last executing test programs: 21.610169391s ago: executing program 2 (id=66): r0 = fsopen(&(0x7f00000005c0)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x804071, 0x0, 0x0, 0x0, &(0x7f0000000000)) 21.578298724s ago: executing program 2 (id=67): open(0x0, 0x41c1c3, 0x11e) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000180)='./mnt\x00', 0x0, &(0x7f00000001c0)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}, {@nomblk_io_submit}, {@commit}]}, 0x1, 0x241, &(0x7f0000000540)="$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") r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x80) getdents64(r0, 0x0, 0x0) readv(r0, 0x0, 0x0) symlink(&(0x7f000000a900)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 20.937633471s ago: executing program 2 (id=74): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) 20.700065712s ago: executing program 2 (id=79): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300), 0x1, 0x444, &(0x7f0000000d80)="$eJzs281vVFUbAPDnzkyBwgvtS/CDglpFY6PS0oLIwo1GExeamOgCl7UtpDJQQ2sipNFqDC4NiXvj0sQ/wLjSjVFXJm51b0iI6QZ0NebO3NtOpzNDW6YddH6/5MI5957hnGfuPTPngwmgZw2nfyQRfRHxW0QM1LJrCwzX/rq9vDj11/LiVBKVyht/JtVyt5YXp/Ki+ev25ZlSROGTJI40qXf+ytULk+XyzOUsP7Zw8d2x+StXj89enDw/c37m0sSZM6dOjj93euLZjsSZxnVr6IO5o4dfeev6a1Nnr7/909dJHn9DHB0y3O7iE5VKh6vrrv116aTUxYawKcVaN836/0AUY/XmDcTLH3e1ccC2qlQqlftbX16qAP9hSXS7BUB35F/06fw3P3Zo6HFPuPlCbQKUxn07O2pXSlHIyvQ1zG87aTgizi79/UV6RL4O8c2ebaoNACDiu3T880xt3FGK+vFfIerXhQ5keyiDEfH/iDgYEacj4lBE3BdRLftARDy4yfobN0nWjz8LN7YU2Aal47/ns72tteO/fPQXg8Ust78af19ybrY8cyJ7T0aib3eaH29Tx/cv/fpZq2v147/0SOvPx4JZO26Udq99zfTkwuTdxFzv5kcRQ6Vm8ScrOwFJRByOiKEt1jH71FdHW127c/xtdGCfqfJlxJO1+78UDfHnkvb7k2N7ojxzYix/Ktb7+Zdrr7eq/67i74D0/u9t+vyvxD+Y1O/Xzm++jmu/f9pyTtkq/uMrJZo//7uSN9ece39yYeHyeMSu5NVao+vPTzSUm1gtn8Y/cqx5/z8Yq+/EkYhIH+KHDkQ8HBGPZG1/NCIei4hjbeL/8cXH39ls/G3+uY5K459uev+LeZGG+7+a2BWNZ5onihd++HZNpYObiT+9/6eqqZHszEY+/zbSrq09zQAAAPDvU4iI/0VSGF1JFwqjo7X/w38o9hbKc/MLT5+be+/SdHqtuv5ZyFe6BurWQ8ezaX2en2jIn8zWjT8v9lfzo1Nz5eluBw89bl+L/p/6o9jt1gHbzu+1oHfp/9C79H/oXfo/9K4m/b+/G+0Adl6z7/8Pu9AOYOc19H/bftBDzP+hd+n/0Lv0f+hJ8/1x5x/JS0isS0ThnmiGxDYluv3JBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bn/BAAA//9u9+Xo") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file1\x00', 0x42, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) 19.796114433s ago: executing program 2 (id=87): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x1, 0xa000, 0x0, 0x7, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) 19.15343267s ago: executing program 2 (id=93): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000000000000850000002a000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) 19.073995107s ago: executing program 32 (id=93): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000000000000850000002a000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) 11.167507959s ago: executing program 5 (id=197): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4170e157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0], 0x3, 0x260, &(0x7f0000000780)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 11.041834s ago: executing program 5 (id=201): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) ioprio_get$pid(0x2, 0x0) 10.951233938s ago: executing program 5 (id=202): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@enum64={0x4, 0x2, 0x0, 0x13, 0x1, 0x1, [{0x3, 0x1, 0x7fffffff}, {0x4, 0x5, 0x101}]}]}, {0x0, [0x61, 0x5f, 0x5f, 0x2e]}}, &(0x7f0000000f40)=""/4089, 0x42, 0xff9, 0x1}, 0x28) 10.911662051s ago: executing program 5 (id=203): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x414, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRES16, @ANYRESOCT, @ANYRES8, @ANYBLOB="aa"], 0x1, 0x2ca, &(0x7f0000000b80)="$eJzs3FFLU3EYx/EnZ25OdAtCKKge6iZvhq4XUCMUokFlTqqL4JhnNXba5JxhTCJ3E932OqRL74LqDXgT3XQb3UkgdZEX0Yl2dvRMj3OWs5nfD8h5tv//tz0iG8+E/VfvvHxczDupvFGRnphKj0hN1kWSv6uGY41rT73uk6CajAx8+3jm9t171zPZbHRSdSIzdSmtqkPn3jx5+ur8u8rA9PLQ66isJO+vrqU/rwyvnFr9OfWo4GjB0VK5oobOlMsVY8YydbbgFFOqNy3TcEwtlBzTblrPW+W5uaoapdnB+JxtOo4apaoWzapWylqxq2o8NAolTaVSOhiXo623jT25pclJIxO+1v9pvztCx/WH3WnbmZqI9G1fzC0dRFMAAKC7tJ7/vVm/ef6Xtc10dtq7+vP/+P7M/yLM/x1Sa7rVav7H/8K2M0a88fptxvwPAAAAAAAAAAAAAAAAAAAAAMBhsO66Cdd1E/7V/4mKSExE/Nv/uk90xm5//6/hscsH3Sc6I/DFvZiI9WI+N5/zrt56Ji8FscSUUUnIj/r7QYNXT1zLjo9q3XfXdRcb+cX5XESift6XDMufPTHm5VXeWoH8cYkHnz8tCTkZ/vzp0HzfrYsXAvmUJOT9AymLJbP197XN/LMx1as3slvy/fV9Owo9aQEAAAAAgO6U0g3J5s+/EW+9viEm29e9/B7+P7Dl83WvnG7niEoAAAAAAPDXnOpC0bAs0w4plkVkh6V6ERWRFvGjWkSkK9rYUlwRkS5oo2UxuH8dxkTEu0f/ID78ZSPeVsptY0/vLq+mjhYx2XMq9MBgAAAAAIfY5tC/h9CH5x3sCAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAo6flMWAjA96m6kLR39+0J/hALR4nsCtycL8ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0H1+BQAA//8wyhaW") mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) 10.531200215s ago: executing program 5 (id=214): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffff", @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@mpls_delroute={0x1c, 0x19, 0x1, 0x70bd2c, 0x0, {0x1c, 0x14, 0x14, 0x0, 0x0, 0x2, 0xfe, 0x1}}, 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000"], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='mmap_lock_acquire_returned\x00', r3, 0x0, 0x8000000000000001}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) fdatasync(r4) ftruncate(r4, 0x5) 10.298454305s ago: executing program 5 (id=226): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10.268912238s ago: executing program 33 (id=226): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.226166335s ago: executing program 1 (id=456): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x24, r1, 0x1, 0x800000, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x802}, 0x0) 4.072124208s ago: executing program 1 (id=459): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x18, 0x1, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffa}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x24044000) 4.035516241s ago: executing program 1 (id=461): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0xd}]}) bpf$ITER_CREATE(0xb, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.194145596s ago: executing program 1 (id=510): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x103341) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000140)={0x80, 0x7, 0x302, 0xb92, 0x0, 0x4, 0x0}) 2.954101008s ago: executing program 1 (id=512): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x8000, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x5, 0x48000000, 0x0, 0x0, 0x0}) 2.953618278s ago: executing program 1 (id=516): syz_open_procfs(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x8) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x4}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x100000000000000) 1.296114015s ago: executing program 4 (id=575): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}], 0x1, 0x9880) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000140)="390000001300034700bb5be1c3e4feff060000000100000045000000250000001900040000000006040000000000f9313200000000c75a872a", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x978b, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) close_range(r6, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) 1.12411417s ago: executing program 4 (id=583): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000300000000000000000000000000000000000000000000000105"], 0x0, 0x42}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.12396854s ago: executing program 4 (id=584): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 1.12388523s ago: executing program 3 (id=585): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5) 1.114456181s ago: executing program 3 (id=587): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x453, 0x4, 0x70bd2d, 0x25dfdbfe, 'P'}, 0x14}, 0x1, 0x0, 0x0, 0x20000094}, 0x40880) 1.060147025s ago: executing program 3 (id=589): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000030000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) connect$inet(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) 436.637511ms ago: executing program 6 (id=594): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="14"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 304.098903ms ago: executing program 6 (id=595): prctl$PR_SET_NAME(0xf, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b431f6c26236925000400fe7f0080bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x80) 283.816595ms ago: executing program 4 (id=597): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) lchown(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xee01, 0xffffffffffffffff) 240.294399ms ago: executing program 0 (id=598): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) fchdir(0xffffffffffffffff) 188.005793ms ago: executing program 6 (id=599): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) inotify_init() 187.839263ms ago: executing program 3 (id=600): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r2, 0x0, 0x0}, 0x20) 162.063246ms ago: executing program 0 (id=601): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) 150.367867ms ago: executing program 0 (id=602): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0xfffffffe}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x804) 80.619042ms ago: executing program 3 (id=603): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fd"], 0xfc}}, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x5c, 0x12, 0x0, 0x70bd26, 0x25dfdbfc, {0x8, 0x6, 0xa, 0x1, {0x4e24, 0x4e23, [0xfffffff8, 0x3, 0x6], [0x1ff, 0x9, 0x8, 0x9], 0x0, [0x7]}, 0x4, 0xb}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "f102dcf29effae15cd"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) 80.526133ms ago: executing program 0 (id=604): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000020000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev\x00') close_range(r1, r1, 0x0) 80.438953ms ago: executing program 6 (id=605): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x4, "23900000aa82dc1ecf00"}) 80.383442ms ago: executing program 4 (id=606): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r1}, 0x10) iopl(0x3) 79.727003ms ago: executing program 0 (id=607): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) eventfd(0x0) 78.774923ms ago: executing program 6 (id=608): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB], 0x24, 0x1) 77.846653ms ago: executing program 3 (id=609): io_setup(0x8f0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$selinux_access(r1, &(0x7f0000001a80)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6870647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) 62.817694ms ago: executing program 4 (id=610): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffdfe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0'}, 0xb) close_range(r0, r0, 0x0) 60.839634ms ago: executing program 0 (id=611): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7111}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x7, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffff00, 0x6, 0xc31, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000014}, 0x20000000) 0s ago: executing program 6 (id=612): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x1}, 0x18) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x1b, r2, 0x1, 0x0, 0x6, @local}, 0x14) bind$packet(r1, &(0x7f0000000000)={0x11, 0x7, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.247' (ED25519) to the list of known hosts. [ 19.240913][ T24] audit: type=1400 audit(1767482774.970:64): avc: denied { mounton } for pid=267 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.241965][ T267] cgroup: Unknown subsys name 'net' [ 19.245163][ T24] audit: type=1400 audit(1767482774.970:65): avc: denied { mount } for pid=267 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.250395][ T24] audit: type=1400 audit(1767482774.980:66): avc: denied { unmount } for pid=267 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.250545][ T267] cgroup: Unknown subsys name 'devices' [ 19.397588][ T267] cgroup: Unknown subsys name 'hugetlb' [ 19.403410][ T267] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 19.570212][ T24] audit: type=1400 audit(1767482775.300:67): avc: denied { setattr } for pid=267 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.591924][ T269] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 19.602048][ T24] audit: type=1400 audit(1767482775.300:68): avc: denied { mounton } for pid=267 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 19.626914][ T24] audit: type=1400 audit(1767482775.300:69): avc: denied { mount } for pid=267 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 19.650246][ T267] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 19.650309][ T24] audit: type=1400 audit(1767482775.330:70): avc: denied { relabelto } for pid=269 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.684586][ T24] audit: type=1400 audit(1767482775.330:71): avc: denied { write } for pid=269 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.710544][ T24] audit: type=1400 audit(1767482775.370:72): avc: denied { read } for pid=267 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.736458][ T24] audit: type=1400 audit(1767482775.370:73): avc: denied { open } for pid=267 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.375491][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.383141][ T275] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.390938][ T275] device bridge_slave_0 entered promiscuous mode [ 21.416682][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.424032][ T275] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.432060][ T275] device bridge_slave_1 entered promiscuous mode [ 21.494426][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.501600][ T278] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.509110][ T278] device bridge_slave_0 entered promiscuous mode [ 21.516836][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.523854][ T278] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.531241][ T278] device bridge_slave_1 entered promiscuous mode [ 21.595868][ T276] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.603051][ T276] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.610522][ T276] device bridge_slave_0 entered promiscuous mode [ 21.618245][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.625262][ T276] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.632600][ T276] device bridge_slave_1 entered promiscuous mode [ 21.660078][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.667884][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.675238][ T281] device bridge_slave_0 entered promiscuous mode [ 21.682359][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.689415][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.696791][ T281] device bridge_slave_1 entered promiscuous mode [ 21.709147][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.716189][ T275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.723423][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.730452][ T275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.797339][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.804448][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.811929][ T282] device bridge_slave_0 entered promiscuous mode [ 21.819007][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.826087][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.833461][ T282] device bridge_slave_1 entered promiscuous mode [ 21.845154][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.852212][ T276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.859552][ T276] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.866576][ T276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.890362][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.897418][ T278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.904657][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.911869][ T278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.958771][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.966699][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.973921][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.981124][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.988433][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.995601][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.003422][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.010954][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.030196][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.037838][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.046120][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.053467][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.062003][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.070419][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.077780][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.094188][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.109729][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.118303][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.125416][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.133158][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.141836][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.148883][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.182143][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.190055][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.198698][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.207002][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.215107][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.222448][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.230105][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.238062][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.246256][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.253259][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.260583][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.268676][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.276822][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.302733][ T278] device veth0_vlan entered promiscuous mode [ 22.309934][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.317769][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.327612][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.335479][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.343177][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.351658][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.360079][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.367113][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.374594][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.383001][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.390037][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.397475][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.405568][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.412702][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.420703][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.429110][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.436133][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.443713][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.451898][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.459920][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.468235][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.476091][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.484141][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.492225][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.507814][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.516259][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.528673][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.536968][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.547124][ T275] device veth0_vlan entered promiscuous mode [ 22.558935][ T278] device veth1_macvtap entered promiscuous mode [ 22.571614][ T282] device veth0_vlan entered promiscuous mode [ 22.578083][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.585713][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.593980][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.602105][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.610663][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.619309][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.627858][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.636350][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.644238][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.652267][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.660568][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.669846][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.677457][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.684801][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.692269][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.701618][ T276] device veth0_vlan entered promiscuous mode [ 22.712393][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.720643][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.728658][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.736970][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.745077][ T275] device veth1_macvtap entered promiscuous mode [ 22.755642][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.763316][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.771872][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.781035][ T282] device veth1_macvtap entered promiscuous mode [ 22.792054][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.799839][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.808116][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.816588][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.824732][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.836925][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.845134][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.853814][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.862311][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.871006][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.879263][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.893048][ T276] device veth1_macvtap entered promiscuous mode [ 22.902320][ T281] device veth0_vlan entered promiscuous mode [ 22.909817][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.917491][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.925765][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.934876][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.943384][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.951810][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.960100][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.968779][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.976963][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.984887][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.992346][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.016280][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.024691][ T282] request_module fs-gadgetfs succeeded, but still no fs? [ 23.024841][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.041041][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.049562][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.058133][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.066439][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.079644][ T281] device veth1_macvtap entered promiscuous mode [ 23.088872][ T282] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 23.126317][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.144228][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.157246][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.165685][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.174247][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.199923][ T312] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'. [ 23.209586][ T315] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.229985][ T312] device vlan2 entered promiscuous mode [ 23.235562][ T312] device gretap0 entered promiscuous mode [ 23.316203][ T317] EXT4-fs (loop0): Ignoring removed bh option [ 23.348644][ T317] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 23.369059][ T317] EXT4-fs (loop0): 1 truncate cleaned up [ 23.374731][ T317] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue [ 23.544894][ T333] process 'syz.4.9' launched '/dev/fd/14' with NULL argv: empty string added [ 23.764600][ T329] F2FS-fs (loop1): invalid crc value [ 23.792257][ T329] F2FS-fs (loop1): Found nat_bits in checkpoint [ 23.920926][ T329] F2FS-fs (loop1): Start checkpoint disabled! [ 23.934371][ T329] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 23.996435][ T331] attempt to access beyond end of device [ 23.996435][ T331] loop1: rw=2049, want=40976, limit=40427 [ 24.400929][ T24] kauditd_printk_skb: 70 callbacks suppressed [ 24.401007][ T24] audit: type=1400 audit(1767482780.080:144): avc: denied { create } for pid=348 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 24.448781][ T363] 9pnet: Insufficient options for proto=fd [ 24.484402][ T24] audit: type=1400 audit(1767482780.080:145): avc: denied { bind } for pid=348 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 24.517500][ T358] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000005,errors=remount-ro, [ 24.548534][ T24] audit: type=1400 audit(1767482780.090:146): avc: denied { setopt } for pid=348 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 24.614782][ T24] audit: type=1400 audit(1767482780.100:147): avc: denied { write } for pid=348 comm="syz.1.11" path="socket:[15850]" dev="sockfs" ino=15850 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 24.658954][ T24] audit: type=1400 audit(1767482780.110:148): avc: denied { create } for pid=348 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 24.679158][ T24] audit: type=1400 audit(1767482780.110:149): avc: denied { bind } for pid=348 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 24.698114][ T24] audit: type=1400 audit(1767482780.110:150): avc: denied { setopt } for pid=348 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 24.717977][ T24] audit: type=1400 audit(1767482780.120:151): avc: denied { unlink } for pid=348 comm="syz.1.11" name="#1" dev="tmpfs" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 24.764166][ T24] audit: type=1400 audit(1767482780.260:152): avc: denied { create } for pid=366 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 24.785768][ T372] netlink: 172 bytes leftover after parsing attributes in process `syz.2.15'. [ 24.795256][ T24] audit: type=1400 audit(1767482780.260:153): avc: denied { write } for pid=366 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 24.908345][ T371] F2FS-fs (loop3): fault_injection options not supported [ 24.916168][ T371] F2FS-fs (loop3): fault_type options not supported [ 24.924234][ T371] F2FS-fs (loop3): invalid crc value [ 24.931102][ T371] F2FS-fs (loop3): Found nat_bits in checkpoint [ 24.952607][ T371] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 25.050594][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 25.061988][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 25.072261][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 25.082066][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 25.090469][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 25.099241][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 25.159616][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 25.168650][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 25.337096][ T405] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 25.346822][ T405] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 25.397705][ T406] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,auto_da_alloc=0x0000000000000400,resuid=0x0000000000000000,usrquota,discard,max_dir_size_kb=0x0000000000000007,journal_ioprio=0x0000000000000004,delalloc,nolazytime,nodelalloc,inode_readahead_blks=0x00000000000400,errors=continue [ 25.606679][ T402] ====================================================== [ 25.606679][ T402] WARNING: the mand mount option is being deprecated and [ 25.606679][ T402] will be removed in v5.15! [ 25.606679][ T402] ====================================================== [ 25.700459][ T402] F2FS-fs (loop0): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 25.720244][ T402] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 25.728456][ T421] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,data_err=ignore,,errors=continue [ 25.729100][ T402] F2FS-fs (loop0): fault_type options not supported [ 25.747558][ T402] F2FS-fs (loop0): fault_injection options not supported [ 25.756952][ T402] F2FS-fs (loop0): invalid crc value [ 25.763656][ T402] F2FS-fs (loop0): Found nat_bits in checkpoint [ 25.770910][ T421] EXT4-fs (loop1): re-mounted. Opts: discard,data_err=ignore, [ 25.790522][ T402] F2FS-fs (loop0): Start checkpoint disabled! [ 25.797576][ T402] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 25.804751][ T402] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 25.872038][ T432] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.879271][ T432] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.907020][ T432] device vlan2 left promiscuous mode [ 25.912331][ T432] device gretap0 left promiscuous mode [ 26.305539][ T441] exfat: Deprecated parameter 'namecase' [ 26.314677][ T441] exfat: Deprecated parameter 'utf8' [ 26.320576][ T441] exfat: Unknown parameter 'sys_tz' [ 26.331720][ T112] attempt to access beyond end of device [ 26.331720][ T112] loop0: rw=2049, want=40976, limit=40427 [ 26.489856][ T447] erofs: (device loop4): mounted with root inode @ nid 36. [ 26.495539][ T448] exfat: Deprecated parameter 'utf8' [ 26.503456][ T447] erofs: (device loop4): erofs_read_inode: bogus i_mode (4355) @ nid 46 [ 26.508078][ T448] exfat: Deprecated parameter 'utf8' [ 26.517494][ T448] exfat: Deprecated parameter 'utf8' [ 26.538375][ T448] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 26.554535][ T453] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,init_itable,,errors=continue [ 26.565586][ T453] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 26.695586][ T458] FAT-fs (loop1): Directory bread(block 64) failed [ 26.702352][ T458] FAT-fs (loop1): Directory bread(block 65) failed [ 26.708975][ T458] FAT-fs (loop1): Directory bread(block 66) failed [ 26.715703][ T458] FAT-fs (loop1): Directory bread(block 67) failed [ 26.722695][ T458] FAT-fs (loop1): Directory bread(block 68) failed [ 26.729674][ T458] FAT-fs (loop1): Directory bread(block 69) failed [ 26.736856][ T458] FAT-fs (loop1): Directory bread(block 70) failed [ 26.743590][ T458] FAT-fs (loop1): Directory bread(block 71) failed [ 26.750463][ T458] FAT-fs (loop1): Directory bread(block 72) failed [ 26.757110][ T458] FAT-fs (loop1): Directory bread(block 73) failed [ 26.896294][ T465] EXT4-fs (loop3): Ignoring removed bh option [ 26.937046][ T465] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue [ 26.967464][ T472] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000010,grpquota,,errors=continue [ 26.981683][ T472] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 27.045085][ T472] EXT4-fs (loop4): shut down requested (1) [ 27.130048][ T479] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 27.147263][ T479] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,resgid=0x0000000000000000,mblk_io_submit,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,errors=remount-ro,grpid,jqfmt=vfsv0, [ 27.233028][ T475] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 27.240712][ T479] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2816: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 27.431665][ T485] EXT4-fs (loop1): Ignoring removed nobh option [ 27.438074][ T490] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 27.451046][ T485] EXT4-fs (loop1): Test dummy encryption mode enabled [ 27.460135][ T485] EXT4-fs error (device loop1): __ext4_iget:5022: inode #11: block 1: comm syz.1.50: invalid block [ 27.463123][ T490] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,bsdgroups,nojournal_checksum,errors=remount-ro,grpquota,data_err=ignore,user_xattr,nombcache,abort, [ 27.471234][ T485] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.50: couldn't read orphan inode 11 (err -117) [ 27.503834][ T485] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,nobh,max_dir_size_kb=0x0000000000000004,bsddf,nodiscard,sysvgroups,noauto_da_alloc,noauto_da_alloc,test_dummy_encryption,,errors=continue [ 27.531004][ T490] EXT4-fs (loop3): shut down requested (1) [ 27.794027][ T505] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 28.039993][ T512] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 28.083396][ T510] F2FS-fs (loop0): fault_injection options not supported [ 28.091270][ T510] F2FS-fs (loop0): invalid crc value [ 28.098158][ T510] F2FS-fs (loop0): Found nat_bits in checkpoint [ 28.122132][ T510] F2FS-fs (loop0): Start checkpoint disabled! [ 28.128851][ T510] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 28.160698][ T521] EXT4-fs (loop1): Ignoring removed bh option [ 28.178449][ T521] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,auto_da_alloc,bh,,errors=continue [ 28.189905][ T521] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 28.203205][ T510] F2FS-fs (loop0): switch extent_cache option is not allowed [ 28.239142][ T520] FAT-fs (loop2): Invalid FSINFO signature: 0x00000001, 0x61417272 (sector = 1) [ 28.303082][ T528] FAT-fs (loop4): Directory bread(block 64) failed [ 28.309715][ T528] FAT-fs (loop4): Directory bread(block 65) failed [ 28.316382][ T528] FAT-fs (loop4): Directory bread(block 66) failed [ 28.323056][ T528] FAT-fs (loop4): Directory bread(block 67) failed [ 28.329737][ T528] FAT-fs (loop4): Directory bread(block 68) failed [ 28.336769][ T528] FAT-fs (loop4): Directory bread(block 69) failed [ 28.343419][ T528] FAT-fs (loop4): Directory bread(block 70) failed [ 28.350098][ T528] FAT-fs (loop4): Directory bread(block 71) failed [ 28.356779][ T528] FAT-fs (loop4): Directory bread(block 72) failed [ 28.377747][ T528] FAT-fs (loop4): Directory bread(block 73) failed [ 28.441744][ T533] F2FS-fs (loop3): fault_injection options not supported [ 28.449505][ T533] F2FS-fs (loop3): invalid crc value [ 28.456109][ T533] F2FS-fs (loop3): Found nat_bits in checkpoint [ 28.476306][ T533] F2FS-fs (loop3): Start checkpoint disabled! [ 28.484696][ T533] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 28.572741][ T535] EXT4-fs (loop1): Ignoring removed orlov option [ 28.587446][ T535] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier=0x0000000000000000,resuid=0x0000000000000000,errors=remount-ro,orlov, [ 28.608930][ T296] attempt to access beyond end of device [ 28.608930][ T296] loop3: rw=2049, want=40984, limit=40427 [ 28.636503][ T547] EXT4-fs (loop2): Test dummy encryption mode enabled [ 28.643523][ T547] EXT4-fs (loop2): Test dummy encryption mode enabled [ 28.647222][ T535] EXT4-fs error (device loop1): ext4_find_extent:928: inode #2: comm syz.1.65: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 28.650535][ T547] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 28.679060][ T535] EXT4-fs (loop1): Remounting filesystem read-only [ 28.687372][ T535] EXT4-fs error (device loop1): ext4_find_extent:928: inode #2: comm syz.1.65: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 28.705033][ T547] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,commit=0x0000000000000000,,errors=continue [ 28.722296][ T547] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 28.732846][ T552] exfat: Deprecated parameter 'namecase' [ 28.738905][ T552] exfat: Unknown parameter 'keep_last_dots' [ 29.598435][ T581] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 29.682692][ T581] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 29.692072][ T24] kauditd_printk_skb: 73 callbacks suppressed [ 29.692084][ T24] audit: type=1400 audit(1767482785.420:227): avc: denied { read write } for pid=593 comm="syz.3.83" name="vhost-vsock" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 29.728545][ T24] audit: type=1400 audit(1767482785.460:228): avc: denied { open } for pid=593 comm="syz.3.83" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 29.777902][ T24] audit: type=1400 audit(1767482785.490:229): avc: denied { ioctl } for pid=593 comm="syz.3.83" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 29.783700][ T581] EXT4-fs (loop2): 1 truncate cleaned up [ 29.826299][ T581] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 29.874450][ T24] audit: type=1400 audit(1767482785.600:230): avc: denied { read } for pid=601 comm="syz.3.85" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 29.991122][ T24] audit: type=1400 audit(1767482785.640:231): avc: denied { open } for pid=601 comm="syz.3.85" path="/dev/ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 30.014154][ T24] audit: type=1400 audit(1767482785.640:232): avc: denied { ioctl } for pid=601 comm="syz.3.85" path="/dev/ppp" dev="devtmpfs" ino=153 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 30.038657][ T24] audit: type=1400 audit(1767482785.720:233): avc: denied { mounton } for pid=580 comm="syz.2.79" path="/16/file2/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 30.061698][ T581] loop_set_status: loop2 () has still dirty pages (nrpages=2) [ 30.142015][ T278] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /16/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 30.166541][ T278] EXT4-fs error (device loop2): ext4_empty_dir:3115: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 30.186221][ T24] audit: type=1400 audit(1767482785.900:234): avc: denied { remove_name } for pid=278 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.222308][ T278] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /16/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 30.244028][ T278] EXT4-fs error (device loop2): ext4_empty_dir:3115: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 30.282230][ T278] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /16/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 30.304156][ T278] EXT4-fs error (device loop2): ext4_empty_dir:3115: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 30.324340][ T278] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /16/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 30.351491][ T24] audit: type=1400 audit(1767482786.080:235): avc: denied { mounton } for pid=611 comm="syz.0.89" path="/17/file0" dev="tmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 30.374112][ T24] audit: type=1400 audit(1767482786.080:236): avc: denied { create } for pid=607 comm="syz.3.88" dev="anon_inodefs" ino=16143 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 30.374711][ T278] EXT4-fs error (device loop2): ext4_empty_dir:3115: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 30.405088][ T597] F2FS-fs (loop4): Test dummy encryption mode enabled [ 30.481108][ T278] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /16/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 30.503590][ T278] EXT4-fs error (device loop2): ext4_empty_dir:3115: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 30.536705][ T597] F2FS-fs (loop4): invalid crc value [ 30.613975][ T597] F2FS-fs (loop4): Found nat_bits in checkpoint [ 30.740932][ T597] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 30.822537][ T597] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 31.005959][ T5] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 31.226032][ T15] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 31.276015][ T5] usb 1-1: Using ep0 maxpacket: 8 [ 31.299656][ T632] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.306849][ T632] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.314368][ T632] device bridge_slave_0 entered promiscuous mode [ 31.329348][ T632] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.337188][ T632] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.344770][ T632] device bridge_slave_1 entered promiscuous mode [ 31.383306][ T632] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.390456][ T632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.397741][ T632] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.404747][ T632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.412231][ T5] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 31.426944][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.439447][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.450471][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.459305][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.467565][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.474803][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.482988][ T296] device bridge_slave_1 left promiscuous mode [ 31.485983][ T298] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 31.489422][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.504234][ T296] device bridge_slave_0 left promiscuous mode [ 31.510507][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.518263][ T296] device veth1_macvtap left promiscuous mode [ 31.524377][ T296] device veth0_vlan left promiscuous mode [ 31.576075][ T5] usb 1-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 31.588568][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.596813][ T15] usb 5-1: config 0 has no interfaces? [ 31.602387][ T5] usb 1-1: Product: syz [ 31.606865][ T5] usb 1-1: Manufacturer: syz [ 31.611451][ T5] usb 1-1: SerialNumber: syz [ 31.618118][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.626460][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.629273][ T5] usb 1-1: config 0 descriptor?? [ 31.633601][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.652555][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.667302][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.683346][ T632] device veth0_vlan entered promiscuous mode [ 31.695244][ T632] device veth1_macvtap entered promiscuous mode [ 31.696934][ T5] usb 1-1: bad CDC descriptors [ 31.707031][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.715398][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.723388][ T5] usb 1-1: unsupported MDLM descriptors [ 31.729552][ T5] cdc_acm 1-1:0.0: Zero length descriptor references [ 31.739011][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.746557][ T5] cdc_acm: probe of 1-1:0.0 failed with error -22 [ 31.754439][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.762343][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.770448][ T15] usb 5-1: New USB device found, idVendor=1546, idProduct=1342, bcdDevice=10.b0 [ 31.780033][ T15] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.788301][ T15] usb 5-1: Product: syz [ 31.792469][ T15] usb 5-1: Manufacturer: syz [ 31.797331][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.806044][ T15] usb 5-1: SerialNumber: syz [ 31.806493][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.819155][ T15] usb 5-1: config 0 descriptor?? [ 31.886074][ T298] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 31.901425][ T298] usb 2-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 31.922697][ T298] usb 2-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 31.935986][ T298] usb 2-1: config 0 interface 0 has no altsetting 0 [ 31.942761][ T15] usb 1-1: USB disconnect, device number 2 [ 32.096014][ T298] usb 2-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 32.112196][ T298] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.136743][ T298] usb 2-1: Product: syz [ 32.150249][ T298] usb 2-1: Manufacturer: syz [ 32.164802][ T298] usb 2-1: SerialNumber: syz [ 32.183808][ T298] usb 2-1: config 0 descriptor?? [ 32.247983][ T25] usb 5-1: USB disconnect, device number 2 [ 32.481858][ T298] usb 2-1: USB disconnect, device number 2 [ 32.825964][ T635] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 33.075954][ T635] usb 1-1: Using ep0 maxpacket: 16 [ 33.226255][ T25] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 33.235985][ T635] usb 1-1: unable to get BOS descriptor or descriptor too short [ 33.283495][ T713] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 33.316110][ T635] usb 1-1: config 2 has an invalid interface number: 227 but max is 0 [ 33.324403][ T635] usb 1-1: config 2 has no interface number 0 [ 33.330623][ T635] usb 1-1: config 2 interface 227 has no altsetting 0 [ 33.475973][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 33.496023][ T635] usb 1-1: New USB device found, idVendor=1410, idProduct=9011, bcdDevice=7f.7f [ 33.505236][ T635] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.513496][ T635] usb 1-1: Product: syz [ 33.517709][ T635] usb 1-1: Manufacturer: syz [ 33.522291][ T635] usb 1-1: SerialNumber: syz [ 33.576002][ T298] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 33.616606][ T25] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 33.625070][ T25] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 33.633696][ T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 33.642765][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 33.652519][ T25] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 33.662270][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 33.675412][ T25] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 33.684567][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.693104][ T25] usb 2-1: config 0 descriptor?? [ 33.817283][ T635] usb 1-1: USB disconnect, device number 3 [ 33.958619][ T25] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 33.990501][ T25] usb 2-1: USB disconnect, device number 3 [ 34.001362][ T25] usblp0: removed [ 34.097327][ T723] cgroup: syz.4.124 (723) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 34.114577][ T723] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 34.146154][ T298] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 34.160267][ T298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.169227][ T298] usb 4-1: Product: syz [ 34.173551][ T298] usb 4-1: Manufacturer: syz [ 34.178762][ T298] usb 4-1: SerialNumber: syz [ 34.505983][ T25] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 34.755918][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 34.798454][ T725] F2FS-fs (loop0): invalid crc value [ 34.832607][ T725] F2FS-fs (loop0): Found nat_bits in checkpoint [ 34.875109][ T727] F2FS-fs (loop5): invalid crc value [ 34.880694][ T25] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 34.885967][ T725] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 34.889290][ T25] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 34.905586][ T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 34.923155][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 34.933343][ T25] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 34.943231][ T727] F2FS-fs (loop5): Found nat_bits in checkpoint [ 34.943277][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 34.963047][ T25] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 34.972173][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.985985][ T25] usb 2-1: config 0 descriptor?? [ 35.004416][ T727] F2FS-fs (loop5): Start checkpoint disabled! [ 35.016032][ T276] attempt to access beyond end of device [ 35.016032][ T276] loop0: rw=2049, want=45104, limit=40427 [ 35.027062][ T24] kauditd_printk_skb: 22 callbacks suppressed [ 35.027071][ T24] audit: type=1400 audit(1767482790.750:259): avc: denied { name_bind } for pid=736 comm="syz.4.127" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 35.059923][ T727] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 35.166511][ T657] attempt to access beyond end of device [ 35.166511][ T657] loop5: rw=2049, want=40976, limit=40427 [ 35.224148][ T24] audit: type=1400 audit(1767482790.950:260): avc: denied { name_bind } for pid=749 comm="syz.0.133" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 35.250536][ T24] audit: type=1400 audit(1767482790.980:261): avc: denied { read } for pid=749 comm="syz.0.133" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 35.277336][ T24] audit: type=1400 audit(1767482790.980:262): avc: denied { open } for pid=749 comm="syz.0.133" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 35.304139][ T25] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 35.306767][ T24] audit: type=1400 audit(1767482791.030:263): avc: denied { create } for pid=754 comm="syz.5.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 35.696519][ T25] usb 2-1: USB disconnect, device number 4 [ 35.716012][ T24] audit: type=1400 audit(1767482791.400:264): avc: denied { read write } for pid=688 comm="syz.1.113" name="lp0" dev="devtmpfs" ino=557 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 35.730617][ T25] usblp0: removed [ 35.739998][ T24] audit: type=1400 audit(1767482791.400:265): avc: denied { open } for pid=688 comm="syz.1.113" path="/dev/usb/lp0" dev="devtmpfs" ino=557 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 35.877698][ T761] F2FS-fs (loop0): invalid crc value [ 35.884968][ T761] F2FS-fs (loop0): Found nat_bits in checkpoint [ 35.907504][ T761] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 36.027788][ T24] audit: type=1400 audit(1767482791.760:266): avc: denied { load_policy } for pid=770 comm="syz.4.137" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 36.027855][ T771] SELinux: failed to load policy [ 36.075294][ T24] audit: type=1400 audit(1767482791.800:267): avc: denied { create } for pid=767 comm="syz.0.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 36.205583][ T24] audit: type=1326 audit(1767482791.930:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=780 comm="syz.0.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31100c0749 code=0x7ffc0000 [ 36.252718][ T786] netlink: 28 bytes leftover after parsing attributes in process `wޣ'. [ 36.326103][ T25] usb 4-1: USB disconnect, device number 2 [ 36.388962][ T804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.152'. [ 36.428400][ T799] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 36.449804][ T799] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.465177][ T817] tipc: Enabling of bearer rejected, failed to enable media [ 36.517320][ T825] netlink: 'syz.1.160': attribute type 1 has an invalid length. [ 36.586583][ T808] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 36.597942][ T808] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 36.712348][ T829] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue [ 36.737146][ T829] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.946674][ T857] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 36.968554][ T857] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 37.032972][ T857] EXT4-fs (loop3): re-mounted. Opts: (null) [ 37.045494][ T857] EXT4-fs (loop3): re-mounted. Opts: (null) [ 37.187781][ T870] netlink: 'syz.3.178': attribute type 4 has an invalid length. [ 37.211598][ T870] netlink: 'syz.3.178': attribute type 4 has an invalid length. [ 37.358133][ T881] tipc: Started in network mode [ 37.367389][ T881] tipc: Own node identity fe800000000000000000000000000012, cluster identity 4711 [ 37.377994][ T881] tipc: Enabled bearer , priority 10 [ 38.471216][ T900] netlink: 140 bytes leftover after parsing attributes in process `syz.1.190'. [ 38.482465][ T895] EXT4-fs (loop5): orphan cleanup on readonly fs [ 38.490813][ T895] EXT4-fs warning (device loop5): ext4_xattr_inode_get:509: inode #11: comm syz.5.189: EA inode hash validation failed [ 38.490988][ T902] SELinux: Context is not valid (left unmapped). [ 38.503511][ T25] tipc: 32-bit node address hash set to 120080fe [ 38.545101][ T895] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 38.561084][ T907] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 38.575743][ T895] EXT4-fs error (device loop5): ext4_xattr_inode_update_ref:997: inode #11: comm syz.5.189: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 38.581755][ T912] mmap: syz.4.194 (912) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 38.616679][ T895] EXT4-fs (loop5): Remounting filesystem read-only [ 38.625576][ T895] EXT4-fs warning (device loop5): ext4_xattr_inode_dec_ref_all:1185: inode #11: comm syz.5.189: ea_inode dec ref err=-117 [ 38.639436][ T895] EXT4-fs (loop5): 1 orphan inode deleted [ 38.645448][ T895] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55, [ 38.773509][ T917] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=917 comm=syz.5.196 [ 38.962236][ T924] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 38.974374][ T924] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 38.987654][ T924] EXT4-fs (loop4): invalid journal inode [ 38.993516][ T924] EXT4-fs (loop4): can't get journal size [ 39.000739][ T924] EXT4-fs error (device loop4): ext4_protect_reserved_inode:179: comm syz.4.198: blocks 2-2 from inode 3 overlap system zone [ 39.014519][ T924] EXT4-fs (loop4): failed to initialize system zone (-117) [ 39.022278][ T924] EXT4-fs (loop4): mount failed [ 39.053908][ T927] EXT4-fs (loop1): too many log groups per flexible block group [ 39.062226][ T927] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 39.069457][ T927] EXT4-fs (loop1): mount failed [ 39.338600][ T924] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.198: bg 0: block 248: padding at end of block bitmap is not set [ 39.353159][ T924] EXT4-fs error (device loop4): ext4_acquire_dquot:6224: comm syz.4.198: Failed to acquire dquot type 1 [ 39.365019][ T924] EXT4-fs (loop4): 1 truncate cleaned up [ 39.370959][ T924] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 39.383123][ T924] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.393760][ T944] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 39.447453][ T632] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 39.455071][ T632] FAT-fs (loop5): Filesystem has been set read-only [ 39.462590][ T632] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 39.496066][ T964] device syzkaller0 entered promiscuous mode [ 39.586904][ T971] tipc: Enabled bearer , priority 0 [ 39.594220][ T970] tipc: Resetting bearer [ 39.608005][ T970] tipc: Disabling bearer [ 39.742428][ T977] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue [ 39.754677][ T977] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.789392][ T994] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=994 comm=syz.0.229 [ 39.826677][ T994] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=994 comm=syz.0.229 [ 39.868976][ T1006] 9pnet: Insufficient options for proto=fd [ 39.973117][ T1002] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.980438][ T1002] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.987970][ T1002] device bridge_slave_0 entered promiscuous mode [ 40.041050][ T1002] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.057557][ T1002] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.071271][ T1010] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue [ 40.072455][ T1002] device bridge_slave_1 entered promiscuous mode [ 40.099365][ T1010] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.112994][ T24] kauditd_printk_skb: 114 callbacks suppressed [ 40.113003][ T24] audit: type=1400 audit(1767482795.840:381): avc: denied { write open } for pid=1009 comm="syz.3.237" path="/56/bus/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 40.142801][ T24] audit: type=1400 audit(1767482795.850:382): avc: denied { create } for pid=1027 comm="syz.0.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 40.174918][ T24] audit: type=1400 audit(1767482795.850:383): avc: denied { write } for pid=1027 comm="syz.0.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 40.225947][ T24] audit: type=1400 audit(1767482795.870:384): avc: denied { read append } for pid=1009 comm="syz.3.237" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 40.284367][ T1034] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 40.299485][ T24] audit: type=1400 audit(1767482795.870:385): avc: denied { open } for pid=1009 comm="syz.3.237" path="/56/bus/file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 40.322916][ T24] audit: type=1400 audit(1767482795.870:386): avc: denied { ioctl } for pid=1009 comm="syz.3.237" path="/56/bus/file2" dev="loop3" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 40.342491][ T1002] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.347216][ T24] audit: type=1400 audit(1767482795.930:387): avc: denied { read write } for pid=1029 comm="syz.0.243" name="loop-control" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 40.354086][ T1002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.378756][ T24] audit: type=1400 audit(1767482795.930:388): avc: denied { open } for pid=1029 comm="syz.0.243" path="/dev/loop-control" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 40.385896][ T1002] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.410472][ T24] audit: type=1400 audit(1767482795.930:389): avc: denied { ioctl } for pid=1029 comm="syz.0.243" path="/dev/loop-control" dev="devtmpfs" ino=114 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 40.417395][ T1002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.457520][ T1034] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.244: bg 0: block 104: invalid block bitmap [ 40.484907][ T1034] EXT4-fs error (device loop3) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 40.493363][ T24] audit: type=1400 audit(1767482795.990:390): avc: denied { read write } for pid=1031 comm="syz.0.245" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.517317][ T1034] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #11: comm syz.3.244: invalid indirect mapped block 1 (level 1) [ 40.517466][ T1034] EXT4-fs (loop3): 1 truncate cleaned up [ 40.517477][ T1034] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 40.548110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.556866][ T1043] SELinux: failed to load policy [ 40.562500][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.579602][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.600978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.602776][ T1047] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 40.609525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.627344][ T297] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 40.630934][ T1047] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 40.643993][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.651171][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.656257][ T1047] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 40.659108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.666876][ T1047] System zones: 0-2, 18-18, 34-34 [ 40.680517][ T1047] EXT4-fs error (device loop4): ext4_orphan_get:1395: inode #15: comm syz.4.250: iget: bad i_size value: 360287970189639680 [ 40.680774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.696896][ T1050] EXT4-fs (loop1): Ignoring removed bh option [ 40.716558][ T1047] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.250: couldn't read orphan inode 15 (err -117) [ 40.716905][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.736740][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.739457][ T1047] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 40.744652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.762809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.772677][ T1050] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,nogrpid,bh,,errors=continue [ 40.782972][ T1002] device veth0_vlan entered promiscuous mode [ 40.789782][ T1050] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.797835][ T1047] EXT4-fs error (device loop4): ext4_lookup:1830: inode #15: comm syz.4.250: iget: bad i_size value: 360287970189639680 [ 40.820239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.829332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.837817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.847269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.856336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.866852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.875647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.883808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.908325][ T1002] device veth1_macvtap entered promiscuous mode [ 40.917599][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.925762][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.934289][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.955961][ T1065] netlink: 'syz.3.256': attribute type 13 has an invalid length. [ 41.006772][ T1065] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.014086][ T1065] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.040656][ T1072] device syzkaller0 entered promiscuous mode [ 41.066640][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.074932][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.083718][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.092342][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.106649][ T1064] device syzkaller0 left promiscuous mode [ 41.122977][ T657] device bridge_slave_1 left promiscuous mode [ 41.129483][ T657] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.137290][ T657] device bridge_slave_0 left promiscuous mode [ 41.143537][ T657] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.151594][ T657] device veth1_macvtap left promiscuous mode [ 41.157704][ T297] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 41.161912][ T657] device veth0_vlan left promiscuous mode [ 41.167133][ T297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.180707][ T297] usb 1-1: Product: syz [ 41.184890][ T297] usb 1-1: Manufacturer: syz [ 41.189675][ T297] usb 1-1: SerialNumber: syz [ 41.278919][ T1085] netlink: 4 bytes leftover after parsing attributes in process `syz.6.228'. [ 41.440783][ T1108] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.275: bg 0: block 248: padding at end of block bitmap is not set [ 41.464457][ T1108] EXT4-fs error (device loop1): ext4_acquire_dquot:6224: comm syz.1.275: Failed to acquire dquot type 1 [ 41.476506][ T1108] EXT4-fs (loop1): 1 truncate cleaned up [ 41.482270][ T1108] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 41.491452][ T1108] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.503919][ T1104] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue [ 41.521815][ T1104] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.635268][ T1120] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 41.642917][ T1120] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 41.651673][ T1120] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 41.665344][ T1120] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 41.674692][ T1120] System zones: 0-1, 3-36 [ 41.680097][ T1120] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,init_itable,noauto_da_alloc,debug,dioread_nolock,nomblk_io_submit,nomblk_io_submit,noauto_da_alloc,,errors=continue [ 41.828380][ T1144] netlink: 24 bytes leftover after parsing attributes in process `syz.1.289'. [ 41.841954][ T1144] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1144 comm=syz.1.289 [ 41.908544][ T1155] syz.1.293[1155] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.908599][ T1155] syz.1.293[1155] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.011113][ T1172] Invalid argument reading file caps for ./file0 [ 42.026409][ T1165] EXT4-fs (loop3): orphan cleanup on readonly fs [ 42.036543][ T1165] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 42.055866][ T1174] netlink: 5 bytes leftover after parsing attributes in process `syz.0.301'. [ 42.067298][ T1165] EXT4-fs error (device loop3): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 42.086194][ T1165] EXT4-fs error (device loop3): ext4_clear_blocks:880: inode #13: comm syz.3.298: attempt to clear invalid blocks 2 len 1 [ 42.111158][ T1165] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz.3.298: invalid indirect mapped block 1819239214 (level 0) [ 42.126475][ T1165] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz.3.298: invalid indirect mapped block 1819239214 (level 1) [ 42.141099][ T1165] EXT4-fs (loop3): 1 truncate cleaned up [ 42.146938][ T1165] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv0,abort,bsddf,noquota,usrjquota=..,errors=continue [ 42.161518][ T1183] netlink: 16 bytes leftover after parsing attributes in process `syz.6.305'. [ 42.170519][ T1183] netlink: 4 bytes leftover after parsing attributes in process `syz.6.305'. [ 42.252025][ T1192] EXT4-fs (loop1): Ignoring removed orlov option [ 42.263747][ T304] udevd[304]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 42.299159][ T304] udevd[304]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 42.316867][ T1192] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,resgid=0x0000000000000000,,errors=continue [ 42.363278][ T304] udevd[304]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 42.405858][ T303] udevd[303]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 42.420177][ T1222] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue [ 42.426763][ T304] udevd[304]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 42.432865][ T1222] ext4 filesystem being mounted at /59/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.482672][ T303] udevd[303]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 42.526826][ T304] udevd[304]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 42.552850][ T1247] netlink: 28 bytes leftover after parsing attributes in process `syz.1.332'. [ 42.590897][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 42.638094][ T1252] netlink: 8 bytes leftover after parsing attributes in process `syz.6.337'. [ 42.641871][ T1253] syz.0.335[1253] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.657238][ T1253] syz.0.335[1253] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.676238][ T1253] netlink: 'syz.0.335': attribute type 4 has an invalid length. [ 42.712870][ T1263] Zero length message leads to an empty skb [ 42.803146][ T304] udevd[304]: setting mode of /dev/loop0 to 060660 failed: Read-only file system [ 42.812871][ T304] udevd[304]: setting owner of /dev/loop0 to uid=0, gid=6 failed: Read-only file system [ 42.867438][ T1271] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue [ 42.899512][ T1276] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 42.904809][ T303] udevd[303]: symlink '../../loop3' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000000900.tmp-b7:3' failed: Read-only file system [ 42.927462][ T1276] EXT4-fs error (device loop1): ext4_orphan_get:1395: inode #17: comm syz.1.349: inode has both inline data and extents flags [ 42.940846][ T1276] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.349: couldn't read orphan inode 17 (err -117) [ 42.953025][ T1276] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 42.996620][ T1271] netlink: 'syz.3.346': attribute type 3 has an invalid length. [ 43.381070][ T1305] EXT4-fs (loop1): Ignoring removed orlov option [ 43.390636][ T1310] netlink: 'syz.4.359': attribute type 4 has an invalid length. [ 43.399673][ T1305] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 43.412520][ T1310] netlink: 'syz.4.359': attribute type 4 has an invalid length. [ 43.466656][ T1305] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2220: inode #15: comm syz.1.358: corrupted in-inode xattr [ 43.515648][ T1305] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.358: couldn't read orphan inode 15 (err -117) [ 43.528276][ T1305] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,user_xattr,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,nodiscard,,errors=continue [ 43.576067][ T297] rtl8150 1-1:1.0: couldn't reset the device [ 43.594584][ T1320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.363'. [ 43.603975][ T297] rtl8150: probe of 1-1:1.0 failed with error -5 [ 43.683221][ T1320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.363'. [ 43.715825][ T297] usb 1-1: USB disconnect, device number 4 [ 43.784633][ T1336] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 43.802807][ T1336] EXT4-fs (loop3): 1 truncate cleaned up [ 43.808736][ T1336] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 43.867960][ T1348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.375'. [ 44.015354][ T1351] Alternate GPT is invalid, using primary GPT. [ 44.026152][ T1351] loop1: p2 p3 p7 [ 44.212401][ T1366] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,dioread_lock,barrier,journal_ioprio=0x0000000000000007,inode_readahead_blks=0x0000000000002000, [ 44.232827][ T1366] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.308472][ T1395] 9pnet: Could not find request transport: rdma [ 44.464756][ T1416] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 44.508867][ T9] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm kworker/u4:1: bg 0: block 345: padding at end of block bitmap is not set [ 44.524858][ T9] EXT4-fs (loop3): Remounting filesystem read-only [ 44.565294][ T1422] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 44.581962][ T1422] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 44.596493][ T1422] EXT4-fs (loop4): 1 truncate cleaned up [ 44.636379][ T1422] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,bsdgroups,quota,,errors=continue [ 44.668435][ T1432] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 44.678481][ T1432] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.749387][ T1432] EXT4-fs error (device loop3) in ext4_do_update_inode:5350: error 27 [ 44.766414][ T1432] EXT4-fs error (device loop3): ext4_dirty_inode:6157: inode #2: comm syz.3.412: mark_inode_dirty error [ 44.778314][ T1432] EXT4-fs error (device loop3) in ext4_do_update_inode:5350: error 27 [ 44.786959][ T1432] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #2: comm syz.3.412: mark_inode_dirty error [ 44.945818][ T1458] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 44.968005][ T1458] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,dioread_nolock,noquota,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue [ 44.999919][ T1476] Invalid argument reading file caps for ./file0 [ 45.011337][ T1471] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue [ 45.032213][ T1471] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.084901][ T1471] EXT4-fs error (device loop0): ext4_map_blocks:740: inode #15: comm syz.0.429: lblock 0 mapped to illegal pblock 0 (length 6) [ 45.125209][ T1471] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 45.137613][ T1471] EXT4-fs (loop0): This should not happen!! Data will be lost [ 45.137613][ T1471] [ 45.148761][ T1471] EXT4-fs error (device loop0): ext4_map_blocks:630: inode #15: comm syz.0.429: lblock 0 mapped to illegal pblock 0 (length 1) [ 45.185114][ T1471] EXT4-fs error (device loop0): ext4_ext_remove_space:2924: inode #15: comm syz.0.429: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 45.236137][ T24] kauditd_printk_skb: 333 callbacks suppressed [ 45.236250][ T24] audit: type=1400 audit(1767483056.966:722): avc: denied { watch watch_reads } for pid=1483 comm="syz.4.434" path="/97" dev="tmpfs" ino=526 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 45.306624][ T1471] EXT4-fs error (device loop0) in ext4_setattr:5721: Corrupt filesystem [ 45.335715][ T1508] syz_tun: refused to change device tx_queue_len [ 45.410654][ T1507] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 45.466721][ T1507] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 45.479204][ T1507] EXT4-fs (loop6): orphan cleanup on readonly fs [ 45.525510][ T1507] EXT4-fs error (device loop6): mb_free_blocks:1524: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 45.566439][ T1507] EXT4-fs (loop6): Remounting filesystem read-only [ 45.573657][ T1507] EXT4-fs error (device loop6) in ext4_do_update_inode:5350: error 27 [ 45.582801][ T1507] EXT4-fs error (device loop6): __ext4_ext_dirty:182: inode #12: comm syz.6.443: mark_inode_dirty error [ 45.594893][ T1507] EXT4-fs error (device loop6) in ext4_do_update_inode:5350: error 27 [ 45.604286][ T1507] EXT4-fs error (device loop6) in ext4_orphan_del:3292: error 27 [ 45.613039][ T1507] EXT4-fs error (device loop6) in ext4_do_update_inode:5350: error 27 [ 45.625415][ T1507] EXT4-fs error (device loop6): ext4_truncate:4396: inode #12: comm syz.6.443: mark_inode_dirty error [ 45.637009][ T1507] EXT4-fs error (device loop6) in ext4_orphan_cleanup:3108: error 27 [ 45.646010][ T1507] EXT4-fs (loop6): 1 truncate cleaned up [ 45.653026][ T9] Quota error (device loop6): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 45.666090][ T9] EXT4-fs (loop6): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 45.699900][ T9] Quota error (device loop6): write_blk: dquota write failed [ 45.707848][ T9] Quota error (device loop6): remove_free_dqentry: Can't write block (8) with free entries [ 45.718186][ T9] EXT4-fs (loop6): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 45.733927][ T9] Quota error (device loop6): write_blk: dquota write failed [ 45.744045][ T9] Quota error (device loop6): free_dqentry: Can't move quota data block (8) to free list [ 45.756615][ T1535] xt_hashlimit: max too large, truncated to 1048576 [ 45.774756][ T9] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 45.785312][ T9] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 45.831036][ T9] Quota error (device loop6): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 45.870455][ T9] EXT4-fs (loop6): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 45.885807][ T9] Quota error (device loop6): write_blk: dquota write failed [ 45.905071][ T9] Quota error (device loop6): free_dqentry: Can't move quota data block (5) to free list [ 45.966497][ T1507] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,errors=remount-ro,data_err=ignore,debug,resgid=0x000000000000ee01,noinit_itable,noinit_itable,journal_dev=0x0000000000000afb2 [ 46.075401][ T1566] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro, [ 46.085235][ T1566] ext4 filesystem being mounted at /98/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 46.132207][ T1566] EXT4-fs error (device loop3): htree_dirblock_to_tree:1092: inode #2: block 4: comm syz.3.468: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 46.152292][ T1566] EXT4-fs (loop3): Remounting filesystem read-only [ 46.207125][ T1579] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 46.252127][ T1579] SELinux: failed to load policy [ 46.418392][ T1605] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue [ 46.429343][ T1605] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.472609][ T1619] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 46.530464][ T1626] tipc: Invalid UDP bearer configuration [ 46.530485][ T1626] tipc: Enabling of bearer rejected, failed to enable media [ 46.755585][ T1635] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.498: Invalid block bitmap block 0 in block_group 0 [ 46.785170][ T1654] __nla_validate_parse: 3 callbacks suppressed [ 46.785176][ T1654] netlink: 300 bytes leftover after parsing attributes in process `syz.0.508'. [ 46.791591][ T1635] EXT4-fs error (device loop3): ext4_acquire_dquot:6224: comm syz.3.498: Failed to acquire dquot type 0 [ 46.813636][ T1635] EXT4-fs error (device loop3): ext4_free_blocks:5685: comm syz.3.498: Freeing blocks not in datazone - block = 0, count = 4096 [ 46.828444][ T1635] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.498: Invalid inode bitmap blk 0 in block_group 0 [ 46.841764][ T1635] EXT4-fs error (device loop3) in ext4_free_inode:360: Corrupt filesystem [ 46.863824][ T1661] netlink: 8 bytes leftover after parsing attributes in process `syz.6.503'. [ 46.924988][ T296] EXT4-fs error (device loop3): ext4_release_dquot:6260: comm kworker/u4:3: Failed to release dquot type 0 [ 46.969981][ T1635] EXT4-fs (loop3): 1 orphan inode deleted [ 46.975738][ T1635] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; ,errors=continue [ 47.008630][ T1667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.514'. [ 47.047035][ T1675] netlink: 28 bytes leftover after parsing attributes in process `syz.0.518'. [ 47.176947][ T1708] capability: warning: `syz.4.534' uses 32-bit capabilities (legacy support in use) [ 47.234341][ T1714] EXT4-fs (loop0): Ignoring removed oldalloc option [ 47.271519][ T304] udevd[304]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 47.274660][ T1714] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,oldalloc,usrquota,barrier,auto_da_alloc,nodioread_nolock, [ 47.290074][ T304] udevd[304]: symlink '../../loop0' '/dev/disk/by-uuid/00000000-0000-0006-0000-000000000000.tmp-b7:0' failed: Read-only file system [ 47.297972][ T1714] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.315455][ T324] udevd[324]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 47.330350][ T1714] EXT4-fs (loop0): re-mounted. Opts: [ 47.334170][ T324] udevd[324]: symlink '../../loop0' '/dev/disk/by-uuid/00000000-0000-0006-0000-000000000000.tmp-b7:0' failed: Read-only file system [ 47.373848][ T1723] 9pnet: Could not find request transport: rdma [ 47.965710][ T1747] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue [ 47.977369][ T1747] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.064794][ T1761] netlink: 'syz.6.555': attribute type 36 has an invalid length. [ 48.334461][ T1771] EXT4-fs (loop4): Ignoring removed orlov option [ 48.344656][ T324] udevd[324]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 48.374483][ T1771] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue [ 48.441693][ T324] udevd[324]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 48.638902][ T1803] netlink: 'syz.4.575': attribute type 4 has an invalid length. [ 48.654751][ T1803] netlink: 'syz.4.575': attribute type 4 has an invalid length. [ 48.663771][ T1805] netlink: 28 bytes leftover after parsing attributes in process `syz.3.576'. [ 48.784305][ T324] udevd[324]: symlink '../../loop6' '/dev/disk/by-uuid/1DE1-D756.tmp-b7:6' failed: Read-only file system [ 49.680589][ T1854] netlink: 'syz.6.595': attribute type 4 has an invalid length. [ 49.704796][ T1854] netlink: 17 bytes leftover after parsing attributes in process `syz.6.595'. [ 49.797779][ T324] udevd[324]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 49.825420][ T1857] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue [ 49.829776][ T324] udevd[324]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 49.848914][ T1857] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.879711][ T324] udevd[324]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 49.934666][ T1887] ================================================================== [ 49.943131][ T1887] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x842/0x3280 [ 49.951276][ T1887] Read of size 8 at addr ffff88810fb267c0 by task syz.0.611/1887 [ 49.959060][ T1887] [ 49.961392][ T1887] CPU: 0 PID: 1887 Comm: syz.0.611 Not tainted syzkaller #0 [ 49.968652][ T1887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 49.978703][ T1887] Call Trace: [ 49.981990][ T1887] __dump_stack+0x21/0x24 [ 49.986314][ T1887] dump_stack_lvl+0x169/0x1d8 [ 49.990977][ T1887] ? show_regs_print_info+0x18/0x18 [ 49.996186][ T1887] ? thaw_kernel_threads+0x220/0x220 [ 50.001452][ T1887] print_address_description+0x7f/0x2c0 [ 50.006977][ T1887] ? tc_setup_flow_action+0x842/0x3280 [ 50.012419][ T1887] kasan_report+0xe2/0x130 [ 50.016847][ T1887] ? flow_action_cookie_create+0x28/0x90 [ 50.022462][ T1887] ? tc_setup_flow_action+0x842/0x3280 [ 50.027992][ T1887] __asan_report_load8_noabort+0x14/0x20 [ 50.033690][ T1887] tc_setup_flow_action+0x842/0x3280 [ 50.038964][ T1887] ? __kmalloc+0x1a7/0x330 [ 50.043365][ T1887] ? flow_rule_alloc+0x32/0x2c0 [ 50.048206][ T1887] mall_replace_hw_filter+0x293/0x810 [ 50.053555][ T1887] ? pcpu_block_update_hint_alloc+0x8bc/0xc50 [ 50.059639][ T1887] ? mall_set_parms+0x410/0x410 [ 50.064486][ T1887] ? tcf_exts_destroy+0xb0/0xb0 [ 50.069426][ T1887] ? pcpu_alloc+0xf8a/0x16b0 [ 50.074024][ T1887] ? mall_set_parms+0x19d/0x410 [ 50.078921][ T1887] mall_change+0x528/0x750 [ 50.083372][ T1887] ? __kasan_check_write+0x14/0x20 [ 50.088467][ T1887] ? mall_get+0xa0/0xa0 [ 50.092606][ T1887] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 50.098477][ T1887] ? nla_strcmp+0xf4/0x140 [ 50.102917][ T1887] tc_new_tfilter+0x13f6/0x1a10 [ 50.107814][ T1887] ? mall_get+0xa0/0xa0 [ 50.111948][ T1887] ? tcf_gate_entry_destructor+0x20/0x20 [ 50.117650][ T1887] ? security_capable+0x87/0xb0 [ 50.122494][ T1887] ? ns_capable+0x8c/0xf0 [ 50.126802][ T1887] ? netlink_net_capable+0x125/0x160 [ 50.132076][ T1887] ? tcf_gate_entry_destructor+0x20/0x20 [ 50.137704][ T1887] rtnetlink_rcv_msg+0x800/0xb90 [ 50.142622][ T1887] ? rtnetlink_bind+0x80/0x80 [ 50.147285][ T1887] ? arch_stack_walk+0xee/0x140 [ 50.152294][ T1887] ? stack_trace_save+0x98/0xe0 [ 50.157307][ T1887] ? stack_trace_snprint+0xf0/0xf0 [ 50.162429][ T1887] ? memcpy+0x56/0x70 [ 50.166403][ T1887] ? avc_has_perm+0x234/0x360 [ 50.171059][ T1887] ? __kasan_slab_alloc+0xbd/0xf0 [ 50.176066][ T1887] ? slab_post_alloc_hook+0x5d/0x2f0 [ 50.181420][ T1887] ? ___sys_sendmsg+0x1f0/0x260 [ 50.186253][ T1887] ? avc_has_perm_noaudit+0x240/0x240 [ 50.191900][ T1887] ? selinux_nlmsg_lookup+0x3fb/0x4a0 [ 50.197254][ T1887] netlink_rcv_skb+0x1e0/0x430 [ 50.202096][ T1887] ? rtnetlink_bind+0x80/0x80 [ 50.206837][ T1887] ? netlink_ack+0xb80/0xb80 [ 50.211406][ T1887] ? __netlink_lookup+0x387/0x3b0 [ 50.216418][ T1887] rtnetlink_rcv+0x1c/0x20 [ 50.220820][ T1887] netlink_unicast+0x876/0xa40 [ 50.225562][ T1887] netlink_sendmsg+0x88d/0xb30 [ 50.230302][ T1887] ? schedule_preempt_disabled+0x20/0x20 [ 50.235911][ T1887] ? netlink_getsockopt+0x530/0x530 [ 50.241347][ T1887] ? security_socket_sendmsg+0x82/0xa0 [ 50.246787][ T1887] ? netlink_getsockopt+0x530/0x530 [ 50.251965][ T1887] ____sys_sendmsg+0x5a2/0x8c0 [ 50.256708][ T1887] ? __sys_sendmsg_sock+0x40/0x40 [ 50.261720][ T1887] ? import_iovec+0x7c/0xb0 [ 50.266203][ T1887] ___sys_sendmsg+0x1f0/0x260 [ 50.270882][ T1887] ? __sys_sendmsg+0x250/0x250 [ 50.275711][ T1887] ? __fdget+0x1a1/0x230 [ 50.279939][ T1887] __x64_sys_sendmsg+0x1e2/0x2a0 [ 50.284859][ T1887] ? __kasan_check_write+0x14/0x20 [ 50.289946][ T1887] ? ___sys_sendmsg+0x260/0x260 [ 50.294776][ T1887] ? __kasan_check_read+0x11/0x20 [ 50.299780][ T1887] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 50.305386][ T1887] do_syscall_64+0x31/0x40 [ 50.309778][ T1887] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 50.315650][ T1887] RIP: 0033:0x7f31100c0749 [ 50.320045][ T1887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.339816][ T1887] RSP: 002b:00007f310eb28038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.348212][ T1887] RAX: ffffffffffffffda RBX: 00007f3110316fa0 RCX: 00007f31100c0749 [ 50.356162][ T1887] RDX: 0000000020000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 50.364110][ T1887] RBP: 00007f3110144f91 R08: 0000000000000000 R09: 0000000000000000 [ 50.372073][ T1887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.380040][ T1887] R13: 00007f3110317038 R14: 00007f3110316fa0 R15: 00007ffdc47e84e8 [ 50.388017][ T1887] [ 50.390326][ T1887] Allocated by task 1887: [ 50.394650][ T1887] __kasan_kmalloc+0xda/0x110 [ 50.399852][ T1887] __kmalloc+0x1a7/0x330 [ 50.404103][ T1887] tcf_idr_create+0x5f/0x790 [ 50.409027][ T1887] tcf_idr_create_from_flags+0x61/0x70 [ 50.414468][ T1887] tcf_gact_init+0x2b4/0x520 [ 50.419120][ T1887] tcf_action_init_1+0x3e1/0x670 [ 50.424051][ T1887] tcf_action_init+0x1e6/0x700 [ 50.429055][ T1887] tcf_exts_validate+0x215/0x510 [ 50.434097][ T1887] mall_set_parms+0x4b/0x410 [ 50.438662][ T1887] mall_change+0x45c/0x750 [ 50.443055][ T1887] tc_new_tfilter+0x13f6/0x1a10 [ 50.447885][ T1887] rtnetlink_rcv_msg+0x800/0xb90 [ 50.452800][ T1887] netlink_rcv_skb+0x1e0/0x430 [ 50.457566][ T1887] rtnetlink_rcv+0x1c/0x20 [ 50.461956][ T1887] netlink_unicast+0x876/0xa40 [ 50.466697][ T1887] netlink_sendmsg+0x88d/0xb30 [ 50.471556][ T1887] ____sys_sendmsg+0x5a2/0x8c0 [ 50.476389][ T1887] ___sys_sendmsg+0x1f0/0x260 [ 50.481040][ T1887] __x64_sys_sendmsg+0x1e2/0x2a0 [ 50.485952][ T1887] do_syscall_64+0x31/0x40 [ 50.490358][ T1887] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 50.496224][ T1887] [ 50.498532][ T1887] The buggy address belongs to the object at ffff88810fb26700 [ 50.498532][ T1887] which belongs to the cache kmalloc-192 of size 192 [ 50.512574][ T1887] The buggy address is located 0 bytes to the right of [ 50.512574][ T1887] 192-byte region [ffff88810fb26700, ffff88810fb267c0) [ 50.526194][ T1887] The buggy address belongs to the page: [ 50.531862][ T1887] page:ffffea00043ec980 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10fb26 [ 50.542075][ T1887] flags: 0x4000000000000200(slab) [ 50.547081][ T1887] raw: 4000000000000200 ffffea0004313f80 0000000700000007 ffff888100043380 [ 50.555662][ T1887] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 50.564252][ T1887] page dumped because: kasan: bad access detected [ 50.570652][ T1887] page_owner tracks the page as allocated [ 50.576428][ T1887] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 95, ts 4013993447, free_ts 4013643963 [ 50.592527][ T1887] prep_new_page+0x179/0x180 [ 50.597202][ T1887] get_page_from_freelist+0x2235/0x23d0 [ 50.603004][ T1887] __alloc_pages_nodemask+0x268/0x5f0 [ 50.608464][ T1887] new_slab+0x84/0x3f0 [ 50.612604][ T1887] ___slab_alloc+0x2a6/0x450 [ 50.617181][ T1887] __slab_alloc+0x63/0xa0 [ 50.621495][ T1887] kmem_cache_alloc_trace+0x1b3/0x2e0 [ 50.627101][ T1887] kernfs_fop_open+0x343/0xb30 [ 50.631842][ T1887] do_dentry_open+0x793/0x1090 [ 50.636582][ T1887] vfs_open+0x73/0x80 [ 50.640539][ T1887] path_openat+0x27ad/0x3160 [ 50.645104][ T1887] do_filp_open+0x1b3/0x3e0 [ 50.649781][ T1887] do_sys_openat2+0x14c/0x6d0 [ 50.654474][ T1887] __x64_sys_openat+0x136/0x160 [ 50.659487][ T1887] do_syscall_64+0x31/0x40 [ 50.663891][ T1887] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 50.669858][ T1887] page last free stack trace: [ 50.674544][ T1887] free_unref_page_prepare+0x2b7/0x2d0 [ 50.680095][ T1887] __free_pages+0x14b/0x380 [ 50.684667][ T1887] free_pages+0x82/0x90 [ 50.688802][ T1887] selinux_genfs_get_sid+0x20b/0x250 [ 50.694172][ T1887] inode_doinit_with_dentry+0x86d/0xd70 [ 50.699703][ T1887] selinux_d_instantiate+0x27/0x40 [ 50.704790][ T1887] security_d_instantiate+0x9e/0xf0 [ 50.710056][ T1887] d_splice_alias+0x6d/0x390 [ 50.714645][ T1887] kernfs_iop_lookup+0x2c5/0x310 [ 50.719701][ T1887] path_openat+0x1127/0x3160 [ 50.724282][ T1887] do_filp_open+0x1b3/0x3e0 [ 50.729118][ T1887] do_sys_openat2+0x14c/0x6d0 [ 50.733881][ T1887] __x64_sys_openat+0x136/0x160 [ 50.738793][ T1887] do_syscall_64+0x31/0x40 [ 50.743302][ T1887] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 50.749171][ T1887] [ 50.751504][ T1887] Memory state around the buggy address: [ 50.757327][ T1887] ffff88810fb26680: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 50.765377][ T1887] ffff88810fb26700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 50.773585][ T1887] >ffff88810fb26780: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 50.781713][ T1887] ^ [ 50.787928][ T1887] ffff88810fb26800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 50.796240][ T1887] ffff88810fb26880: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 50.804318][ T1887] ================================================================== [ 50.812354][ T1887] Disabling lock debugging due to kernel taint [ 50.827909][ T24] kauditd_printk_skb: 177 callbacks suppressed [ 50.827919][ T24] audit: type=1400 audit(1767483062.566:897): avc: denied { read } for pid=76 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 50.864205][ T24] audit: type=1400 audit(1767483062.566:898): avc: denied { search } for pid=76 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.885690][ T24] audit: type=1400 audit(1767483062.566:899): avc: denied { append } for pid=76 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.908200][ T24] audit: type=1400 audit(1767483062.566:900): avc: denied { open } for pid=76 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.931006][ T24] audit: type=1400 audit(1767483062.566:901): avc: denied { getattr } for pid=76 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1