001006b7a98263328440dcfaa118a8f95f453821178bef38e56ed34968c07d6e0b0105b8e2d61bab943fde9310000540002800800034000000002080003400000000408000340000000040800034000000004080001800000000008000340000000040900020073797a32000000000900020073797a310000000008000180ffffffff60000100bbbf9393e49fa09da846887163d7b1f2ccb3170e6a4f9e6cc945d0f2558e430b02be5455498a121fdf624958e95980b0cd8083dd67d6503b0aa564c4923197dfbb3fa07206119e68e9940ea28f68ec360a7b9ad1b9894c1a5d8724ac280002800900020073797a300000000008000180fffffffe08000180ffffffff08000180ffffffff5300010069034d2725bf14e3478a0f75071c5c4f533cdc2a187262ecd8f27332551a518cfbdbf4e7a069cb1dbba13d4668e5f2a60b87b05abbb2084579f1e342a10b7f5efb4cf9502061d6babe86fd503c315500370001000473c0f7b8a0f72a69616a9155bff65a4966865a531712ab3753b4ec468bf9fda28688b15bf3c0828d67f2b6d5e5e1b6b224b90008000140000000155c030380f8000100038786b4331b61d029539dcd10bec20d81e92f4ebff3e9cdbb48486eb9e70753093ae261cc71fe9e80fd2ab591e6b7685323e9455029efaa426b0dc87f6dd9658f7f25d7ddfa8f37357b71154c44ea880e96d55f4bc8d58b8e61824d3c2248c175045ba073c60b648a7495361172aee99c72bdb51909deaa1867fddd0febf78531df5e59ae136a238c010649ec23f47e3693c5b190f9a3fe6edbb9cb90fe8e8d71d5958473bde002b09fde886f778853e7ecfa29ca9458ed24bc9bf9fcede6ca0b1fe643e0b98215c61c457c32b4850f8e2bc0f668417206d051e977c840139614fcdd4ef96fb3c2d42e64098c21be5980cf1f0e0c00028008000180fffffffb8f00010092600ca210f46dc1ce204b931329bfb580e261d23b3d259dec86a986809aec64ab76667dfd4537454be06b6c62cbe913951c07dc59fbd6f4142313b67d29efc98d5288f37e2b571fcc32439734412c99fb007b4b646bda88f68bcdeb2aa8d5dbf56bf1aada3695a3f98ff58739084916476e2fd959c9420a8da4dc1330bb2ba74793ac759f6c77d72d90ac0089000100811425b220f6847fa3291bc6db480e01af2f585d17cd8aafe0e78c8985aa7b88c10038e1ddc59969fc475d4993cde28012e3d07f4187fd5cd1277c36961c95ac2d387f31552427b864a97c4cf244355aa6391d0732697e5afff9ee845980200e7e8636aa837e0500fb8c4e7d09ab5fb83790d5b437100ae4331a1dfbdc5c5025c664806308000000b1000100fda47f7eabdb2bc85895903cb098befc3a6ce0785ea819ed05aea12a06cd6ed25f18a0cff44bcf2b9680f46ffcf4eaf78d41a06b26bea89fb1afe04c2254b9f7ca4fa3fcc24e9d485c222ee809e0ba1caa1d92a3963eb36063c13de8ac34715754aa06e7964598e46b3f80ab5eb18e226459aad5eab2a175f50d46dd66acb584562aa26f9600f22972f70b7e92157989668fb1d39d62317c947f608f00b33c870050910f05fc563649548baf36000000540002800900020073797a3200000000080003400000000308000180fffffffb0900020073797a300000000008000340000000010900020073797a320000000008000180fffffffd0900020073797a310000000014000280080001800000000008000180ffffffff1a000100420be1b2178ebc9de4b980153e17854efdc5a39099a90000bc000380280002800900020073797a30000000000800034000000004080003400000000308000340000000018d0001000500df2420d88581c01b6eb3663bb697813d1afdbcb1a59b0789c917a0d4233dbe9b049d22f2e0413494cf71680b4b5423382873a61fa14c2c120fa943e9c583c49d70114c56954c7f02095f00a3323c6aa73e8e0c0cb32a23591ef63a758f4966d97d34d6b0ff8b5e195413eeeab8a3fab90ba75caf2c5742669cdcb5609464aa86c135d4e6a362d90000000800024000000001e0000380db000100bc1e040dbcc244d1e63eec6cbb74ce334b3f49e5f4e2ab674552cc58a07aac3d8150f31a4a0b9e4fc13d36d63e4621466005725974712c871accd5f91703264a9bf96676ca2e21d3c3b7a6f82c6df636246a87dc2438ef8fc8fa7fc5adf81e71e1c2b68fbcf2f931b2c3c1412e29a8f71be571a107b1000bec796e16be70b32db0a0a7970fe0e534ebc26047c50e5638e900ecc30cb2e7d4c9b872d4b13089b968f54decbf49f6d11258cf82994f66c9a10e39698087ec0d59a979c33488e2c47caac1c4e001e5f2ee70cdf013cf8e904e8f209631fd1e000900010073797a30000000000900020073797a32"], 0x1914}}, 0x4048010) 1m0.911740907s ago: executing program 9 (id=1723): bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) write$selinux_validatetrans(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='system_h:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 0'], 0x79) 1m0.882177059s ago: executing program 9 (id=1726): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c) mount$tmpfs(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000300), 0x210009, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='./file0/../file0\x00') 1m0.862163121s ago: executing program 9 (id=1727): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0x9}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 1m0.562586254s ago: executing program 9 (id=1737): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) write$P9_RVERSION(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0b00000065ffff"], 0x41) 1m0.562442085s ago: executing program 37 (id=1737): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) write$P9_RVERSION(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0b00000065ffff"], 0x41) 47.631516208s ago: executing program 7 (id=2191): prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x13, 0x1, 0xc, [{@remote, 0x7}, {@local, 0x9}]}]}}}], 0x28}, 0x0) 47.60678801s ago: executing program 7 (id=2202): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x8d) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) r1 = socket$tipc(0x1e, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 47.554221504s ago: executing program 7 (id=2195): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x18000, &(0x7f0000000000), 0x1, 0x632, &(0x7f0000001280)="$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") 47.244252638s ago: executing program 7 (id=2201): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) 47.074709732s ago: executing program 7 (id=2204): r0 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x4, 0x80, 0x2000000, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_OPENAT2={0x1c, 0x40, 0x0, 0xffffffffffffff9c, &(0x7f00000002c0)={0x200200, 0x10, 0x1}, 0x0, 0x18, 0x0, 0x12345}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 46.956098581s ago: executing program 7 (id=2206): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000002300)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc03000fc82c00fe8000000000000000000000000000aaff02000000000000000000000000000129"], 0xffe) 46.674833833s ago: executing program 38 (id=2206): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000002300)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc03000fc82c00fe8000000000000000000000000000aaff02000000000000000000000000000129"], 0xffe) 33.604767187s ago: executing program 2 (id=2702): r0 = socket(0x10, 0x2, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x4c) setresuid(0x0, r1, r1) mlockall(0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) 33.283366282s ago: executing program 2 (id=2710): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000700000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) 33.218580537s ago: executing program 2 (id=2711): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000300), &(0x7f0000000180)='%pi6 \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r1, 0x0, 0x6}, 0x18) clock_nanosleep(0xfffffff2, 0x0, 0x0, 0x0) 33.194290059s ago: executing program 2 (id=2712): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x24) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) 33.039605851s ago: executing program 2 (id=2714): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000005880)={0x0, 0x0, &(0x7f0000005840)={&(0x7f0000001c80)=ANY=[@ANYBLOB="34000000120001"], 0x34}, 0x1, 0x0, 0x0, 0x1090}, 0x40080) 32.864782435s ago: executing program 2 (id=2721): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb77, &(0x7f0000000c40)="$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") timer_create(0x3, 0x0, &(0x7f0000001440)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000feffffff0000000000000000850000007500000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='signal_generate\x00', r0}, 0x18) timer_settime(0x0, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 32.834090738s ago: executing program 39 (id=2721): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb77, &(0x7f0000000c40)="$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") timer_create(0x3, 0x0, &(0x7f0000001440)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000feffffff0000000000000000850000007500000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='signal_generate\x00', r0}, 0x18) timer_settime(0x0, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 9.425533962s ago: executing program 5 (id=3566): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 9.365487956s ago: executing program 5 (id=3570): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) 9.262372545s ago: executing program 5 (id=3571): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) 9.134405075s ago: executing program 5 (id=3579): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./bus\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000000800)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) 8.950130819s ago: executing program 5 (id=3582): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r1, 0x400, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 8.439837379s ago: executing program 5 (id=3595): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="d81f96bed9556700000000000010000000000000000000", 0x17}], 0x15, 0x2009c00, 0x2, 0x0) 8.405477912s ago: executing program 40 (id=3595): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="d81f96bed9556700000000000010000000000000000000", 0x17}], 0x15, 0x2009c00, 0x2, 0x0) 6.319938075s ago: executing program 8 (id=3654): r0 = shmget$private(0x0, 0x4000, 0x1, &(0x7f00008fc000/0x4000)=nil) shmat(r0, &(0x7f0000000000/0x2000)=nil, 0x5000) shmctl$SHM_LOCK(r0, 0xb) syz_clone3(&(0x7f0000000680)={0x923400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) shmctl$SHM_UNLOCK(r0, 0xc) 6.291136847s ago: executing program 8 (id=3655): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100}, 0x1c) socket$netlink(0x10, 0x3, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x9}, 0x0, 0x0, 0x0) 6.207098934s ago: executing program 8 (id=3667): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRESDEC=0x0], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="b40000001800090000000000000000001c140000fe0000010000000005001a0008", @ANYRES32=0x0], 0xb4}}, 0x24040810) 6.160259277s ago: executing program 8 (id=3660): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./bus\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000000800)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) 6.034462638s ago: executing program 8 (id=3663): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getpgid(0x0) 5.737321711s ago: executing program 8 (id=3675): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r1}, 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 5.736808881s ago: executing program 41 (id=3675): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r1}, 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2.026705521s ago: executing program 1 (id=3802): r0 = syz_io_uring_setup(0x1852, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) r3 = socket$isdn(0x22, 0x2, 0x22) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)=""/148, 0x94}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.881034033s ago: executing program 1 (id=3807): iopl(0x3) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 1.822501137s ago: executing program 0 (id=3809): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) 1.190646827s ago: executing program 3 (id=3849): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x4, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x9, 0x7, 0x1000, 0x0, r0, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2c}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 991.933503ms ago: executing program 0 (id=3852): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc888, &(0x7f0000002340)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0], 0x4, 0x273, &(0x7f0000000680)="$eJzs281qE1EYxvGnH9ra2k60Wm1FfFEE3QxtvIJQWhADSm3EDxCmdqIh06RkQiUitju3Xkdx6U4Qb6AbL0BcuOvGZRfiSCexTdoUdWFGzf+3OW85fcI5vGfCWWS27r5aLuZDN+9V1dtj6pfWtS2l1Ks+1fU0xt64Pqpm67o6lv10/va9+zcy2ezsvNlcZuFa2sxGL7x7+vz1xffV4TtvRt8OaDP1cOtL+vPm+ObE1reFJ4XQCqGVylXzbLFcrnqLgW9LhbDomt26/NELfSuUQr/SMp8PyisrNfNKSyNDKxU/DM0r1azo16xatmqlZt5jr1Ay13VtZEj4mdzG/LyXSXoV+LMqlYw3I2nywExuI5EFAQCARP2d9//A5/7fCdz/u8HO/f9B4/ltxf0fAAAAAAAAAAAAAAAAAAAAAIB/wXYUOVEUOT/GI1L8hk/U+PuYpCFJw5KOSxqRNCrJkZSSdELSSUljkk5JOi1pXNIZSWclTTR9VtJ7xUGH9b+P/ncFnv/uRv+7W9OLu4PS8svV3GquPtbnM3kVFMjXlBx9jXvZUK/nrmdnpyyW0rnltUZ+bTXX15qflrNzYNrlp+t5a80PxOduN5+Ws3PA2uXTbfODunKpKe/K0YdHKivQUnwm9/Ivps1mbmb35Sfj//vfubarbf9c97D5ev4Xzkc01bY//ZrsT3bvkMLas6IXBH6FgoKCYrdI+psJnbDX9KRXAgAAAAAAAAAAAAAAAAD4HZ34OWHSewQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYL/vAQAA//94NGA9") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = open(&(0x7f0000000240)='./file2\x00', 0x145142, 0x0) sendfile(r1, r1, 0x0, 0x800000009) 959.020885ms ago: executing program 1 (id=3853): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff7fffc, 0x2, @perf_config_ext={0x8, 0x5}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfd44) 834.595955ms ago: executing program 0 (id=3854): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) 612.457602ms ago: executing program 1 (id=3856): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x6}}, {@nogrpid}, {@acl}, {@delalloc}, {@dioread_lock}]}, 0x1, 0x570, &(0x7f0000000680)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x3}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) 556.674197ms ago: executing program 1 (id=3857): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 556.527997ms ago: executing program 1 (id=3858): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000020f000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8, @loopback}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x5, @loopback}, 0x1c) 556.200197ms ago: executing program 0 (id=3859): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 527.909229ms ago: executing program 0 (id=3860): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1b, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x62de}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x60) 461.046494ms ago: executing program 0 (id=3863): iopl(0x3) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 286.336208ms ago: executing program 3 (id=3872): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x101, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c040) 269.469739ms ago: executing program 4 (id=3874): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0xfffffffd, 0x0, 0x0, 'queue0\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x80000}, 0x100}) 258.99922ms ago: executing program 3 (id=3876): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) 227.737532ms ago: executing program 4 (id=3878): socket(0x40000000015, 0x5, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 215.617343ms ago: executing program 3 (id=3879): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='mm_page_alloc\x00', r0}, 0x18) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, 'p'}], 0x18}, 0x0) 180.070716ms ago: executing program 3 (id=3880): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 139.938529ms ago: executing program 6 (id=3881): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, 0x0, 0x0) 139.54528ms ago: executing program 6 (id=3882): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) get_robust_list(0x0, &(0x7f0000005dc0)=0x0, &(0x7f0000005e00)) 118.329171ms ago: executing program 6 (id=3883): r0 = inotify_init1(0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2a3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r1, 0x0, 0x1034}, 0x18) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa4000960) 102.464682ms ago: executing program 4 (id=3884): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) r1 = socket(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000940)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 82.456464ms ago: executing program 4 (id=3885): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) eventfd(0x6) 48.441007ms ago: executing program 6 (id=3886): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 48.085057ms ago: executing program 6 (id=3887): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff088) 47.800477ms ago: executing program 3 (id=3888): r0 = socket$kcm(0x11, 0x2, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x8907, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000810281ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 37.493957ms ago: executing program 4 (id=3889): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000003e7400850000001b000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r2, &(0x7f00000006c0)=[{&(0x7f0000001600)=""/4113, 0x1011}], 0x1, 0xf0, 0xa) 167.33µs ago: executing program 6 (id=3890): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2a0405e, &(0x7f0000000000), 0x1, 0x464, &(0x7f0000000740)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x80) lseek(r0, 0x1, 0x4) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000180), 0x0, 0x0, 0x0) getdents(r0, 0x0, 0x58) 0s ago: executing program 4 (id=3891): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) close(r1) kernel console output (not intermixed with test programs): " scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 121.598688][ T8716] gretap0: refused to change device tx_queue_len [ 121.605141][ T8716] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 121.621085][ T3870] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.630606][ T29] audit: type=1400 audit(122.517:2003): avc: denied { write } for pid=8713 comm="syz.1.2107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 121.659337][ T3870] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.807854][ T8740] hsr0: entered promiscuous mode [ 121.830652][ T8740] hsr0: left promiscuous mode [ 121.914211][ T8749] ref_ctr_offset mismatch. inode: 0xc2 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 122.096473][ T8781] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2138'. [ 122.194202][ T8797] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2145'. [ 122.241664][ T8805] netlink: 'syz.1.2150': attribute type 1 has an invalid length. [ 122.249526][ T8805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2150'. [ 122.359095][ T8827] set_capacity_and_notify: 4 callbacks suppressed [ 122.359195][ T8827] loop5: detected capacity change from 0 to 256 [ 122.372687][ T8827] vfat: Unknown parameter ')՝"' [ 122.399293][ T8833] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2163'. [ 122.510096][ T8857] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 122.622949][ T8873] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2183'. [ 122.642643][ T8876] netlink: 'syz.7.2184': attribute type 13 has an invalid length. [ 122.651967][ T8876] gretap0: refused to change device tx_queue_len [ 122.658572][ T8876] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 122.695557][ T8878] netlink: 'syz.5.2185': attribute type 13 has an invalid length. [ 122.736558][ T8878] gretap0: refused to change device tx_queue_len [ 122.758145][ T8878] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 122.844746][ T3400] kernel read not supported for file bpf-prog (pid: 3400 comm: kworker/1:3) [ 122.927584][ T8904] loop7: detected capacity change from 0 to 1024 [ 122.953739][ T8904] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 122.978276][ T8904] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 122.989382][ T8904] EXT4-fs (loop7): orphan cleanup on readonly fs [ 122.997138][ T8904] EXT4-fs error (device loop7): ext4_free_blocks:6728: comm syz.7.2195: Freeing blocks not in datazone - block = 0, count = 4096 [ 123.011040][ T8904] EXT4-fs (loop7): 1 orphan inode deleted [ 123.027753][ T8907] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 123.038736][ T8904] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 123.211651][ T4550] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.377260][ T8920] loop5: detected capacity change from 0 to 512 [ 123.428621][ T8920] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.611038][ T8920] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #2: comm syz.5.2203: corrupted inode contents [ 123.637689][ T8920] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #2: comm syz.5.2203: mark_inode_dirty error [ 123.716308][ T8920] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #2: comm syz.5.2203: corrupted inode contents [ 123.756489][ T8920] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.2203: mark_inode_dirty error [ 123.776672][ T8929] __nla_validate_parse: 5 callbacks suppressed [ 123.776692][ T8929] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2209'. [ 123.821861][ T4213] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.863614][ T8933] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 123.920166][ T8946] netlink: 'syz.8.2214': attribute type 1 has an invalid length. [ 123.928122][ T8946] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2214'. [ 123.984115][ T8941] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.991398][ T8941] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.046336][ T8941] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.056831][ T8941] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.203698][ T3871] bond0 (unregistering): Released all slaves [ 124.215647][ T3921] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.226093][ T3921] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.235198][ T3921] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.244755][ T3921] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.268139][ T3871] hsr_slave_0: left promiscuous mode [ 124.275795][ T3871] hsr_slave_1: left promiscuous mode [ 124.406476][ T8935] chnl_net:caif_netlink_parms(): no params data found [ 124.442592][ T8935] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.449753][ T8935] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.456985][ T8935] bridge_slave_0: entered allmulticast mode [ 124.463609][ T8935] bridge_slave_0: entered promiscuous mode [ 124.470426][ T8935] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.477673][ T8935] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.485018][ T8935] bridge_slave_1: entered allmulticast mode [ 124.491524][ T8935] bridge_slave_1: entered promiscuous mode [ 124.508964][ T8935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.519319][ T8935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.539458][ T8935] team0: Port device team_slave_0 added [ 124.546343][ T8935] team0: Port device team_slave_1 added [ 124.561903][ T8935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.568864][ T8935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.595323][ T8935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.608809][ T8935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.615859][ T8935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.641790][ T8935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.658086][ T3871] IPVS: stop unused estimator thread 0... [ 124.672079][ T8935] hsr_slave_0: entered promiscuous mode [ 124.678131][ T8935] hsr_slave_1: entered promiscuous mode [ 124.684064][ T8935] debugfs: 'hsr0' already exists in 'hsr' [ 124.689783][ T8935] Cannot create hsr debugfs directory [ 124.821308][ T8982] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2221'. [ 124.854994][ T8980] netlink: 'syz.8.2230': attribute type 13 has an invalid length. [ 124.866273][ T8986] netlink: 'syz.1.2224': attribute type 1 has an invalid length. [ 124.878213][ T8980] gretap0: refused to change device tx_queue_len [ 124.890759][ T8980] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 124.991006][ T8935] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 125.000317][ T8935] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 125.017924][ T8935] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 125.046627][ T8935] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 125.095846][ T8935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.108972][ T8935] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.119087][ T3923] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.126222][ T3923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.146651][ T8935] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 125.157132][ T8935] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 125.171172][ T3923] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.178303][ T3923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.239103][ T8935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.305073][ T8935] veth0_vlan: entered promiscuous mode [ 125.312995][ T8935] veth1_vlan: entered promiscuous mode [ 125.327973][ T8935] veth0_macvtap: entered promiscuous mode [ 125.335577][ T8935] veth1_macvtap: entered promiscuous mode [ 125.346066][ T8935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.356687][ T8935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.367870][ T3921] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.376776][ T3921] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.385820][ T3921] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.395186][ T3921] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.483665][ T9031] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 125.542167][ T9048] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2237'. [ 125.555389][ T9050] IPVS: Unknown mcast interface: macvlan0 [ 125.646697][ T9068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.667666][ T9062] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 125.755965][ T9085] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2262'. [ 126.037344][ T9104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2271'. [ 126.071952][ T29] kauditd_printk_skb: 360 callbacks suppressed [ 126.071969][ T29] audit: type=1326 audit(127.057:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9070 comm="syz.1.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb7bff82005 code=0x7ffc0000 [ 126.123108][ T29] audit: type=1326 audit(127.107:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9070 comm="syz.1.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb7bff82005 code=0x7ffc0000 [ 126.146516][ T29] audit: type=1326 audit(127.127:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9070 comm="syz.1.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb7bff82005 code=0x7ffc0000 [ 126.176156][ T29] audit: type=1326 audit(127.157:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9070 comm="syz.1.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb7bff82005 code=0x7ffc0000 [ 126.199079][ T29] audit: type=1326 audit(127.157:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9070 comm="syz.1.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb7bff82005 code=0x7ffc0000 [ 126.223846][ T29] audit: type=1326 audit(127.207:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9070 comm="syz.1.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb7bff82005 code=0x7ffc0000 [ 126.276588][ T29] audit: type=1326 audit(127.227:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9070 comm="syz.1.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb7bff82005 code=0x7ffc0000 [ 126.299537][ T29] audit: type=1326 audit(127.227:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9070 comm="syz.1.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb7bff82005 code=0x7ffc0000 [ 126.322416][ T29] audit: type=1326 audit(127.227:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9070 comm="syz.1.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb7bff82005 code=0x7ffc0000 [ 126.345279][ T29] audit: type=1326 audit(127.227:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9070 comm="syz.1.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb7bff82005 code=0x7ffc0000 [ 126.538082][ T9142] netlink: 'syz.1.2286': attribute type 1 has an invalid length. [ 126.620958][ T9158] syzkaller1: entered promiscuous mode [ 126.626531][ T9158] syzkaller1: entered allmulticast mode [ 126.935816][ T9177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.945288][ T9177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.442766][ T9274] loop5: detected capacity change from 0 to 512 [ 127.518221][ T9274] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 127.560316][ T9274] EXT4-fs (loop5): Remounting filesystem read-only [ 127.583760][ T9274] EXT4-fs (loop5): 1 truncate cleaned up [ 127.597825][ T9274] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.646632][ T9318] bridge_slave_0: default FDB implementation only supports local addresses [ 127.690777][ T9325] netlink: 'syz.3.2323': attribute type 29 has an invalid length. [ 127.701758][ T4213] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.851961][ T9353] syzkaller1: entered promiscuous mode [ 127.857493][ T9353] syzkaller1: entered allmulticast mode [ 127.867754][ T9337] loop3: detected capacity change from 0 to 8192 [ 127.894275][ T9357] sctp: [Deprecated]: syz.8.2331 (pid 9357) Use of struct sctp_assoc_value in delayed_ack socket option. [ 127.894275][ T9357] Use struct sctp_sack_info instead [ 127.931946][ T9337] loop3: p1 < > p2 p3 < p5 p6 > p4 [ 127.937200][ T9337] loop3: partition table partially beyond EOD, truncated [ 127.961370][ T9337] loop3: p1 start 100663296 is beyond EOD, truncated [ 127.968135][ T9337] loop3: p2 size 134217732 extends beyond EOD, truncated [ 127.998885][ T9337] loop3: p4 size 14876672 extends beyond EOD, truncated [ 128.025993][ T9376] netlink: 'syz.8.2337': attribute type 1 has an invalid length. [ 128.032056][ T9337] loop3: p5 size 134217732 extends beyond EOD, truncated [ 128.033862][ T9376] netlink: 'syz.8.2337': attribute type 2 has an invalid length. [ 128.042400][ T9337] loop3: p6 size 14876672 extends beyond EOD, truncated [ 128.096418][ T9376] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2337'. [ 128.252944][ T9412] SELinux: Context system_u: is not valid (left unmapped). [ 128.498799][ T9421] random: crng reseeded on system resumption [ 128.509564][ T9423] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 128.635151][ T9435] IPv6: Can't replace route, no match found [ 128.736009][ T9443] loop3: detected capacity change from 0 to 512 [ 128.743149][ T9443] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 128.758305][ T9445] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2363'. [ 128.782321][ T9443] EXT4-fs (loop3): 1 truncate cleaned up [ 128.788610][ T9443] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.850601][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.883247][ T9450] bridge0: entered promiscuous mode [ 128.901312][ T9450] macsec1: entered promiscuous mode [ 128.916596][ T9450] bridge0: port 3(macsec1) entered blocking state [ 128.923212][ T9450] bridge0: port 3(macsec1) entered disabled state [ 128.943267][ T9450] macsec1: entered allmulticast mode [ 128.948678][ T9450] bridge0: entered allmulticast mode [ 128.970110][ T9450] macsec1: left allmulticast mode [ 128.975271][ T9450] bridge0: left allmulticast mode [ 128.987763][ T9467] loop3: detected capacity change from 0 to 512 [ 128.995103][ T9467] EXT4-fs: Ignoring removed nobh option [ 129.001550][ T9450] bridge0: left promiscuous mode [ 129.004334][ T9470] loop8: detected capacity change from 0 to 256 [ 129.018026][ T9467] EXT4-fs (loop3): failed to initialize system zone (-117) [ 129.025535][ T9467] EXT4-fs (loop3): mount failed [ 129.105105][ T9483] program syz.5.2378 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.344184][ T9498] loop3: detected capacity change from 0 to 1024 [ 129.350966][ T9498] EXT4-fs: Ignoring removed oldalloc option [ 129.357176][ T9498] EXT4-fs: Ignoring removed nomblk_io_submit option [ 129.487783][ T9507] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2391'. [ 129.652553][ T9498] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.690692][ T9507] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2391'. [ 129.744500][ T9525] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 129.800049][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.979706][ T9553] loop3: detected capacity change from 0 to 128 [ 130.012131][ T9553] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.067223][ T9561] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 130.109824][ T8957] Process accounting resumed [ 130.139704][ T3324] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.322762][ T9587] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 130.402378][ T9597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.517855][ T9597] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.540039][ T9604] loop3: detected capacity change from 0 to 164 [ 130.582306][ T9604] ISOFS: unable to read i-node block [ 130.587829][ T9604] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 130.699108][ T9618] macsec1: entered promiscuous mode [ 130.704422][ T9618] bridge0: entered promiscuous mode [ 130.721925][ T9618] bridge0: port 1(macsec1) entered blocking state [ 130.728456][ T9618] bridge0: port 1(macsec1) entered disabled state [ 130.741559][ T9618] macsec1: entered allmulticast mode [ 130.747038][ T9618] bridge0: entered allmulticast mode [ 130.758470][ T9618] macsec1: left allmulticast mode [ 130.763780][ T9618] bridge0: left allmulticast mode [ 130.769681][ T9618] bridge0: left promiscuous mode [ 130.802639][ T9621] sch_tbf: burst 19920 is lower than device lo mtu (65550) ! [ 130.838814][ T8282] IPVS: starting estimator thread 0... [ 130.899139][ T9636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.942966][ T9636] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.951841][ T9629] IPVS: using max 2112 ests per chain, 105600 per kthread [ 130.968276][ T9637] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2447'. [ 130.997704][ T9637] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2447'. [ 131.061282][ T9651] syzkaller1: entered promiscuous mode [ 131.067010][ T9651] syzkaller1: entered allmulticast mode [ 131.107220][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 131.107234][ T29] audit: type=1326 audit(132.087:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9663 comm="syz.3.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615562f749 code=0x7ffc0000 [ 131.136364][ T29] audit: type=1326 audit(132.087:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9663 comm="syz.3.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615562f749 code=0x7ffc0000 [ 131.159296][ T29] audit: type=1326 audit(132.087:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9663 comm="syz.3.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f615562f749 code=0x7ffc0000 [ 131.183640][ T29] audit: type=1326 audit(132.087:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9663 comm="syz.3.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615562f749 code=0x7ffc0000 [ 131.207260][ T29] audit: type=1326 audit(132.087:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9663 comm="syz.3.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615562f749 code=0x7ffc0000 [ 131.230263][ T29] audit: type=1326 audit(132.097:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9663 comm="syz.3.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f615562f749 code=0x7ffc0000 [ 131.323827][ T9670] netlink: 'syz.8.2462': attribute type 12 has an invalid length. [ 131.331743][ T9670] netlink: 'syz.8.2462': attribute type 29 has an invalid length. [ 131.339562][ T9670] netlink: 'syz.8.2462': attribute type 1 has an invalid length. [ 131.339674][ T29] audit: type=1326 audit(132.267:2586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9663 comm="syz.3.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615562f749 code=0x7ffc0000 [ 131.347341][ T9670] netlink: 'syz.8.2462': attribute type 2 has an invalid length. [ 131.347354][ T9670] netlink: 'syz.8.2462': attribute type 1 has an invalid length. [ 131.347365][ T9670] netlink: 228 bytes leftover after parsing attributes in process `syz.8.2462'. [ 131.394961][ T29] audit: type=1326 audit(132.277:2587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9663 comm="syz.3.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615562f749 code=0x7ffc0000 [ 131.417837][ T29] audit: type=1326 audit(132.287:2588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9663 comm="syz.3.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f615562f749 code=0x7ffc0000 [ 131.440604][ T29] audit: type=1326 audit(132.287:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9663 comm="syz.3.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615562f749 code=0x7ffc0000 [ 131.471727][ T9675] openvswitch: netlink: Missing key (keys=40, expected=80) [ 131.504982][ T9668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.516915][ T9668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.543122][ T9682] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 132.000823][ T9744] netlink: 'syz.2.2497': attribute type 10 has an invalid length. [ 132.008891][ T9738] loop3: detected capacity change from 0 to 8192 [ 132.042808][ T9744] hsr0: entered promiscuous mode [ 132.059987][ T9744] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 132.149787][ T9744] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 132.162241][ T9744] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 132.195592][ T36] Process accounting resumed [ 132.408272][ T3400] IPVS: starting estimator thread 0... [ 132.511389][ T9768] IPVS: using max 2208 ests per chain, 110400 per kthread [ 132.758625][ T9793] loop3: detected capacity change from 0 to 256 [ 132.818314][ T36] IPVS: starting estimator thread 0... [ 132.921331][ T9810] IPVS: using max 1776 ests per chain, 88800 per kthread [ 132.932153][ T9827] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2533'. [ 133.107999][ T9864] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 133.202360][ T9880] loop5: detected capacity change from 0 to 256 [ 133.252168][ T9889] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 133.272479][ T9893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2564'. [ 133.281453][ T9893] netlink: 'syz.1.2564': attribute type 30 has an invalid length. [ 133.310656][ T37] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.325458][ T37] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.343534][ T37] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.389427][ T37] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.464357][ T9915] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2574'. [ 133.472567][ T9909] loop5: detected capacity change from 0 to 8192 [ 133.500834][ T9919] netlink: 'syz.2.2576': attribute type 10 has an invalid length. [ 133.508749][ T9919] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2576'. [ 133.520618][ T9919] ipvlan2: entered promiscuous mode [ 133.527513][ T9919] bridge0: port 3(ipvlan2) entered blocking state [ 133.534115][ T9919] bridge0: port 3(ipvlan2) entered disabled state [ 133.540820][ T9919] ipvlan2: entered allmulticast mode [ 133.546234][ T9919] bridge0: entered allmulticast mode [ 133.553061][ T9919] ipvlan2: left allmulticast mode [ 133.558158][ T9919] bridge0: left allmulticast mode [ 133.578083][ T9921] loop3: detected capacity change from 0 to 8192 [ 133.883845][ T9937] Invalid argument reading file caps for ./file0 [ 133.944831][ T9939] netlink: 'syz.2.2586': attribute type 10 has an invalid length. [ 133.952871][ T9939] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2586'. [ 134.000762][ T9939] : entered promiscuous mode [ 134.023579][ T9939] bridge0: port 3() entered blocking state [ 134.029626][ T9939] bridge0: port 3() entered disabled state [ 134.036209][ T9939] : entered allmulticast mode [ 134.041029][ T9939] bridge0: entered allmulticast mode [ 134.088634][ T9939] : left allmulticast mode [ 134.093267][ T9939] bridge0: left allmulticast mode [ 134.096675][ T9953] loop5: detected capacity change from 0 to 4096 [ 134.118696][ T9953] EXT4-fs: Ignoring removed nomblk_io_submit option [ 134.154825][ T9953] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.196947][ T9965] loop3: detected capacity change from 0 to 512 [ 134.209665][ T4213] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.219269][ T9965] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 134.229525][ T9965] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.2599: invalid block [ 134.242376][ T9965] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2599: invalid indirect mapped block 4294967295 (level 1) [ 134.257927][ T9965] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2599: invalid indirect mapped block 4294967295 (level 1) [ 134.322865][ T9965] EXT4-fs (loop3): 2 truncates cleaned up [ 134.333016][ T9965] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.456147][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.766843][ T9994] loop3: detected capacity change from 0 to 2048 [ 134.801773][ T9994] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 134.825067][ T9994] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 134.837732][ T9994] EXT4-fs (loop3): This should not happen!! Data will be lost [ 134.837732][ T9994] [ 134.847517][ T9994] EXT4-fs (loop3): Total free blocks count 0 [ 134.853568][ T9994] EXT4-fs (loop3): Free/Dirty block details [ 134.859526][ T9994] EXT4-fs (loop3): free_blocks=66060288 [ 134.865148][ T9994] EXT4-fs (loop3): dirty_blocks=48 [ 134.870466][ T9994] EXT4-fs (loop3): Block reservation details [ 134.876510][ T9994] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 134.962524][T10015] __nla_validate_parse: 1 callbacks suppressed [ 134.962542][T10015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2619'. [ 134.978083][T10015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2619'. [ 135.153299][T10052] Invalid argument reading file caps for ./file0 [ 135.365124][T10089] loop5: detected capacity change from 0 to 512 [ 135.390564][T10089] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 135.404425][T10100] netlink: 'syz.3.2658': attribute type 21 has an invalid length. [ 135.415160][T10100] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2658'. [ 135.425448][T10089] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.2654: invalid block [ 135.447926][T10089] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2654: invalid indirect mapped block 4294967295 (level 1) [ 135.462311][T10089] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2654: invalid indirect mapped block 4294967295 (level 1) [ 135.477240][T10089] EXT4-fs (loop5): 2 truncates cleaned up [ 135.578457][T10120] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 135.781057][T10153] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2672'. [ 135.794033][T10153] : entered promiscuous mode [ 135.800269][T10153] bridge0: port 3() entered blocking state [ 135.806358][T10153] bridge0: port 3() entered disabled state [ 135.812824][T10153] : entered allmulticast mode [ 135.817626][T10153] bridge0: entered allmulticast mode [ 135.823538][T10153] : left allmulticast mode [ 135.828337][T10153] bridge0: left allmulticast mode [ 135.880139][T10166] binfmt_misc: register: failed to install interpreter file ./file0 [ 136.257463][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 136.257482][ T29] audit: type=1400 audit(137.237:2691): avc: denied { write } for pid=10238 comm="syz.8.2689" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 136.304385][ T29] audit: type=1400 audit(137.277:2692): avc: denied { ioctl } for pid=10238 comm="syz.8.2689" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 136.348327][T10243] openvswitch: netlink: Missing key (keys=40, expected=80) [ 136.401644][ T29] audit: type=1326 audit(137.387:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.2.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4533f749 code=0x7ffc0000 [ 136.471577][ T29] audit: type=1326 audit(137.387:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.2.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4533f749 code=0x7ffc0000 [ 136.494656][ T29] audit: type=1326 audit(137.387:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.2.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4533f749 code=0x7ffc0000 [ 136.517589][ T29] audit: type=1326 audit(137.387:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.2.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4533f749 code=0x7ffc0000 [ 136.540636][ T29] audit: type=1326 audit(137.387:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.2.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f3b4533f749 code=0x7ffc0000 [ 136.563597][ T29] audit: type=1326 audit(137.387:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.2.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4533f749 code=0x7ffc0000 [ 136.586648][ T29] audit: type=1326 audit(137.387:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.2.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3b4533f749 code=0x7ffc0000 [ 136.609778][ T29] audit: type=1326 audit(137.387:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.2.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3b4533f749 code=0x7ffc0000 [ 136.635824][T10268] loop5: detected capacity change from 0 to 512 [ 136.642971][T10268] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 136.665220][T10268] EXT4-fs mount: 4 callbacks suppressed [ 136.665241][T10268] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.684255][T10268] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.875527][T10306] loop5: detected capacity change from 0 to 512 [ 137.133408][T10339] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2707'. [ 137.167552][T10344] SELinux: Context system_u:object_r:hald_exec_t:s0 is not valid (left unmapped). [ 137.296565][T10356] EXT4-fs: Ignoring removed bh option [ 137.386505][T10356] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.449305][ T4213] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.642801][T10376] netlink: 204 bytes leftover after parsing attributes in process `syz.8.2723'. [ 137.696192][ T37] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.762871][ T37] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.817469][ T37] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.888964][ T37] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.903994][T10413] set_capacity_and_notify: 1 callbacks suppressed [ 137.904012][T10413] loop5: detected capacity change from 0 to 128 [ 137.919225][T10415] sg_write: data in/out 2048/8 bytes for SCSI command 0xfe-- guessing data in; [ 137.919225][T10415] program syz.1.2737 not setting count and/or reply_len properly [ 137.920347][T10413] vfat: Unknown parameter '" ' [ 137.957848][T10417] xt_hashlimit: max too large, truncated to 1048576 [ 138.022013][T10424] validate_nla: 3 callbacks suppressed [ 138.022032][T10424] netlink: 'syz.1.2741': attribute type 298 has an invalid length. [ 138.049187][T10380] chnl_net:caif_netlink_parms(): no params data found [ 138.070306][ T37] bridge_slave_1: left allmulticast mode [ 138.076125][ T37] bridge_slave_1: left promiscuous mode [ 138.081963][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.112097][ T37] bridge_slave_0: left allmulticast mode [ 138.117834][ T37] bridge_slave_0: left promiscuous mode [ 138.123549][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.283239][T10445] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2749'. [ 138.292366][T10445] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 138.304446][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.314941][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.332807][ T37] bond0 (unregistering): Released all slaves [ 138.402913][ T37] hsr_slave_0: left promiscuous mode [ 138.410826][ T37] hsr_slave_1: left promiscuous mode [ 138.418821][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.426351][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.438138][ T37] veth1_macvtap: left promiscuous mode [ 138.443814][ T37] veth0_macvtap: left promiscuous mode [ 138.451102][ T37] veth1_vlan: left promiscuous mode [ 138.469092][T10458] x_tables: duplicate entry at hook 1 [ 138.476795][ T37] veth0_vlan: left promiscuous mode [ 138.526633][T10462] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2754'. [ 138.613603][ T37] team0 (unregistering): Port device team_slave_1 removed [ 138.623257][T10468] loop8: detected capacity change from 0 to 1024 [ 138.632440][ T37] team0 (unregistering): Port device team_slave_0 removed [ 138.643474][T10468] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 138.687934][T10468] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2759: bg 0: block 112: padding at end of block bitmap is not set [ 138.730362][ T4575] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 138.731405][T10461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.748137][T10461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.767982][T10380] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.775119][T10380] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.791515][T10380] bridge_slave_0: entered allmulticast mode [ 138.798100][T10380] bridge_slave_0: entered promiscuous mode [ 138.809759][T10380] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.817006][T10380] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.830621][T10380] bridge_slave_1: entered allmulticast mode [ 138.837926][T10380] bridge_slave_1: entered promiscuous mode [ 138.871069][T10380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.898464][T10482] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 138.898464][T10482] The task syz.5.2761 (10482) triggered the difference, watch for misbehavior. [ 138.902476][T10380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.949817][T10380] team0: Port device team_slave_0 added [ 138.962419][T10380] team0: Port device team_slave_1 added [ 138.988290][T10380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.995344][T10380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.021412][T10380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.053310][T10380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.060307][T10380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.086472][T10380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.112042][ T37] IPVS: stop unused estimator thread 0... [ 139.126788][T10380] hsr_slave_0: entered promiscuous mode [ 139.134011][T10380] hsr_slave_1: entered promiscuous mode [ 139.139915][T10380] debugfs: 'hsr0' already exists in 'hsr' [ 139.145719][T10380] Cannot create hsr debugfs directory [ 139.416660][T10380] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 139.429049][T10380] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 139.441707][T10380] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 139.456531][T10380] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 139.486727][T10380] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.494098][T10380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.542908][T10380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.554179][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.574956][T10380] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.595371][ T3905] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.602513][ T3905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.625737][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.632888][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.760044][T10380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.817668][ T53] Bluetooth: hci0: Frame reassembly failed (-84) [ 139.955619][T10380] veth0_vlan: entered promiscuous mode [ 139.969022][T10380] veth1_vlan: entered promiscuous mode [ 140.000696][T10380] veth0_macvtap: entered promiscuous mode [ 140.010919][T10380] veth1_macvtap: entered promiscuous mode [ 140.025482][T10380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.039610][T10380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.052420][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.068163][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.085032][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.098841][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.407944][T10735] sg_write: data in/out 178/8 bytes for SCSI command 0xfe-- guessing data in; [ 140.407944][T10735] program syz.5.2798 not setting count and/or reply_len properly [ 141.214625][T10872] loop3: detected capacity change from 0 to 512 [ 141.242721][T10872] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.283321][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.321730][T10892] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2817'. [ 141.332458][T10892] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2817'. [ 141.341504][T10892] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2817'. [ 141.360475][T10892] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2817'. [ 141.369679][T10892] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2817'. [ 141.378761][T10892] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2817'. [ 141.396435][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 141.396452][ T29] audit: type=1326 audit(142.377:2736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10902 comm="syz.5.2824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47c02f749 code=0x7ffc0000 [ 141.431516][ T29] audit: type=1326 audit(142.377:2737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10902 comm="syz.5.2824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff47c02f749 code=0x7ffc0000 [ 141.454540][ T29] audit: type=1326 audit(142.377:2738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10902 comm="syz.5.2824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47c02f749 code=0x7ffc0000 [ 141.477546][ T29] audit: type=1326 audit(142.377:2739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10902 comm="syz.5.2824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47c02f749 code=0x7ffc0000 [ 141.500500][ T29] audit: type=1326 audit(142.377:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10902 comm="syz.5.2824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff47c02f749 code=0x7ffc0000 [ 141.523386][ T29] audit: type=1326 audit(142.377:2741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10902 comm="syz.5.2824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47c02f749 code=0x7ffc0000 [ 141.546396][ T29] audit: type=1326 audit(142.377:2742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10902 comm="syz.5.2824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff47c02f749 code=0x7ffc0000 [ 141.569526][ T29] audit: type=1326 audit(142.377:2743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10902 comm="syz.5.2824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47c02f749 code=0x7ffc0000 [ 141.582165][T10892] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2817'. [ 141.592515][ T29] audit: type=1326 audit(142.377:2744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10902 comm="syz.5.2824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7ff47c02f749 code=0x7ffc0000 [ 141.602996][T10892] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2817'. [ 141.624286][ T29] audit: type=1326 audit(142.377:2745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10902 comm="syz.5.2824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47c02f749 code=0x7ffc0000 [ 141.656222][T10892] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2817'. [ 141.694792][T10911] SELinux: policydb table sizes (0,41663) do not match mine (8,7) [ 141.702981][T10911] SELinux: failed to load policy [ 141.760514][T10921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2832'. [ 141.770567][T10921] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 141.853438][T10935] loop3: detected capacity change from 0 to 512 [ 141.871779][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 141.872048][ T3972] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 141.917646][T10935] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.2839: error while reading EA inode 32 err=-116 [ 141.951602][T10935] EXT4-fs (loop3): Remounting filesystem read-only [ 141.958165][T10935] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 141.975203][T10935] EXT4-fs (loop3): 1 orphan inode deleted [ 141.981530][T10935] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.999884][T10949] nfs: Deprecated parameter 'nointr' [ 142.068319][T10935] 9pnet: p9_errstr2errno: server reported unknown error [ 142.153742][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.240315][T10982] bridge0: port 3(vlan2) entered blocking state [ 142.246744][T10982] bridge0: port 3(vlan2) entered disabled state [ 142.254979][T10982] vlan2: entered allmulticast mode [ 142.260128][T10982] bridge0: entered allmulticast mode [ 142.266208][T10982] vlan2: left allmulticast mode [ 142.268097][T10987] loop3: detected capacity change from 0 to 4096 [ 142.271136][T10982] bridge0: left allmulticast mode [ 142.284296][T10989] vhci_hcd vhci_hcd.2: invalid port number 96 [ 142.290408][T10989] vhci_hcd vhci_hcd.2: default hub control req: 0000 vfffc i0060 l0 [ 142.293013][T10987] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.335509][T11004] loop5: detected capacity change from 0 to 512 [ 142.349022][T10987] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2855: bg 0: block 363: padding at end of block bitmap is not set [ 142.385098][T11004] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.425512][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.461151][ T4213] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.733589][T11050] loop3: detected capacity change from 0 to 128 [ 142.763487][T11050] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 142.792269][T11050] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.874589][T11060] netlink: 'syz.5.2872': attribute type 18 has an invalid length. [ 142.905578][T11065] netdevsim netdevsim3: Direct firmware load for ut/event# failed with error -2 [ 142.946039][T11070] loop5: detected capacity change from 0 to 1764 [ 143.280242][T11127] IPv6: Can't replace route, no match found [ 143.351351][T11135] openvswitch: netlink: Missing key (keys=40, expected=80) [ 143.728167][T11193] loop8: detected capacity change from 0 to 512 [ 143.748689][T11193] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 143.777330][T11193] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 143.814481][T11193] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2924: bg 0: block 248: padding at end of block bitmap is not set [ 143.862377][T11193] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.2924: Failed to acquire dquot type 1 [ 143.875415][T11193] EXT4-fs (loop8): 1 truncate cleaned up [ 143.882184][T11193] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 143.895796][ T1038] kernel write not supported for file /sysvipc/msg (pid: 1038 comm: kworker/1:2) [ 143.905458][T11193] syz.8.2924 (11193) used greatest stack depth: 8944 bytes left [ 143.926070][ T4575] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 143.945313][T11210] netlink: 'syz.1.2932': attribute type 1 has an invalid length. [ 144.039940][T11216] SELinux: failed to load policy [ 144.176007][T11253] loop4: detected capacity change from 0 to 128 [ 144.343701][T11297] netlink: 'syz.5.2962': attribute type 1 has an invalid length. [ 144.470258][T11312] loop5: detected capacity change from 0 to 1024 [ 144.477584][T11312] EXT4-fs: Ignoring removed nomblk_io_submit option [ 144.517401][T11312] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 144.536617][T11312] System zones: 0-1, 3-36 [ 144.543491][T11312] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.575282][ T4213] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.642243][T11333] loop3: detected capacity change from 0 to 512 [ 144.661217][T11333] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 144.695088][T11338] loop5: detected capacity change from 0 to 4096 [ 144.704359][T11333] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 144.720991][T11338] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.734071][T11333] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2976: bg 0: block 248: padding at end of block bitmap is not set [ 144.749303][T11333] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.2976: Failed to acquire dquot type 1 [ 144.767261][T11333] EXT4-fs (loop3): 1 truncate cleaned up [ 144.773513][T11333] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 144.774307][T11338] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2978: bg 0: block 363: padding at end of block bitmap is not set [ 144.816965][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 144.853950][T11362] SELinux: security_context_str_to_sid () failed with errno=-22 [ 144.883764][ T4213] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.998422][T11381] SELinux: failed to load policy [ 145.035379][T11393] loop4: detected capacity change from 0 to 128 [ 145.049470][T11393] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 145.138634][T10380] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 145.151033][T11415] SELinux: security_context_str_to_sid () failed with errno=-22 [ 145.278350][T11439] lo speed is unknown, defaulting to 1000 [ 145.285160][T11439] lo speed is unknown, defaulting to 1000 [ 145.291173][T11439] lo speed is unknown, defaulting to 1000 [ 145.300890][T11437] loop5: detected capacity change from 0 to 512 [ 145.308384][T11437] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 145.324582][T11437] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 145.332187][T11439] infiniband syz1: set down [ 145.343611][T11439] infiniband syz1: added lo [ 145.348142][ T3498] lo speed is unknown, defaulting to 1000 [ 145.355832][T11437] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3012: bg 0: block 248: padding at end of block bitmap is not set [ 145.360782][T11435] SELinux: failed to load policy [ 145.372034][T11437] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.3012: Failed to acquire dquot type 1 [ 145.392669][T11439] RDS/IB: syz1: added [ 145.393044][T11437] EXT4-fs (loop5): 1 truncate cleaned up [ 145.396694][T11439] smc: adding ib device syz1 with port count 1 [ 145.396710][T11439] smc: ib device syz1 port 1 has no pnetid [ 145.396743][ T3498] lo speed is unknown, defaulting to 1000 [ 145.417294][T11437] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 145.421327][T11439] lo speed is unknown, defaulting to 1000 [ 145.474508][T11439] lo speed is unknown, defaulting to 1000 [ 145.483708][ T4213] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 145.516826][T11439] lo speed is unknown, defaulting to 1000 [ 145.532916][T11463] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 145.558708][T11439] lo speed is unknown, defaulting to 1000 [ 145.593336][T11439] lo speed is unknown, defaulting to 1000 [ 146.048550][T11470] loop4: detected capacity change from 0 to 4096 [ 146.057806][T11470] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.078083][T11470] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3018: bg 0: block 363: padding at end of block bitmap is not set [ 146.108771][T10380] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.127939][T11483] loop3: detected capacity change from 0 to 1024 [ 146.134974][T11483] ext4: Unknown parameter 'uid<00000000000000000000' [ 146.170457][T11490] SELinux: security_context_str_to_sid () failed with errno=-22 [ 146.192603][T11492] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.218080][T11492] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.3022: corrupted xattr block 6: invalid header [ 146.232045][T11492] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 146.241209][T11492] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.3022: corrupted xattr block 6: invalid header [ 146.254853][T11492] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 146.264727][T11492] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.3022: corrupted xattr block 6: invalid header [ 146.278324][T11492] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 146.287378][T11492] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.3022: corrupted xattr block 6: invalid header [ 146.301247][T11492] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 146.310526][T11492] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.3022: corrupted xattr block 6: invalid header [ 146.324159][T11492] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 146.336651][T11492] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.3022: corrupted xattr block 6: invalid header [ 146.353156][T11514] SELinux: Context is not valid (left unmapped). [ 146.388478][ T4213] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.430238][T11527] netlink: 'syz.3.3037': attribute type 13 has an invalid length. [ 146.453619][T11529] __nla_validate_parse: 9 callbacks suppressed [ 146.453640][T11529] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3038'. [ 146.472131][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 146.472150][ T29] audit: type=1400 audit(147.516:2901): avc: denied { create } for pid=11530 comm="syz.5.3039" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 146.512649][T11527] gretap0: refused to change device tx_queue_len [ 146.522041][T11527] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 146.539796][ T3400] lo speed is unknown, defaulting to 1000 [ 146.545671][ T3400] syz1: Port: 1 Link ACTIVE [ 146.548842][ T29] audit: type=1400 audit(147.546:2902): avc: denied { setattr } for pid=11530 comm="syz.5.3039" name="file0" dev="tmpfs" ino=2940 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 146.564193][ T3400] lo speed is unknown, defaulting to 1000 [ 146.572488][ T29] audit: type=1400 audit(147.546:2903): avc: denied { write } for pid=11530 comm="syz.5.3039" name="file0" dev="tmpfs" ino=2940 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 146.600085][ T29] audit: type=1400 audit(147.546:2904): avc: denied { open } for pid=11530 comm="syz.5.3039" path="/565/file0" dev="tmpfs" ino=2940 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 146.622396][ T29] audit: type=1400 audit(147.556:2905): avc: denied { unlink } for pid=4213 comm="syz-executor" name="file0" dev="tmpfs" ino=2940 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 146.813668][ T29] audit: type=1326 audit(147.856:2906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11543 comm="syz.5.3045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47c02f749 code=0x7ffc0000 [ 146.853174][ T29] audit: type=1326 audit(147.876:2907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11543 comm="syz.5.3045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47c02f749 code=0x7ffc0000 [ 146.876165][ T29] audit: type=1326 audit(147.876:2908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11543 comm="syz.5.3045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff47c02f749 code=0x7ffc0000 [ 146.899158][ T29] audit: type=1326 audit(147.876:2909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11543 comm="syz.5.3045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47c02f749 code=0x7ffc0000 [ 146.922160][ T29] audit: type=1326 audit(147.876:2910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11543 comm="syz.5.3045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47c02f749 code=0x7ffc0000 [ 146.991708][ T3972] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 147.093429][T11550] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.130292][T11550] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3047: bg 0: block 363: padding at end of block bitmap is not set [ 147.166825][ T4575] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.491958][T11584] vlan2: entered allmulticast mode [ 147.499408][T11584] bridge0: port 3(vlan2) entered blocking state [ 147.505881][T11584] bridge0: port 3(vlan2) entered disabled state [ 147.522775][T11584] vlan2: entered promiscuous mode [ 147.644784][T11603] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3068'. [ 147.662519][T11606] netlink: 116 bytes leftover after parsing attributes in process `syz.5.3069'. [ 147.673292][T11601] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 147.680632][T11601] vhci_hcd vhci_hcd.2: invalid port number 96 [ 147.686808][T11601] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 147.980613][T11640] set_capacity_and_notify: 2 callbacks suppressed [ 147.980671][T11640] loop8: detected capacity change from 0 to 128 [ 147.996484][T11640] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 148.022896][T11642] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 148.031432][T11642] vhci_hcd vhci_hcd.2: invalid port number 96 [ 148.037570][T11642] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 148.059685][ T4575] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 148.279821][T11679] SELinux: failed to load policy [ 148.419813][T11691] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3103'. [ 148.429039][T11691] 0X: renamed from caif0 [ 148.429364][T11692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3104'. [ 148.445850][T11691] 0X: entered allmulticast mode [ 148.451139][T11691] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 148.570474][T11714] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3111'. [ 148.598932][T11718] loop3: detected capacity change from 0 to 128 [ 148.608697][T11718] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 148.658546][ T3324] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 148.818016][T11756] loop5: detected capacity change from 0 to 128 [ 148.826984][T11756] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 148.845276][T11762] program syz.3.3128 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.877831][ T4213] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 149.004025][T11783] loop8: detected capacity change from 0 to 2048 [ 149.012106][T11784] sctp: [Deprecated]: syz.5.3135 (pid 11784) Use of struct sctp_assoc_value in delayed_ack socket option. [ 149.012106][T11784] Use struct sctp_sack_info instead [ 149.033102][T11783] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.073736][ T4575] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 149.088816][ T4575] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 149.102121][ T4575] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.142076][T11802] loop8: detected capacity change from 0 to 128 [ 149.154812][T11802] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 149.205298][ T4575] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 149.411959][T11828] loop3: detected capacity change from 0 to 8192 [ 149.489556][T11836] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 149.518198][T11838] loop3: detected capacity change from 0 to 512 [ 149.525322][T11838] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 149.536698][T11838] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.3155: inode has both inline data and extents flags [ 149.550210][T11838] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3155: couldn't read orphan inode 15 (err -117) [ 149.563051][T11838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.589268][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.608326][T11846] netlink: 'syz.1.3158': attribute type 3 has an invalid length. [ 149.636241][T11851] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 149.636241][T11851] program syz.1.3159 not setting count and/or reply_len properly [ 149.743043][T11863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3162'. [ 149.871033][T11885] loop3: detected capacity change from 0 to 128 [ 149.882871][T11885] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 149.915659][ T3324] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 150.039773][T11917] program syz.1.3180 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 150.096784][T11926] netlink: 'syz.1.3186': attribute type 13 has an invalid length. [ 150.136285][T11931] loop3: detected capacity change from 0 to 512 [ 150.145664][T11931] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 150.164785][T11931] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 150.172927][T11931] EXT4-fs (loop3): orphan cleanup on readonly fs [ 150.179943][T11931] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.3189: Allocating blocks 41-42 which overlap fs metadata [ 150.191640][T11926] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.200986][T11926] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.204795][T11931] EXT4-fs (loop3): Remounting filesystem read-only [ 150.214969][T11937] netlink: 'syz.8.3190': attribute type 1 has an invalid length. [ 150.222806][T11931] EXT4-fs (loop3): 1 truncate cleaned up [ 150.228669][T11931] EXT4-fs (loop3): pa ffff888107a109a0: logic 1, phys. 41, len 23 [ 150.237211][T11931] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 150.297878][T11926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.312642][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.381535][ T3905] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.390604][ T3905] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.404964][T11944] lo speed is unknown, defaulting to 1000 [ 150.413956][ T3905] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.423158][ T3905] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.433215][T11955] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3197'. [ 150.443431][T11961] loop5: detected capacity change from 0 to 2048 [ 150.454200][ T3905] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.463171][ T3905] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.473433][ T3905] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.482403][ T3905] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.492840][T11961] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.548234][ T4213] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 150.564285][ T4213] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 150.580106][ T4213] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.634201][T12006] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 150.648354][T12006] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:375: inode #2: comm syz.5.3206: No space for directory leaf checksum. Please run e2fsck -D. [ 150.663998][T12006] EXT4-fs error (device loop5): htree_dirblock_to_tree:1051: inode #2: comm syz.5.3206: Directory block failed checksum [ 150.744372][ T4213] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 150.806473][T12020] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 150.848971][T12020] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 150.862842][T12023] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.927663][ T3324] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 150.959738][T12036] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3216'. [ 150.971108][ T3324] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 150.985481][T12036] 0X: renamed from caif0 [ 150.996352][T12036] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 151.017545][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.489952][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 151.489971][ T29] audit: type=1326 audit(152.526:3018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12091 comm="syz.8.3237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b2acf749 code=0x7ffc0000 [ 151.519248][ T29] audit: type=1326 audit(152.546:3019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12091 comm="syz.8.3237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa7b2acf749 code=0x7ffc0000 [ 151.542276][ T29] audit: type=1326 audit(152.546:3020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12091 comm="syz.8.3237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b2acf749 code=0x7ffc0000 [ 151.578626][ T29] audit: type=1400 audit(152.616:3021): avc: denied { read write } for pid=12094 comm="syz.1.3239" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 151.579842][ T3498] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 151.601616][ T29] audit: type=1400 audit(152.616:3022): avc: denied { open } for pid=12094 comm="syz.1.3239" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 151.633225][ T3498] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 151.640653][ T3498] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 151.655975][ T3498] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 151.664179][ T3498] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 151.671667][ T3498] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 151.679133][ T3498] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 151.686647][ T3498] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 151.694916][ T3498] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 151.702389][ T3498] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 151.713919][ T3498] hid-generic 0000:0000:0000.0004: hidraw0: HID v8.00 Device [syz0] on syz0 [ 151.726788][ T8282] hid-generic 00A0:0006:0003.0005: hidraw1: HID v0.05 Device [syz1] on syz0 [ 151.965852][ T29] audit: type=1400 audit(153.006:3023): avc: denied { bind } for pid=12137 comm="syz.3.3249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 152.061431][ T29] audit: type=1400 audit(153.026:3024): avc: denied { setopt } for pid=12137 comm="syz.3.3249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 152.081626][ T29] audit: type=1400 audit(153.056:3025): avc: denied { setopt } for pid=12143 comm="syz.1.3253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 152.100542][ T29] audit: type=1400 audit(153.076:3026): avc: denied { getopt } for pid=12142 comm="syz.5.3251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 152.153464][T12153] netlink: 'syz.5.3257': attribute type 3 has an invalid length. [ 152.161302][T12153] netlink: 13435 bytes leftover after parsing attributes in process `syz.5.3257'. [ 152.289793][ T29] audit: type=1326 audit(153.196:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12151 comm="syz.1.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7bff4f749 code=0x7ffc0000 [ 152.425041][T12177] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3268'. [ 152.488672][T12186] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3273'. [ 152.497839][T12186] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3273'. [ 152.524458][T12186] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3273'. [ 152.548958][T12186] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3273'. [ 152.558251][T12186] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3273'. [ 152.647758][T12197] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 152.664613][ T3400] hid-generic 0000:0000:0000.0006: hidraw0: HID v8.00 Device [syz0] on syz0 [ 152.784791][T12226] EXT4-fs: Ignoring removed orlov option [ 152.808847][T12226] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.061303][ T3400] hid-generic 0000:0000:0000.0007: hidraw0: HID v8.00 Device [syz0] on syz0 [ 153.110404][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.123821][T12255] ip6_vti0 speed is unknown, defaulting to 1000 [ 153.132728][T12255] ip6_vti0 speed is unknown, defaulting to 1000 [ 153.142015][T12255] ip6_vti0 speed is unknown, defaulting to 1000 [ 153.240374][T12255] infiniband syz2: set down [ 153.245108][T12255] infiniband syz2: added ip6_vti0 [ 153.250215][ T3400] ip6_vti0 speed is unknown, defaulting to 1000 [ 153.273182][T12255] RDS/IB: syz2: added [ 153.277898][T12255] smc: adding ib device syz2 with port count 1 [ 153.313323][T12255] smc: ib device syz2 port 1 has no pnetid [ 153.321439][ T3400] ip6_vti0 speed is unknown, defaulting to 1000 [ 153.329011][T12279] netlink: 'syz.3.3302': attribute type 13 has an invalid length. [ 153.342470][T12255] ip6_vti0 speed is unknown, defaulting to 1000 [ 153.497012][ T8960] hid-generic 0000:0000:0000.0008: hidraw0: HID v8.00 Device [syz0] on syz0 [ 153.522628][ T3921] Bluetooth: hci0: Frame reassembly failed (-84) [ 153.892342][ T3400] lo speed is unknown, defaulting to 1000 [ 153.898579][ T3400] syz1: Port: 1 Link DOWN [ 153.903199][T12255] ip6_vti0 speed is unknown, defaulting to 1000 [ 153.909924][ T3923] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.918894][ T3923] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.951388][ T3470] lo speed is unknown, defaulting to 1000 [ 153.959586][ T3923] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.968534][ T3923] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.004547][T12255] ip6_vti0 speed is unknown, defaulting to 1000 [ 154.013345][ T3923] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.022531][ T3923] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.045873][ T3923] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.054862][ T3923] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.144527][T12255] ip6_vti0 speed is unknown, defaulting to 1000 [ 154.209380][T12255] ip6_vti0 speed is unknown, defaulting to 1000 [ 154.228224][T12361] set_capacity_and_notify: 4 callbacks suppressed [ 154.228246][T12361] loop4: detected capacity change from 0 to 256 [ 154.269473][T12361] FAT-fs (loop4): Directory bread(block 64) failed [ 154.276607][T12361] FAT-fs (loop4): Directory bread(block 65) failed [ 154.288632][T12361] FAT-fs (loop4): Directory bread(block 66) failed [ 154.296415][T12361] FAT-fs (loop4): Directory bread(block 67) failed [ 154.303177][T12361] FAT-fs (loop4): Directory bread(block 68) failed [ 154.307329][T12371] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3319'. [ 154.309792][T12361] FAT-fs (loop4): Directory bread(block 69) failed [ 154.333822][T12361] FAT-fs (loop4): Directory bread(block 70) failed [ 154.340486][T12361] FAT-fs (loop4): Directory bread(block 71) failed [ 154.349908][T12361] FAT-fs (loop4): Directory bread(block 72) failed [ 154.356707][T12361] FAT-fs (loop4): Directory bread(block 73) failed [ 155.397691][ T8960] hid-generic 0000:0000:0000.0009: hidraw0: HID v8.00 Device [syz0] on syz0 [ 155.428530][T12476] vcan0: tx drop: invalid da for name 0x00000000000000f0 [ 155.440001][T12478] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3326'. [ 155.449879][T12478] unsupported nlmsg_type 40 [ 155.468052][T12482] loop3: detected capacity change from 0 to 2048 [ 155.542666][T12482] loop3: p1 p2 p3 [ 155.551275][ T3972] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 155.551317][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 155.615435][T12517] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 155.755117][ T8960] kernel write not supported for file bpf-map (pid: 8960 comm: kworker/0:17) [ 155.942345][T12567] wireguard0: entered promiscuous mode [ 155.947925][T12567] wireguard0: entered allmulticast mode [ 155.997031][T12318] kernel write not supported for file bpf-map (pid: 12318 comm: kworker/1:14) [ 156.142460][T12603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.153840][T12603] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.165364][T12603] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 156.183097][ T1038] ip6_vti0 speed is unknown, defaulting to 1000 [ 156.189387][ T1038] syz2: Port: 1 Link ACTIVE [ 156.214172][ T1038] ip6_vti0 speed is unknown, defaulting to 1000 [ 156.327199][T12603] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 156.391273][ T8282] kernel write not supported for file bpf-map (pid: 8282 comm: kworker/1:8) [ 156.722684][T12629] netlink: 'syz.4.3389': attribute type 13 has an invalid length. [ 156.771959][T12629] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.779239][T12629] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.829719][T12629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.840650][T12629] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.897144][ T3905] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.910736][ T3905] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.929669][ T3905] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.949590][ T3905] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.077107][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 157.077122][ T29] audit: type=1326 audit(158.116:3169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12646 comm="syz.1.3398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7bff4f749 code=0x7ffc0000 [ 157.117416][ T29] audit: type=1326 audit(158.146:3170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12646 comm="syz.1.3398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fb7bff4f749 code=0x7ffc0000 [ 157.141306][ T29] audit: type=1326 audit(158.146:3171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12646 comm="syz.1.3398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7bff4f749 code=0x7ffc0000 [ 157.238745][ T29] audit: type=1326 audit(158.276:3172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12669 comm="syz.3.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615562f749 code=0x7ffc0000 [ 157.265255][ T29] audit: type=1326 audit(158.306:3173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12669 comm="syz.3.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615562f749 code=0x7ffc0000 [ 157.288251][ T29] audit: type=1326 audit(158.306:3174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12669 comm="syz.3.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f615562f749 code=0x7ffc0000 [ 157.311872][ T29] audit: type=1326 audit(158.306:3175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12669 comm="syz.3.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615562f749 code=0x7ffc0000 [ 157.334974][ T29] audit: type=1326 audit(158.306:3176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12669 comm="syz.3.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615562f749 code=0x7ffc0000 [ 157.358819][ T29] audit: type=1326 audit(158.306:3177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12669 comm="syz.3.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f615562f749 code=0x7ffc0000 [ 157.380838][T12672] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3408'. [ 157.382491][ T29] audit: type=1326 audit(158.306:3178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12669 comm="syz.3.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615562f749 code=0x7ffc0000 [ 157.543650][T12699] netlink: 'syz.3.3419': attribute type 1 has an invalid length. [ 157.576779][T12705] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3423'. [ 157.585902][T12705] netlink: 'syz.3.3423': attribute type 1 has an invalid length. [ 157.762175][T12724] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.005070][T12753] wireguard0: entered promiscuous mode [ 158.010854][T12753] wireguard0: entered allmulticast mode [ 158.349542][T12809] wireguard0: entered promiscuous mode [ 158.355297][T12809] wireguard0: entered allmulticast mode [ 158.518674][T12822] veth1_to_bridge: entered promiscuous mode [ 158.528176][T12822] batadv0: entered promiscuous mode [ 158.533926][T12821] batadv0: left promiscuous mode [ 158.538918][T12821] veth1_to_bridge: left promiscuous mode [ 158.573182][T12830] netlink: 'syz.5.3472': attribute type 1 has an invalid length. [ 158.658551][T12848] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 158.665110][T12848] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 158.673329][T12848] vhci_hcd vhci_hcd.0: Device attached [ 158.713674][T12849] vhci_hcd: connection closed [ 158.713740][ T3884] vhci_hcd vhci_hcd.1: stop threads [ 158.723912][ T3884] vhci_hcd vhci_hcd.1: release socket [ 158.729404][ T3884] vhci_hcd vhci_hcd.1: disconnect device [ 158.853907][T12880] netlink: 'syz.4.3485': attribute type 1 has an invalid length. [ 159.185822][T12933] wireguard0: entered promiscuous mode [ 159.191360][T12933] wireguard0: entered allmulticast mode [ 159.353688][T12970] netlink: 'syz.4.3505': attribute type 13 has an invalid length. [ 160.324929][T13064] wireguard0: entered promiscuous mode [ 160.330487][T13064] wireguard0: entered allmulticast mode [ 160.591660][T13118] netlink: 'syz.1.3536': attribute type 12 has an invalid length. [ 160.599582][T13118] netlink: 'syz.1.3536': attribute type 29 has an invalid length. [ 160.607604][T13118] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3536'. [ 160.617442][T13118] netlink: 'syz.1.3536': attribute type 2 has an invalid length. [ 160.625233][T13118] netlink: 23 bytes leftover after parsing attributes in process `syz.1.3536'. [ 160.683487][T13127] veth4: entered promiscuous mode [ 160.688576][T13127] veth4: entered allmulticast mode [ 160.742313][T13143] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3543'. [ 160.922537][T13177] loop8: detected capacity change from 0 to 128 [ 160.977057][T13184] SELinux: failed to load policy [ 161.026534][T13196] netlink: 'syz.1.3567': attribute type 10 has an invalid length. [ 161.034852][T13196] batadv0: entered allmulticast mode [ 161.041581][T13196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.056948][T13196] batadv0: entered promiscuous mode [ 161.063204][T13200] loop8: detected capacity change from 0 to 2048 [ 161.072658][T13196] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 161.087003][T13205] loop4: detected capacity change from 0 to 1024 [ 161.094088][T13196] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3567'. [ 161.105460][T13196] bond0: (slave batadv0): Releasing backup interface [ 161.106022][T13200] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.114596][T13205] EXT4-fs: inline encryption not supported [ 161.134252][T13196] bridge0: port 3(batadv0) entered blocking state [ 161.140864][T13196] bridge0: port 3(batadv0) entered disabled state [ 161.163220][T13205] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.210863][ T4575] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.211671][T10380] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.243328][T13225] loop4: detected capacity change from 0 to 128 [ 161.295560][T13237] loop4: detected capacity change from 0 to 128 [ 161.319981][T13240] loop5: detected capacity change from 0 to 2048 [ 161.333022][T13237] syz.4.3586: attempt to access beyond end of device [ 161.333022][T13237] loop4: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 161.347909][T13240] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.369877][T13237] syz.4.3586: attempt to access beyond end of device [ 161.369877][T13237] loop4: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 161.383680][T13237] Buffer I/O error on dev loop4, logical block 79, lost async page write [ 161.392900][T13246] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3580'. [ 161.402279][T13237] syz.4.3586: attempt to access beyond end of device [ 161.402279][T13237] loop4: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 161.403629][T13248] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3581'. [ 161.416926][T13237] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 161.434025][T13237] syz.4.3586: attempt to access beyond end of device [ 161.434025][T13237] loop4: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 161.447566][T13240] loop5: detected capacity change from 2048 to 64 [ 161.455813][T13237] syz.4.3586: attempt to access beyond end of device [ 161.455813][T13237] loop4: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 161.469787][T13237] Buffer I/O error on dev loop4, logical block 83, lost async page write [ 161.505173][T13253] netlink: 212892 bytes leftover after parsing attributes in process `syz.3.3583'. [ 161.528528][ T3875] Bluetooth: hci0: Frame reassembly failed (-84) [ 161.534963][T13237] syz.4.3586: attempt to access beyond end of device [ 161.534963][T13237] loop4: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 161.549506][T13237] Buffer I/O error on dev loop4, logical block 84, lost async page write [ 161.581966][T13237] syz.4.3586: attempt to access beyond end of device [ 161.581966][T13237] loop4: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 161.596014][T13237] syz.4.3586: attempt to access beyond end of device [ 161.596014][T13237] loop4: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 161.609869][T13237] Buffer I/O error on dev loop4, logical block 95, lost async page write [ 161.609997][ T3923] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 161.618720][T13237] syz.4.3586: attempt to access beyond end of device [ 161.618720][T13237] loop4: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 161.618752][T13237] Buffer I/O error on dev loop4, logical block 96, lost async page write [ 161.619144][T13237] syz.4.3586: attempt to access beyond end of device [ 161.619144][T13237] loop4: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 161.628291][ T3923] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 161.642790][T13237] Buffer I/O error on dev loop4, logical block 99, lost async page write [ 161.684630][T13263] loop8: detected capacity change from 0 to 512 [ 161.691539][T13237] Buffer I/O error on dev loop4, logical block 100, lost async page write [ 161.701805][T13237] Buffer I/O error on dev loop4, logical block 111, lost async page write [ 161.710484][T13237] Buffer I/O error on dev loop4, logical block 112, lost async page write [ 161.719945][T13263] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 161.727959][T13263] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 161.736838][T13267] loop3: detected capacity change from 0 to 128 [ 161.743267][T13263] EXT4-fs (loop8): orphan cleanup on readonly fs [ 161.752112][T13263] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #13: comm syz.8.3587: iget: bad i_size value: 12154761577498 [ 161.769501][T13263] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.3587: couldn't read orphan inode 13 (err -117) [ 161.814579][T13263] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 161.833067][T13272] loop3: detected capacity change from 0 to 1024 [ 161.854599][T13263] EXT4-fs warning (device loop8): dx_probe:861: inode #2: comm syz.8.3587: dx entry: limit 65535 != root limit 120 [ 161.866808][T13263] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.3587: Corrupt directory, running e2fsck is recommended [ 161.881073][T13263] EXT4-fs error (device loop8): ext4_readdir:264: inode #2: block 3: comm syz.8.3587: path /631/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 162.011801][T13293] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 162.022843][T13293] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 162.034285][T13293] JBD2: no valid journal superblock found [ 162.040062][T13293] EXT4-fs (loop4): Could not load journal inode [ 162.050223][T13293] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 162.110121][T13304] EXT4-fs: Ignoring removed bh option [ 162.136115][ T29] kauditd_printk_skb: 753 callbacks suppressed [ 162.136133][ T29] audit: type=1400 audit(163.176:3932): avc: denied { write } for pid=13301 comm="syz.4.3599" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 162.204162][ T3876] bridge_slave_1: left allmulticast mode [ 162.209962][ T3876] bridge_slave_1: left promiscuous mode [ 162.215785][ T3876] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.221298][ T29] audit: type=1326 audit(163.206:3933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13311 comm="syz.8.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b2acf749 code=0x7ffc0000 [ 162.246440][ T29] audit: type=1326 audit(163.206:3934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13311 comm="syz.8.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7b2acf749 code=0x7ffc0000 [ 162.269573][ T29] audit: type=1326 audit(163.206:3935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13311 comm="syz.8.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b2acf749 code=0x7ffc0000 [ 162.293296][ T29] audit: type=1326 audit(163.206:3936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13311 comm="syz.8.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b2acf749 code=0x7ffc0000 [ 162.316249][ T29] audit: type=1326 audit(163.206:3937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13311 comm="syz.8.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7b2acf749 code=0x7ffc0000 [ 162.339874][ T29] audit: type=1326 audit(163.216:3938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13311 comm="syz.8.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b2acf749 code=0x7ffc0000 [ 162.363467][ T29] audit: type=1326 audit(163.216:3939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13311 comm="syz.8.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b2acf749 code=0x7ffc0000 [ 162.386385][ T29] audit: type=1326 audit(163.216:3940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13311 comm="syz.8.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7b2acf749 code=0x7ffc0000 [ 162.410015][ T29] audit: type=1326 audit(163.226:3941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13311 comm="syz.8.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b2acf749 code=0x7ffc0000 [ 162.442075][ T3876] bridge_slave_0: left allmulticast mode [ 162.447891][ T3876] bridge_slave_0: left promiscuous mode [ 162.453916][ T3876] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.567351][T13344] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 162.613737][ T3876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.623042][ T3876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.632424][ T3876] bond0 (unregistering): Released all slaves [ 162.640896][ T3876] bond1 (unregistering): Released all slaves [ 162.649312][T13333] veth1_macvtap: left promiscuous mode [ 162.655021][T13333] macsec0: entered promiscuous mode [ 162.660246][T13333] macsec0: entered allmulticast mode [ 162.667984][T13336] veth1_macvtap: entered promiscuous mode [ 162.673815][T13336] veth1_macvtap: entered allmulticast mode [ 162.736430][T13300] lo speed is unknown, defaulting to 1000 [ 162.750580][T13358] EXT4-fs (loop8): invalid inodes per group: 0 [ 162.750580][T13358] [ 162.769364][ T3876] hsr_slave_0: left promiscuous mode [ 162.786656][ T3876] hsr_slave_1: left promiscuous mode [ 162.797138][ T3876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.836734][T13372] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3614'. [ 162.846207][ T3876] team0 (unregistering): Port device team_slave_1 removed [ 162.859394][ T3876] team0 (unregistering): Port device team_slave_0 removed [ 162.899869][T13300] ip6_vti0 speed is unknown, defaulting to 1000 [ 162.975400][T13380] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #2: comm syz.8.3618: corrupted inode contents [ 163.016529][T13380] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #2: comm syz.8.3618: mark_inode_dirty error [ 163.043818][T13380] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #2: comm syz.8.3618: corrupted inode contents [ 163.071008][ T3876] IPVS: stop unused estimator thread 0... [ 163.078610][T13300] chnl_net:caif_netlink_parms(): no params data found [ 163.087792][T13380] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #2: comm syz.8.3618: mark_inode_dirty error [ 163.105556][T13496] validate_nla: 2 callbacks suppressed [ 163.105587][T13496] netlink: 'syz.4.3624': attribute type 10 has an invalid length. [ 163.127949][T13497] xt_CT: You must specify a L4 protocol and not use inversions on it [ 163.147219][T13496] batadv0: entered allmulticast mode [ 163.158334][T13496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.180120][T13518] netlink: 'syz.4.3624': attribute type 10 has an invalid length. [ 163.189048][T13518] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3624'. [ 163.192385][T13496] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 163.206695][T13518] batadv0: entered promiscuous mode [ 163.218100][T13518] bond0: (slave batadv0): Releasing backup interface [ 163.226460][T13518] bridge0: port 3(batadv0) entered blocking state [ 163.233047][T13518] bridge0: port 3(batadv0) entered disabled state [ 163.246882][T13522] ISOFS: unable to read i-node block [ 163.255819][T13522] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 163.288828][T13300] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.296184][T13300] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.303496][T13300] bridge_slave_0: entered allmulticast mode [ 163.310124][T13300] bridge_slave_0: entered promiscuous mode [ 163.317666][T13300] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.324894][T13300] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.332286][T13300] bridge_slave_1: entered allmulticast mode [ 163.340280][T13300] bridge_slave_1: entered promiscuous mode [ 163.346310][T13563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3629'. [ 163.360671][T13578] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3630'. [ 163.373589][T13300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.384690][T13300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.417079][T13300] team0: Port device team_slave_0 added [ 163.425602][T13616] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 163.436425][T13300] team0: Port device team_slave_1 added [ 163.463656][T13300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.470743][T13300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.496901][T13300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.524166][T13300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.531166][T13300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.557341][ T3972] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 163.563498][T13300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.572565][ T3876] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 163.583897][ T3876] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 163.614322][T13300] hsr_slave_0: entered promiscuous mode [ 163.620837][T13300] hsr_slave_1: entered promiscuous mode [ 163.627280][T13300] debugfs: 'hsr0' already exists in 'hsr' [ 163.633140][T13300] Cannot create hsr debugfs directory [ 163.913700][T13300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 163.932681][T13300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 163.951833][T13300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 163.962716][T13300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 164.056320][T13300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.075585][T13800] journal_path: Non-blockdev passed as './bus' [ 164.082627][T13800] EXT4-fs: error: could not find journal device path [ 164.106840][T13300] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.124175][ T3876] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.131334][ T3876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.159240][ T3876] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.166379][ T3876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.244634][T13830] netlink: 144 bytes leftover after parsing attributes in process `syz.8.3667'. [ 164.258920][T13300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.328013][T13842] sctp: [Deprecated]: syz.1.3661 (pid 13842) Use of int in maxseg socket option. [ 164.328013][T13842] Use struct sctp_assoc_value instead [ 164.349136][T13300] veth0_vlan: entered promiscuous mode [ 164.360993][T13300] veth1_vlan: entered promiscuous mode [ 164.386048][T13300] veth0_macvtap: entered promiscuous mode [ 164.393820][T13300] veth1_macvtap: entered promiscuous mode [ 164.405631][T13300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.417920][T13300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.433432][ T3871] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.452687][ T3871] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.468335][ T3871] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.478203][ T3871] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.522931][T13859] netlink: 'syz.0.3597': attribute type 6 has an invalid length. [ 164.550804][T13864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.563277][T13864] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.580843][T13864] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 164.617041][T13873] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 164.643287][T13875] hub 9-0:1.0: USB hub found [ 164.648132][T13875] hub 9-0:1.0: 8 ports detected [ 164.765080][T13894] EXT4-fs: Ignoring removed bh option [ 164.834017][T13888] lo speed is unknown, defaulting to 1000 [ 164.892288][T13888] ip6_vti0 speed is unknown, defaulting to 1000 [ 164.911947][T13920] EXT4-fs: Ignoring removed i_version option [ 164.918219][T13920] EXT4-fs: Ignoring removed bh option [ 165.054374][T13888] chnl_net:caif_netlink_parms(): no params data found [ 165.125118][T13888] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.132290][T13888] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.139841][T13888] bridge_slave_0: entered allmulticast mode [ 165.146544][T13888] bridge_slave_0: entered promiscuous mode [ 165.154034][T13888] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.161135][T13888] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.169013][T13888] bridge_slave_1: entered allmulticast mode [ 165.175610][T13888] bridge_slave_1: entered promiscuous mode [ 165.289223][T13888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.318916][T13888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.355784][T13888] team0: Port device team_slave_0 added [ 165.363371][T13888] team0: Port device team_slave_1 added [ 165.402096][T13888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.409101][T13888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.435257][T13888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.449614][T14179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3699'. [ 165.456664][T13888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.465574][T13888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.481342][T14181] EXT4-fs: Ignoring removed bh option [ 165.491673][T13888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.520059][T13888] hsr_slave_0: entered promiscuous mode [ 165.527007][T13888] hsr_slave_1: entered promiscuous mode [ 165.533220][T13888] debugfs: 'hsr0' already exists in 'hsr' [ 165.538972][T13888] Cannot create hsr debugfs directory [ 165.589672][T14227] IPv6: Can't replace route, no match found [ 165.636648][T14255] lo: Caught tx_queue_len zero misconfig [ 165.643153][T14255] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 165.691440][T14273] hub 9-0:1.0: USB hub found [ 165.713246][T14273] hub 9-0:1.0: 8 ports detected [ 165.902264][T13888] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 165.911463][T13888] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 165.924454][T13888] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 165.935481][T13888] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 165.977322][T14359] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3727'. [ 165.995835][T13888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.009878][T13888] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.021303][ T3905] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.028411][ T3905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.046767][ T3905] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.053935][ T3905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.123327][T14373] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3733'. [ 166.132473][T14373] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3733'. [ 166.141466][T14373] netlink: 'syz.0.3733': attribute type 6 has an invalid length. [ 166.149264][T14373] netlink: 'syz.0.3733': attribute type 5 has an invalid length. [ 166.157725][T14373] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3733'. [ 166.229447][T13888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.246061][T14388] SELinux: Context system_u:object_r:restorecond_exec_t:s0 is not valid (left unmapped). [ 166.388064][T13888] veth0_vlan: entered promiscuous mode [ 166.397530][T13888] veth1_vlan: entered promiscuous mode [ 166.415128][T13888] veth0_macvtap: entered promiscuous mode [ 166.422900][T13888] veth1_macvtap: entered promiscuous mode [ 166.435240][T13888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.447837][T13888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.459518][ T3880] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.480386][ T3880] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.492410][ T3880] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.503413][ T3880] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.861202][T14454] set_capacity_and_notify: 14 callbacks suppressed [ 166.867808][T14454] loop4: detected capacity change from 0 to 1024 [ 166.883478][T14454] EXT4-fs mount: 16 callbacks suppressed [ 166.883491][T14454] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 166.905642][T14454] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 3: comm syz.4.3762: lblock 3 mapped to illegal pblock 3 (length 3) [ 166.920214][T14454] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 166.932526][T14454] EXT4-fs (loop4): This should not happen!! Data will be lost [ 166.932526][T14454] [ 166.944346][T14454] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3762: lblock 3 mapped to illegal pblock 3 (length 1) [ 166.958909][T14454] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3762: lblock 3 mapped to illegal pblock 3 (length 1) [ 166.973310][T14454] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3762: lblock 3 mapped to illegal pblock 3 (length 1) [ 166.987765][T14454] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3762: lblock 3 mapped to illegal pblock 3 (length 1) [ 167.002265][T14453] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3762: lblock 3 mapped to illegal pblock 3 (length 1) [ 167.016523][T14454] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3762: lblock 3 mapped to illegal pblock 3 (length 1) [ 167.031069][T14453] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3762: lblock 3 mapped to illegal pblock 3 (length 1) [ 167.045434][T14454] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3762: lblock 3 mapped to illegal pblock 3 (length 1) [ 167.060764][T14454] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3762: lblock 3 mapped to illegal pblock 3 (length 1) [ 167.158419][ T29] kauditd_printk_skb: 218 callbacks suppressed [ 167.158435][ T29] audit: type=1400 audit(168.196:4160): avc: denied { read write } for pid=14463 comm="syz.3.3764" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 167.187812][ T29] audit: type=1400 audit(168.196:4161): avc: denied { open } for pid=14463 comm="syz.3.3764" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 167.214040][ T8960] hid_parser_main: 150 callbacks suppressed [ 167.214057][ T8960] hid-generic 0003:0000:0000.000A: unknown main item tag 0x0 [ 167.227620][ T8960] hid-generic 0003:0000:0000.000A: unknown main item tag 0x0 [ 167.235160][ T8960] hid-generic 0003:0000:0000.000A: unknown main item tag 0x0 [ 167.242721][ T8960] hid-generic 0003:0000:0000.000A: unknown main item tag 0x0 [ 167.250152][ T8960] hid-generic 0003:0000:0000.000A: unknown main item tag 0x0 [ 167.257668][ T8960] hid-generic 0003:0000:0000.000A: unknown main item tag 0x0 [ 167.265140][ T8960] hid-generic 0003:0000:0000.000A: unknown main item tag 0x0 [ 167.272744][ T8960] hid-generic 0003:0000:0000.000A: unknown main item tag 0x0 [ 167.280159][ T8960] hid-generic 0003:0000:0000.000A: unknown main item tag 0x0 [ 167.287570][ T8960] hid-generic 0003:0000:0000.000A: unknown main item tag 0x0 [ 167.296440][ T8960] hid-generic 0003:0000:0000.000A: hidraw0: USB HID v0.00 Device [syz1] on syz1 [ 167.344647][T14474] loop0: detected capacity change from 0 to 764 [ 167.353532][ T29] audit: type=1400 audit(168.396:4162): avc: denied { mount } for pid=14472 comm="syz.0.3775" name="/" dev="loop0" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 167.399881][ T29] audit: type=1400 audit(168.436:4163): avc: denied { unmount } for pid=13300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 167.439296][T14482] IPVS: sync thread started: state = MASTER, mcast_ifn = vlan0, syncid = 4, id = 0 [ 167.450497][T14481] IPVS: stopping master sync thread 14482 ... [ 167.515447][ T29] audit: type=1400 audit(168.556:4164): avc: denied { mount } for pid=14489 comm="syz.6.3771" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 167.550666][ T29] audit: type=1400 audit(168.586:4165): avc: denied { read write } for pid=14491 comm="syz.3.3772" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 167.573845][ T29] audit: type=1400 audit(168.586:4166): avc: denied { open } for pid=14491 comm="syz.3.3772" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 167.629167][ T29] audit: type=1400 audit(168.666:4167): avc: denied { relabelfrom } for pid=14501 comm="syz.6.3773" name="NETLINK" dev="sockfs" ino=38360 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 167.661899][ T29] audit: type=1400 audit(168.666:4168): avc: denied { relabelto } for pid=14501 comm="syz.6.3773" name="NETLINK" dev="sockfs" ino=38360 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:tun_tap_device_t:s0" [ 167.745758][T14509] netlink: 'syz.3.3777': attribute type 5 has an invalid length. [ 167.755251][T14510] loop9: detected capacity change from 0 to 7 [ 167.769111][T14510] buffer_io_error: 52 callbacks suppressed [ 167.769126][T14510] Buffer I/O error on dev loop9, logical block 0, async page read [ 167.796433][T14510] Buffer I/O error on dev loop9, logical block 0, async page read [ 167.804383][T14510] loop9: unable to read partition table [ 167.816151][T14510] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 167.816151][T14510] ) failed (rc=-5) [ 167.818407][ T29] audit: type=1400 audit(168.856:4169): avc: denied { read write } for pid=14516 comm="syz.1.3780" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 167.853110][T14520] loop3: detected capacity change from 0 to 1024 [ 167.860490][ T3871] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 167.873494][ T3871] EXT4-fs (loop4): This should not happen!! Data will be lost [ 167.873494][ T3871] [ 167.884514][T10380] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 167.906557][T14520] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.954412][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.963804][T14535] loop6: detected capacity change from 0 to 512 [ 167.977599][T14535] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 167.993095][T14535] EXT4-fs (loop6): 1 truncate cleaned up [ 168.009553][T14535] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.149741][T14563] loop4: detected capacity change from 0 to 1024 [ 168.183488][T14563] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.237195][T10380] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.264989][T13888] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.309034][T14581] loop6: detected capacity change from 0 to 512 [ 168.323228][T14581] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 168.331303][T14581] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 168.399329][T14581] EXT4-fs (loop6): orphan cleanup on readonly fs [ 168.435701][T14581] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #13: comm syz.6.3795: iget: bad i_size value: 12154761577498 [ 168.485231][T14581] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.3795: couldn't read orphan inode 13 (err -117) [ 168.514066][T14581] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 168.528252][T14607] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14607 comm=syz.0.3805 [ 168.541097][T14607] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14607 comm=syz.0.3805 [ 168.581957][ T8282] delete_channel: no stack [ 168.586653][T14581] EXT4-fs (loop6): shut down requested (1) [ 168.598758][T14581] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.3795: dx entry: limit 65535 != root limit 120 [ 168.610934][T14581] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.3795: Corrupt directory, running e2fsck is recommended [ 168.637474][T13888] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.822171][T14650] __nla_validate_parse: 3 callbacks suppressed [ 168.822187][T14650] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3824'. [ 168.962262][T14669] Invalid ELF header magic: != ELF [ 168.978848][T14667] loop4: detected capacity change from 0 to 8192 [ 169.024070][T14680] loop6: detected capacity change from 0 to 256 [ 169.032498][T14682] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3837'. [ 169.087920][T14693] loop6: detected capacity change from 0 to 512 [ 169.103753][T14693] EXT4-fs: dax option not supported [ 169.121150][T14699] EXT4-fs: inline encryption not supported [ 169.127952][T14699] EXT4-fs: Ignoring removed nobh option [ 169.134282][T14699] EXT4-fs: Ignoring removed bh option [ 169.147146][T14699] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.195494][T14715] EXT4-fs: Ignoring removed mblk_io_submit option [ 169.204813][T14715] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 169.214702][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.221790][T14715] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 169.236268][T14715] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.3848: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 169.255369][T14715] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3848: couldn't read orphan inode 11 (err -117) [ 169.268631][T14715] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.283190][T14715] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.3848: Invalid block bitmap block 0 in block_group 0 [ 169.297262][T14715] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.3848: Failed to acquire dquot type 0 [ 169.316043][T14717] EXT4-fs: Ignoring removed mblk_io_submit option [ 169.327319][T14717] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #11: block 2: comm syz.6.3850: lblock 0 mapped to illegal pblock 2 (length 1) [ 169.341782][T14717] ------------[ cut here ]------------ [ 169.347346][T14717] EA inode 11 i_nlink=2 [ 169.347371][T14717] WARNING: fs/ext4/xattr.c:1058 at 0x0, CPU#1: syz.6.3850/14717 [ 169.359849][T14717] Modules linked in: [ 169.363796][T14717] CPU: 1 UID: 0 PID: 14717 Comm: syz.6.3850 Not tainted syzkaller #0 PREEMPT(voluntary) [ 169.373642][T14717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 169.384548][T14717] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320 [ 169.391177][T14717] Code: 61 d2 9c ff 4c 8d 2d da bf 20 05 49 8d 7e 40 e8 a1 64 b8 ff 49 8b 6e 40 4c 89 e7 e8 b5 5f b8 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 0c ef ba 03 66 66 66 2e 0f 1f 84 [ 169.411089][T14717] RSP: 0018:ffffc9000235f778 EFLAGS: 00010246 [ 169.417917][T14717] RAX: ffff888103b90a90 RBX: ffff88811ba74ee0 RCX: ffffffff81bb4c1b [ 169.425932][T14717] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86dc0be0 [ 169.433947][T14717] RBP: 000000000000000b R08: 000188811ba74e93 R09: 0000000000000000 [ 169.442620][T14717] R10: ffffc9000235f6a8 R11: 0001c9000235f6a8 R12: ffff88811ba74e90 [ 169.450618][T14717] R13: ffffffff86dc0be0 R14: ffff88811ba74e48 R15: 0000000000000001 [ 169.458628][T14717] FS: 00007fcc0ffc76c0(0000) GS:ffff8882aeec3000(0000) knlGS:0000000000000000 [ 169.467624][T14717] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 169.475349][T14717] CR2: 00007fcc11542a60 CR3: 000000011b7b6000 CR4: 00000000003506f0 [ 169.483378][T14717] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 169.491479][T14717] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 169.499476][T14717] Call Trace: [ 169.503461][T14717] [ 169.506413][T14717] ext4_xattr_inode_dec_ref_all+0x57c/0x870 [ 169.512419][T14717] ? errseq_check+0x2c/0x50 [ 169.517093][T14717] ext4_xattr_delete_inode+0x6b7/0x790 [ 169.522635][T14717] ? ext4_truncate+0x92b/0xae0 [ 169.527491][T14717] ext4_evict_inode+0xa20/0xd40 [ 169.533157][T14717] ? __pfx_ext4_evict_inode+0x10/0x10 [ 169.538596][T14717] evict+0x2af/0x510 [ 169.542563][T14717] ? __dquot_initialize+0x146/0x7c0 [ 169.547797][T14717] iput+0x4bd/0x650 [ 169.551973][T14717] ext4_process_orphan+0x1a9/0x1c0 [ 169.557246][T14717] ext4_orphan_cleanup+0x6a8/0xa00 [ 169.563119][T14717] ext4_fill_super+0x3411/0x37a0 [ 169.568134][T14717] ? set_blocksize+0x1a8/0x310 [ 169.572964][T14717] ? sb_set_blocksize+0xfc/0x170 [ 169.577939][T14717] ? setup_bdev_super+0x30e/0x370 [ 169.583011][T14717] ? __pfx_ext4_fill_super+0x10/0x10 [ 169.588388][T14717] get_tree_bdev_flags+0x291/0x300 [ 169.594320][T14717] ? __pfx_ext4_fill_super+0x10/0x10 [ 169.599695][T14717] get_tree_bdev+0x1f/0x30 [ 169.604203][T14717] ext4_get_tree+0x1c/0x30 [ 169.608714][T14717] vfs_get_tree+0x57/0x1d0 [ 169.613239][T14717] do_new_mount+0x24d/0x6a0 [ 169.617828][T14717] path_mount+0x4ab/0xb80 [ 169.622865][T14717] ? user_path_at+0xbf/0x130 [ 169.627607][T14717] __se_sys_mount+0x28c/0x2e0 [ 169.632816][T14717] __x64_sys_mount+0x67/0x80 [ 169.637490][T14717] x64_sys_call+0x2cca/0x3000 [ 169.642381][T14717] do_syscall_64+0xd8/0x2a0 [ 169.647019][T14717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.653611][T14717] RIP: 0033:0x7fcc11560eea [ 169.658112][T14717] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.663171][T14730] SELinux: failed to load policy [ 169.677831][T14717] RSP: 002b:00007fcc0ffc6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 169.691969][T14717] RAX: ffffffffffffffda RBX: 00007fcc0ffc6ef0 RCX: 00007fcc11560eea [ 169.700026][T14717] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fcc0ffc6eb0 [ 169.708044][T14717] RBP: 0000200000000180 R08: 00007fcc0ffc6ef0 R09: 0000000000800718 [ 169.716805][T14717] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 169.724913][T14717] R13: 00007fcc0ffc6eb0 R14: 000000000000047a R15: 0000200000000200 [ 169.732963][T14717] [ 169.736095][T14717] ---[ end trace 0000000000000000 ]--- [ 169.743001][T14717] EXT4-fs (loop6): 1 orphan inode deleted [ 169.743192][T10380] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.749356][T14717] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.800003][T13888] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.004182][T14771] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.050853][T10380] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.188641][T14800] ALSA: seq fatal error: cannot create timer (-19) [ 170.225456][T14809] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3877'. [ 170.238751][T14809] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3877'. [ 170.248189][T14809] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3877'. [ 170.258128][T14809] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3877'. [ 170.419481][T14835] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 170.432658][T14835] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.3890: inode has both inline data and extents flags [ 170.446301][T14835] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.3890: couldn't read orphan inode 15 (err -117) [ 170.459721][T14835] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.485694][T13888] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.496761][T13888] ================================================================== [ 170.504887][T13888] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 170.512473][T13888] [ 170.514809][T13888] read-write to 0xffff888237c26468 of 1 bytes by task 14840 on cpu 0: [ 170.522976][T13888] folio_add_lru+0xa5/0x1f0 [ 170.527507][T13888] folio_add_lru_vma+0x49/0x70 [ 170.532287][T13888] do_wp_page+0x1550/0x2510 [ 170.536813][T13888] handle_mm_fault+0x7b0/0x2c60 [ 170.541683][T13888] do_user_addr_fault+0x630/0x1080 [ 170.546897][T13888] exc_page_fault+0x62/0xa0 [ 170.551428][T13888] asm_exc_page_fault+0x26/0x30 [ 170.556294][T13888] [ 170.558623][T13888] read to 0xffff888237c26468 of 1 bytes by task 13888 on cpu 1: [ 170.566261][T13888] __lru_add_drain_all+0x17e/0x450 [ 170.571401][T13888] lru_add_drain_all+0x10/0x20 [ 170.576180][T13888] invalidate_bdev+0x47/0x70 [ 170.580779][T13888] ext4_put_super+0x624/0x7d0 [ 170.585469][T13888] generic_shutdown_super+0xe6/0x210 [ 170.590772][T13888] kill_block_super+0x2a/0x70 [ 170.595457][T13888] ext4_kill_sb+0x42/0x80 [ 170.599793][T13888] deactivate_locked_super+0x75/0x1c0 [ 170.605188][T13888] deactivate_super+0x97/0xa0 [ 170.609881][T13888] cleanup_mnt+0x2a9/0x320 [ 170.614313][T13888] __cleanup_mnt+0x19/0x20 [ 170.618744][T13888] task_work_run+0x131/0x1a0 [ 170.623339][T13888] exit_to_user_mode_loop+0x1fe/0x740 [ 170.628724][T13888] do_syscall_64+0x202/0x2a0 [ 170.633336][T13888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.639248][T13888] [ 170.641575][T13888] value changed: 0x07 -> 0x08 [ 170.646256][T13888] [ 170.648581][T13888] Reported by Kernel Concurrency Sanitizer on: [ 170.654738][T13888] CPU: 1 UID: 0 PID: 13888 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 170.666290][T13888] Tainted: [W]=WARN [ 170.670094][T13888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 170.680166][T13888] ================================================================== [ 170.695905][T14843] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3894'.